Blackberry: multiple PDF attachment vulnerabilities
While it is not yet widely spread, Security vulnerability on the smartphone is increasingly a concern, especially to corporate user. RIM has just revealed details of multiple security vulnerabilities in the PDF distiller of some released versions of the BlackBerry Attachment Service.
The vulnerabilities could enable a criminal to send an email that contained a specially crafted PDF file, which could be opened to view on a BlackBerry smartphone.
This could cause memory corruption and even lead to an attacker taking control of a computer that hosts the BlackBerry attachment service.
RIM issued an interim software update resolving the flaw in affected versions of BlackBerry Enterprise Server and BlackBerry Professional software. The update also contains fixes for two earlier similar vulnerabilities found in January, KB17118 and KB15766.
RIM recommended that BlackBerry users only open attachments from trusted sources as mobile best practice. [Source RIM Via ITPro]
I may or may not get a blackberry, so thanks for the post. I’m sticking to Outlook (on desktop) for now. Outlook Track-It (plugin) has been a great followup email reminder. It’s a cool add-in for Outlook and really helps with the GTD concept.