RIM Security Warns of Wireless DDoS Attacks

Hackers could one day turn ordinary smart phones into “rogue” devices to attack major wireless networks, Research In Motion’s security chief warned. Scott Totzke, RIM’s vice-president of BlackBerry security, said hackers could use smart phones to target wireless carriers using a technique similar...

CVE-2009-3944

Research In Motion RIM BlackBerry Browser on the BlackBerry 8800 allows remote attackers to cause a denial of service application hang via a JavaScript loop that configures the home page by using the setHomePage method and a DHTML behavior property...

Design/Logic Flaw

Research In Motion RIM BlackBerry Browser on the BlackBerry 8800 allows remote attackers to cause a denial of service application hang via a JavaScript loop that configures the home page by using the setHomePage method and a DHTML behavior property...

Critical Flaw in BlackBerry Desktop Manager Software

Research in Motion RIM has shipped a patch to cover a gaping hole in its BlackBerry Desktop Manager software. The vulnerability, which exists in a Lotus Notes Intellisync DLL that the BlackBerry Desktop Manager uses, allows a malicious user to perform an attack that leverages social engineering t...

Buffer overflow

Buffer overflow in the IBM Lotus Notes Intellisync ActiveX control in lnresobject.dll in BlackBerry Desktop Manager in Research In Motion RIM BlackBerry Desktop Software before 5.0.1 allows remote attackers to execute arbitrary code via a crafted web page. NOTE: some of these details are obtained...

CVE-2009-0306

CVE-2009-0306 describes a buffer overflow in the Lotus Notes Intellisync ActiveX control (lnresobject.dll) bundled with BlackBerry Desktop Manager/BlackBerry Desktop Software prior to 5.0.1, enabling remote code execution when a user visits a crafted web page. Affected product range includes Blac...

BlackBerry Dinged by Phishing Flaw

Research in Motion RIM has shipped a fix for a serious security vulnerability that exposes BlackBerry users to phishing attacks. The certificate handling vulnerability, which carries a CVSS severity score of 6.8, affects all versions of the BlackBerry device software. The flaw allows malicious...

Design/Logic Flaw

The Blackberry Browser in RIM BlackBerry Device Software 4.5.0 before 4.5.0.173, 4.6.0 before 4.6.0.303, 4.6.1 before 4.6.1.309, 4.7.0 before 4.7.0.179, and 4.7.1 before 4.7.1.57 does not properly handle "hidden" characters including a '\0' character in a domain name in the subject's Common Name ...

CVE-2009-3477

CVE-2009-3477 affects the BlackBerry Browser in BlackBerry Device Software 4.5.x to 4.7.x, where the CN in X.509 certificates can include a hidden '\0' character, allowing remote MITM attackers to spoof SSL servers with a certificate from a trusted CA. The issue stems from improper handling of hi...

CVE-2009-2575

CVE-2009-2575 is described as a remote DoS on BlackBerry 8800 caused by memory consumption when processing a large integer value for the length property of a Select object, and is noted as related to CVE-2009-1692. The Connected documents confirm that CVE-2009-1692 is a WebKit/Web browser issue w...

How to Plan for Smartphone Security in the Enterprise

From eWEEK Chris De Herrera One of the major challenges CIOs face is the deployment and security of smartphones in the enterprise. It’s important for CIOs to assess how their organization should secure the smartphones employees use to access corporate resources. Here, Knowledge Center contributor...

RIM issues patch for serious PDF flaw in BlackBerry software

There is a series of vulnerabilities in the widely used BlackBerry Enterprise Server software that could allow an attacker to compromise BlackBerry devices by sending a malicious PDF file. Research in Motion, the software’s maker, has issued a patch that fixes the problem in BES, as well as in...

Cross site scripting

Cross-site scripting XSS vulnerability in the "Customize Statistics Page" admin/statistics/ConfigureStatistics in the MDS Connection Service in Research in Motion RIM BlackBerry Enterprise Server BES before 4.1.6 MR5 allows remote attackers to inject arbitrary web script or HTML via the 1...

CVE-2009-0307

Cross-site scripting XSS vulnerability in the "Customize Statistics Page" admin/statistics/ConfigureStatistics in the MDS Connection Service in Research in Motion RIM BlackBerry Enterprise Server BES before 4.1.6 MR5 allows remote attackers to inject arbitrary web script or HTML via the 1...

CVE-2009-0307

The CVE-2009-0307 issue affects BlackBerry Enterprise Server (BES) MDS Connection Service, specifically the admin/statistics/ConfigureStatistics page. The vulnerability is a cross-site scripting (XSS) flaw caused by insufficient input validation in multiple parameters (customDate, interval, lastC...

CVE-2009-0305

CVE-2009-0305 involves stack-based buffer overflows in the BlackBerry Application Web Loader ActiveX control (AxLoader.ocx/AxLoader.dll) used by the RIM BlackBerry Application Web Loader 1.0. The vulnerability affects the load() and loadJad() entry points, triggered by processing overly long inpu...

CVE-2009-0219

The PDF distiller in the Attachment Service in Research in Motion RIM BlackBerry Enterprise Server BES 4.1.3 through 4.1.6, BlackBerry Professional Software 4.1.4, and BlackBerry Unite! before 1.0.3 bundle 28 performs delete operations on uninitialized pointers, which allows user-assisted remote...

CVE-2009-0219

Technical details for CVE-2009-0219 are not publicly available in the provided documents; monitor for updates.

BlackBerry Enterprise Server附件服务PDF过滤器bitmaps堆溢出漏洞

BUGTRAQ ID: 33248 BlackBerry Enterprise Server软件是BlackBerry企业解决方案中的一个组件，能够在无线设备、企业应用程序和无线网络之间起到中间连接的作用。 BlackBerry Enterprise Server所提供的附件服务没有正确地解析PDF文件中的数据流，在解析时未经检查数组的大小就用指向某些对象的数组填充了动态数组，如果指针过多的话就可以触发堆溢出，导致完全控制EIP寄存器。...

BlackBerry Enterprise Server附件服务PDF过滤器未初始化堆代码执行漏洞

BUGTRAQ ID: 33250 BlackBerry Enterprise Server软件是BlackBerry企业解决方案中的一个组件，能够在无线设备、企业应用程序和无线网络之间起到中间连接的作用。 BlackBerry Enterprise Server所提供的附件服务没有正确地解析PDF文件中的数据流。由于一个逻辑错误，附件服务可能在堆上分配从未初始化过的对象指针数组。在释放包含这个数组的对象时，会删除这个数组中的每个指针。由于从正确的未初始化内存，攻击者可以控制为这个数组所分配的内存块，导致将攻击者控制的值用作对象指针，在删除这些指针的时候就会执行任意代码。...