This site uses cookies. By continuing to browse this site you are agreeing to our use of cookies. Find out more.X

BlackBerry maker fixes PDF flaw that could crash server

Share this article:
The maker of the BlackBerry mobile device has fixed a PDF distiller vulnerability in the BlackBerry Attachment Service, which runs on the BlackBerry Enterprise.

Attackers could exploit the flaw if they are able to trick a user into opening a malicious PDF file attachment as part of an email, BlackBerry has said in an advisory. That could result in a crash of the Enterprise Server, which supports the popular smartphones.

Canada-based Research in Motion (RIM) said on Friday that it fixed the bug in BlackBerry Enterprise Server versions 4.1.3 through 4.1.5.

"There were no customer reports of any actual problems relating to this vulnerability, and RIM has since provided software updates that resolve the issue," RIM said in a statement.

The latest Enterprise Server version, 4.1.6 for Microsoft Exchange and IBM Lotus Domino, was not affected by the vulnerability, RIM said.

There are an estimated 14 million BlackBerry users worldwide.
Share this article:

SC webcasts on demand

This is how to secure data in the cloud


Exclusive video webcast & Q&A sponsored by Vormetric


As enterprises look to take advantage of the cloud, they need to understand the importance of safeguarding their confidential and sensitive data in cloud environments. With the appropriate security safeguards, such as fine-grained access policies, a move to the cloud is as, or more, secure than an on-premise data storage.


View the webcast here to find out more

More in News

Movers and makers: September-October

Movers and makers: September-October

The latest news on the people and companies at the forefront of information security.

THREAT OF THE MONTH: SVPENG

THREAT OF THE MONTH: SVPENG

Etay Maor dissects SVPENG - what it is and how to prevent it.

NEWS BRIEFS: September - October

NEWS BRIEFS: September - October

Six Masters degree courses in cyber security to be certified by GCHQ, the highly controversial Data Retention and Investigatory Powers bill is passed and more security news.