Just so owners of the iPhone don't feel left out, the Blackberry crowd (myself included) can enjoy the growing attention of attackers also...
BlackBerry server faced with critical zero-day
To quote:
A critical zero-day flaw in BlackBerry Enterprise Server could be exploited by attackers to gain access to sensitive data, according to an advisory issued by the French Security Incident Response Team (FrSIRT).
The flaw is a PDF attachment handling error in the BlackBerry Attachment Service, FrSIRT said. An attacker could exploit the flaw by tricking a user to open a malicious PDF file attachment.
The vulnerability has a Common Vulnerability Scoring System (CVSS) score of 9.0. FrSIRT has rated it "critical."
BlackBerry maker Research in Motion has confirmed the flaw and issued a warning to customers. A patch has not been released for Enteprise Server. As a workaround, companies can prevent the server from processing PDF Files.
"This issue has been escalated internally to our development team," RIM said in its advisory. "No resolution time frame is currently available."
Well, see there you go, the issue has been escalated. Whew. I will twiddle my thumbs and not read any PDFs from my Blackberry until a resolution time frame have been worked out..and then wait for the patch. I mean really, how many business people read PDFs anyway?!?
Comments