Research in Motion (RIM) has released details of multiple security vulnerabilities in the PDF distiller of some released versions of the BlackBerry Attachment Service.
The vulnerabilities could enable a criminal to send an email that contained a specially crafted PDF file, which could be opened to view on a BlackBerry smartphone.
This could cause memory corruption and even lead to an attacker taking control of a computer that hosts the BlackBerry attachment service.
RIM issued an interim software update resolving the flaw in affected versions of BlackBerry Enterprise Server and BlackBerry Professional software.
The update also contains fixes for two earlier similar vulnerabilities found in January, KB17118 and KB15766.
RIM recommended that BlackBerry users only open attachments from trusted sources as mobile best practice.
