Vulnerability in BlackBerry MDS Connection Service could allow remote code execution

A recent post on BlackBerry website highlights that vulnerabilities have been detected in the way the BlackBerry MDS Connection Service and the BlackBerry Messaging Agent process TIFF images for rendering on the BlackBerry smartphone.

Armed with a Common Vulnerability Scoring System (CVSS) score of 10.0 (high severity), what makes these vulnerabilities a cause of worry is, if successful, it may allow an attacker to win access and then execute a code on the BlackBerry Enterprise Server. It doesn't end there. Based on the available priveleges to the configured BlackBerry Enterprise Server service account, the miscreant may even be able to extend his reach to other non-segmented parts of the network.

Provides interim security update

The post adds, “RIM is not aware of any attacks on or specifically targeting BlackBerry Enterprise Server customers, and recommends that affected customers update to the latest available software version to be fully protected from these vulnerabilities.”

What's more, to make good of these vulnerabilities in the way the BlackBerry Messaging Agent or the BlackBerry Collaboration Service processes TIFF images, the attacker would have to embed that questionable TIFF image in an email or enterprise instant message and send the message to the BlackBerry smartphone user. Shockingly, the user does not have to click a link or an image, or even view the mail or IM for the attack to go through.

More from News Analysis

The company, however, has issued BlackBerry Enterprise Server version 5.0.4 MR2, which it says fixes these holes and can be used for all affected supported versions of BlackBerry Enterprise Server. The company has also issued an interim security update that it states is verified with supported versions of BlackBerry Enterprise Server and BlackBerry Enterprise Server Express.

The interim security update essentially replaces the installed image.dll file, which the affected components use, with an image.dll file that is not affected by the vulnerabilities.