CVE-2011-0291

The BlackBerry PlayBook service on the Research In Motion RIM BlackBerry PlayBook tablet with software before 1.0.8.6067 allows local users to gain privileges via a crafted configuration file in a backup archive...

PlayBook Jailbreak Tool Released

The researchers who last week said they had succeeded in jailbreaking the RIM PlayBook tablet have now posted a detailed walkthrough of how users can accomplish the same task on their own. The technique requires the use of a custom tool, but otherwise is fairly straightforward. One of the...

RIM PlayBook Jailbroken, Researchers Claim

A group of researchers is claiming that they’ve found a root exploit that enables them to jailbreak the BlackBerry PlayBook tablet made by Research In Motion. In a video demonstration of the jailbreak, one of the researchers shows off the ability to change the settings on a PlayBook and says that...

CVE-2011-0290

The BlackBerry Collaboration Service in Research In Motion RIM BlackBerry Enterprise Server BES 5.0.3 through MR4 for Microsoft Exchange and Lotus Domino allows remote authenticated users to log into arbitrary user accounts associated with the same organization, and send messages, read messages,...

CVE-2011-0290

The CVE-2011-0290 entry concerns the BlackBerry Collaboration Service in Research In Motion (RIM) BlackBerry Enterprise Server (BES) 5.0.3 through MR4 for Microsoft Exchange and Lotus Domino. Affected component: BlackBerry Collaboration Service. Description states that remote authenticated users ...

RIM Exec Says Blackberry Service Wasn't Hacked…Really!

Research in Motion CTO David Yach said that the rolling service outages that its Blackberry mobile phone system has experienced in the last few days wasn’t due to a security compromise, but to an unsuccessful fail over following a core switch failure in Europe. “I know there’s often speculation i...

BlackBerry Security Guide by Incident Response Team (BBSIRT)

BlackBerry Security Guide by Incident Response Team BBSIRT On September 30th, we reported that a Russian security company Elcomsoft, has upgraded a phone-password cracking suite with the ability to figure out the master device password for Research in Motion's BlackBerry devices. In response to...

BlackBerry Enterprise Server vulnerable to malicious image file

BlackBerry Enterprise Server vulnerable to malicious image file There are remotely and easily exploitable vulnerabilities in the BlackBerry Enterprise Server that could allow an attacker to gain access to the server by simply sending a malicious image file to a user's BlackBerry device. The...

Sybase Unwired Platform本地安全绕过漏洞

Bugtraq ID: 49114 Sybase Unwired Platform是一款移动企业应用程序平台，可支持快捷地开发移动应用程序，以使企业用户能够利用多种移动设备安全地访问广泛的业务数据。 RIM黑莓设备平台上的Sybase Unwired Platform包含一个安全漏洞，其设备数据库在某些条件下没有正确加密。恶意物理能访问的用户可绕过某些安全限制。 Sybase Unwired Platform 2.0 Sybase Unwired Platform 1.5.5 Sybase Unwired Platform 1.5.3 Sybase Unwired Platform...

RIM Releases Security Advisory for BlackBerry Enterprise Server

RIM has released a security advisory to address a vulnerability in the BlackBerry MDS Connection Service and BlackBerry Messaging Agent for the BlackBerry Enterprise Server. The vulnerability may allow an attacker to execute arbitrary code or gain unauthorized access to the BlackBerry Enterprise...

RIM Releases Security Advisory for BlackBerry PlayBook

RIM has released a security advisory to address vulnerabilities in the Adobe Flash Player version included with the BlackBerry PlayBook tablet software. These vulnerabilities may allow an attacker to execute arbitrary code or cause a denial of service condition. US-CERT encourages users and...

Hackers Exploit BlackBerry Browser Bug !

Research in Motion has found a security flaw and recommended that user disable JavaScript in browsers on certain phones, threatening the BlackBerry maker's iron-clad reputation for security. "The issue could result in remote code execution on affected BlackBerry smartphones," the Waterloo,...

CVE-2011-1290

Integer overflow in WebKit, as used on the Research In Motion RIM BlackBerry Torch 9800 with firmware 6.0.0.246, in Google Chrome before 10.0.648.133, and in Apple Safari before 5.0.5, allows remote attackers to execute arbitrary code via unknown vectors related to CSS "style handling," nodesets,...

Integer overflow

Integer overflow in WebKit, as used on the Research In Motion RIM BlackBerry Torch 9800 with firmware 6.0.0.246, in Google Chrome before 10.0.648.133, and in Apple Safari before 5.0.5, allows remote attackers to execute arbitrary code via unknown vectors related to CSS "style handling," nodesets,...

CVE-2011-1290

CVE-2011-1290 refers to an integer overflow in WebKit used by the BlackBerry Torch 9800 (firmware 6.0.0.246), Google Chrome prior to 10.0.648.133, and Safari prior to 5.0.5. The overflow occurs in CSS style handling, nodesets, and a length value, enabling remote code execution. The issue was demo...

CVE-2011-1290

Removed by vendor...

CVE-2011-1416

The Research In Motion RIM BlackBerry Torch 9800 with firmware 6.0.0.246 allows attackers to read the contents of memory locations via unknown vectors, as demonstrated by Vincenzo Iozzo, Willem Pinckaers, and Ralf-Philipp Weinmann during a Pwn2Own competition at CanSecWest 2011...

CVE-2011-1416

The Research In Motion RIM BlackBerry Torch 9800 with firmware 6.0.0.246 allows attackers to read the contents of memory locations via unknown vectors, as demonstrated by Vincenzo Iozzo, Willem Pinckaers, and Ralf-Philipp Weinmann during a Pwn2Own competition at CanSecWest 2011...

CVE-2011-1416

CVE-2011-1416 pertains to the RIM BlackBerry Torch 9800 with firmware 6.0.0.246, where an attacker could read memory contents via unknown vectors. The linked sources reference a Pwn2Own/CanSecWest 2011 demonstration by Iozzo, Pinckaers, and Weinmann. The vulnerability affects memory disclosure wi...

BlackBerry Hacked via Drive-By Download at Pwn2Own !

BlackBerry OS fell during the second day of the Pwn2Own hacking competition as a result of a drive-by download attack that chained together several exploits. The trio that managed to hack RIM's mobile operating system, Vincenzo Iozzo, Willem Pinckaers and Ralf Philipp Weinmann, exploited two...