BlackBerry Enterprise Server PNG and TIFF Image Processing Vulnerabilities

Multiple vulnerabilities have been identified in BlackBerry Enterprise Server, which can be exploited by malicious people to compromise a vulnerable system.

1. An unspecified error within the BlackBerry MDS Connection Service when processing PNG and TIFF images can be exploited when a specially crafted PNG or TIFF image on a webpage is being viewed on a BlackBerry smartphone.
2. An unspecified error within the BlackBerry Messaging Agent when processing embedded PNG and TIFF images in emails can be exploited via a specially crafted PNG or TIFF image being sent in an email to a BlackBerry smartphone.

Successful exploitation of the vulnerabilities may allow execution of arbitrary code.