Blackberries Vulnerable to Malicious E-Mail Attacks, Vendor Warns

Blackberry handheld communication devices can be just as vulnerable as desktop and laptop computers to certain malicious e-mail attacks.

One of the largest makers of Blackberry, devices Research in Motion of Waterloo, Ontario, Canada, is warning its customers that their popular handheld devices could lose their ability to view attachments if a certain type of malicious e-mail image is opened on them. In a positing on the customer support web site, the company says a flaw in the design of its Blackberry Enterprise edition makes the device vulnerable to attacks by specially crafted Tagged Image File Format (TIFF) images.

The company said that it has already developed a remedy for the problem and will make the upgrade available to users as soon as it completes testing of it. In the meantime, Research in Motion is warning users to not open any TIFF images in their Blackberry’s attachment services or to disable the attachment services altogether. Disabling the services may be required, the company says, because even though an e-mailed TIFF extension has been removed from the list of supported file types, the service may automatically detect a TIFF file with a renamed extension and attempt to process the file.

The Web site link explains the issue in more detail and provides detailed directions on how to disable the attachment services. The site also features a link to the United States Computer Services Readiness Team’s Web site, where there is additional information on how personal and business users of mobile devices can protect themselves from viruses, worms and identity theft.

While opening a malicious TIFF will kill the Blackberry’s ability to display a view of attachments, the attack does not impact the devices’ other services, such as sending and receiving messages, making phone calls, browsing the Internet, and accessing corporate networks.
~JC

You may like these other stories...

As complex as federal tax can get, at least you're only dealing with one agency: the IRS. But when you get into state and local sales tax, you're coordinating hundreds of jurisdictions that are constantly changing....
All that was needed on Tuesday was a voice vote for the House of Representatives to pass a bill that would prevent state and local governments from taxing access to the Internet.Now the ball is in the Senate’s court....
Many bootstrapped startups do not have the budgets to bring on dedicated IT experts who can build out infrastructure and provide immediate solutions to end users. Small businesses must simplify both hardware and software...

Upcoming CPE Webinars

Jul 23
We can’t deny a great divide exists between the expectations and workplace needs of Baby Boomers and Millennials. To create thriving organizational performance, we need to shift the way in which we groom future leaders.
Jul 24
In this presentation Excel expert David Ringstrom, CPA revisits the Excel feature you should be using, but probably aren't. The Table feature offers the ability to both boost the integrity of your spreadsheets, but reduce maintenance as well.
Jul 31
In this session Excel expert David Ringstrom helps beginners get up to speed in Microsoft Excel. However, even experienced Excel users will learn some new tricks, particularly when David discusses under-utilized aspects of Excel.
Aug 5
This webcast will focus on accounting and disclosure policies for various types of consolidations and business combinations.