January 13, 2009 7:05 AM PST

RIM issues security patches for BlackBerry

Research In Motion issued on Monday interim patches to address critical security flaws in BlackBerry software.

The flaws affect BlackBerry Enterprise Server software version 4.1 Service Pack 3 through Service Pack 6. The BlackBerry Professional Software 4.1 Service Pack 4 is also affected, RIM notes in its security advisory.

RIM is asking corporate customers to install an interim patch for the BlackBerry Enterprise Server and an interim patch for the BlackBerry Professional Software.

RIM also advises BlackBerry users to open PDF attachments only from "trusted sources." The company notes in its security advisory:

Multiple security vulnerabilities exist in the PDF distiller of some released versions of the BlackBerry Attachment Service. These vulnerabilities could enable a malicious individual to send an email message containing a specially crafted PDF file, which when opened for viewing on a Blackberry smartphone, could cause memory corruption and possibly lead to arbitrary code execution on the computer that hosts the BlackBerry Attachment service.

Such security flaws will do little to bolster President-elect Barack Obama's hopes for keeping his BlackBerry while in the White House.

Dawn Kawamoto covers enterprise security and financial news relating to technology for CNET News. E-mail Dawn.

Topics:: Vulnerabilities & attacks

Tags:: BlackBerry,; Research In Motion,; smartphone security,; security vulnerabilities,; RIM

Share:: Digg; Del.icio.us; Reddit; Facebook; Twitter

About Security

Online security is threatened by more than hacking and phishing attempts. Check here for the latest updates on software vulnerabilities, data leaks, and rapidly spreading viruses--and learn how to protect your systems.

Add this feed to your online news reader

Inside CNET News

Scroll Left Scroll Right

The Download Blog
Google Chrome now bundled with Avast
You wouldn't necessarily expect it, but Avast and Google Chrome might be the next peanut butter-and-jelly combo in the software world.
Gallery
Top-rated reviews of the week (photos)
Crave
The 30 most anticipated games of 2010
With 2009 almost behind us, it's time to look forward and make our picks for the hottest games of 2010.
Beyond Binary
Windows 7 family pack starting to sell out
Microsoft had said it was a "while supplies last" offer and, sure enough, supplies are starting to run out. It's still available at Amazon, though.
Video
Microsoft's new mapping tricks
Technically Incorrect
In new ad, AT&T, Luke Wilson say Verizon is slow
The latest punch in the battle between AT&T and Verizon sees Luke Wilson being downloaded, allegedly via Verizon's 3G, without his head.
Video
A window into the Microsoft Store
Green Tech
'Green' gas and diesel get boost in biofuel grants
Federal government pumps more than $600 million in projects to demonstrate advanced biofuels, including cellulosic ethanol and plant-based replacements for diesel, jet fuel, and gasoline.
Technically Incorrect
Bartender, gimme a beer from outer space
Japanese brewer Sapporo launches a beer it says is made from barley grown on the International Space Station. The 250 winners of a lottery for it will each receive a six-pack.
Gallery
Solar Impulse aircraft flies, briefly (photos)
Crave
@Uh-oh: Twoddler lets toddlers send tweets
A tricked-out Fisher Price Activity Center with pictures of family members and friends attached and an Arduino board inside lets toddlers sent predefined messages to their own Twitter accounts.
30 Days of Innovation
Build muscle, charge your phone with YoGen
Easy Energy will launch the YoGen at CES 2010, a mobile charger that solely relies on hand power. The pocket-size charger lets you generates energy by repeatedly pulling a ripcord.