Multiple vulnerabilities have been reported in BlackBerry Enterprise Server, which can be exploited by malicious people to compromise a vulnerable system.

1) An unspecified error within the BlackBerry MDS Connection Service when processing PNG and TIFF images can be exploited when a specially crafted PNG or TIFF image on a webpage is being viewed on a BlackBerry smartphone.

2) An unspecified error within the BlackBerry Messaging Agent when processing embedded PNG and TIFF images in emails can be exploited via a specially crafted PNG or TIFF image being sent in an email to a BlackBerry smartphone.

Successful exploitation of the vulnerabilities may allow execution of arbitrary code.

Please see the vendor's advisory for a list of affected versions.

Solution
Apply updates. Please see the vendor's advisory for details.

Provided and/or discovered by
Reported by the vendor.

Original Advisory
http://www.blackberry.com/btsc/KB27244

Deep Links
Links available to Secunia VIM customers