BlackBerry PDF flaw leaves networks open to attack
Much focus has been on the iPhone’s impact on network security, but it seems the BlackBerry has a potentially disastrous flaw which it has kept quiet and unpatched.

Business users have been warned that opening PDF files with their Blackberry devices could compromise their corporate network.
The flaw scored nine out of ten on Blackberry's common vulnerability scoring system and is seen as highly severe. RIM disclosed the vulnerability in an advisory, but so far a patch hasn't been released to deal with the problem, and no details have been given about how long it will take to deal with it.
The advisory said: "This issue has been escalated internally to our development team. No resolution time frame is currently available."
The vulnerability is specifically found in the PDF distiller of the BlackBerry Attachment Service.
A malicious user can take advantage by creating a specially made PDF file in an email message which can cause arbitrary code to execute on the device.
If the Blackberry user then views the PDF file while connected to the BlackBerry Enterprise Server of the corporate network, it can leave it open to attack.
The flaw is found on the BlackBerry Enterprise Server software version 4.1 Service Pack 3 (4.1.3) through 4.1 Service Pack 5 (4.1.5)
Get the ITPro daily newsletter
Sign up today and you will receive a free copy of our Future Focus 2025 report - the leading guidance on AI, cybersecurity and other IT challenges as per 700+ senior executives
RIM has said: "In regard to the precautionary security advisory issued by RIM which informed customers about a potential vulnerability in BlackBerry Enterprise Server versions 4.1.3 through 4.1.5, there were no customer reports of any actual problems relating to this vulnerability and RIM has since provided software updates that resolve the issue."
It also said that the vulnerability does not exist in the newly released BlackBerry Enterprise Server 4.1.6 for Microsoft Exchange and IBM Lotus Domino.
Read more on how smartphones like the BlackBerry as well as newer gadgets like the iPhone could be used safely on a corporate network.
-
M&S suspends online sales as 'cyber incident' continues
News Marks & Spencer (M&S) has informed customers that all online and app sales have been suspended as the high street retailer battles a ‘cyber incident’.
By Ross Kelly
-
Manners cost nothing, unless you’re using ChatGPT
Opinion Polite users are costing OpenAI millions of dollars each year – but Ps and Qs are a small dent in what ChatGPT could cost the planet
By Ross Kelly
-
Blackberry revenue falls by 4% as cyber security division takes hit
News Despite this, the company’s Internet of Things (IoT) division increased its revenue by 28% as it attracted new customers from the automotive sector
By Zach Marzouk
-
BlackBerry revival is officially dead as OnwardMobility shuts down
News The Texas-based startup is mysteriously shutting down and taking its ultra-secure 5G BlackBerry with it
By Bobby Hellard
-
BlackBerry and AWS are developing a standardized vehicle data platform
News Platform will give automakers a standardized way to process data from vehicle sensors in the cloud
By Rene Millman
-
BlackBerry thwarts mobile phishing attacks with new AI tools
News The company's Protect Mobile platform alerts users to potential malware before a link is clicked
By Tyler Omoth
-
BlackBerry Persona Desktop delivers zero-trust security at the endpoint
News New security solution learns user behavior and can take action if there’s an abnormality
By Justin Cupler
-
A 5G BlackBerry phone with physical keyboard is coming in 2021
News The business phone to be resurrected with OnwardMobility and FIH Mobile planning a security-savvy enterprise handset
By Bobby Hellard
-
The business smartphone is dead
In-depth BlackBerry’s demise signals the end of the business-first handset
By Carly Page
-
BlackBerry Key2 review: The best physical keyboard no one asked for
Reviews Despite the improvements, the flaws of BlackBerry’s Key range are still front and centre
By Bobby Hellard