A weakness was found in the BlackBerry browser. If you want to avoid it, users are advised to turn off the JavaScript function in your browser.
The weakness was rooted in Webkit, Open Source browser engine used by the BlackBerry. In a hacking contest in Canada, the weaknesses that could be used to access data, a collection of images and remote code execution.
As quoted from SearchSecurity, Friday (18/03/2011), in a contest called Pwn2Own, Webkit weakness was exploited in conjunction with other cracks.
Although can be used to access data on external storage device is the BlackBerry, that gap can not be used to access email and calendar data.
The weakness was not in Javascript, but to exploit it needs Java. Thus, one way to avoid that gap is to turn off JavaScript in your BlackBerry browser.
Operating systems that are affected this vulnerability is the BlackBerry Device Software version 6.0 and above.
The weakness was rooted in Webkit, Open Source browser engine used by the BlackBerry. In a hacking contest in Canada, the weaknesses that could be used to access data, a collection of images and remote code execution.
As quoted from SearchSecurity, Friday (18/03/2011), in a contest called Pwn2Own, Webkit weakness was exploited in conjunction with other cracks.
Although can be used to access data on external storage device is the BlackBerry, that gap can not be used to access email and calendar data.
The weakness was not in Javascript, but to exploit it needs Java. Thus, one way to avoid that gap is to turn off JavaScript in your BlackBerry browser.
Operating systems that are affected this vulnerability is the BlackBerry Device Software version 6.0 and above.
In Pwn2Own, BlackBerry devices were burglarized Torch 9800. In addition, the same day, the participants managed to break into the iPhone 4.
On his official site, Research In Motion (RIM) classify this gap with the number Common Vulnerability Scoring System (CVSS) 6.8 (scale of 1-10). RIM confirms, there is no evidence that this gap has to be used by anyone outside of the show Pwn2Own.
