# MA-274.032011: MyCERT Alert - Critical Vulnerability in Webkit Browser Engine for BlackBerry

**Date:** 17 Mar 2011  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-274.032011  
**Advisory ID:** MA-274.032011

---

**1.0 Introduction**
A critical vulnerability (CVE-2011-1290) has been identified in the Webkit browser engine for BlackBerry devices with Device Software version 6.0 and later causing a high impact memory corruption in style handling flaw. The vulnerability, if successfully exploited will cause the application to crash and could potentially allow an attacker to take control of the affected system. It will also allow the attacker to access user data stored on the media card and in the built-in media storage on the BlackBerry devices. However, application storage such as email, calendar and contact are safe.
**2.0 Impact**
The vulnerability, if successfully exploited will cause the application to crash and could potentially allow an attacker to take control of the affected system. It will also allow the attacker to access user data stored on the media card and in the built-in media storage on the BlackBerry devices. However, application storage such as email, calendar and contact are safe. Unsuccessful attacks may cause denial-of-service (DoS) outcomes on the browser.
**3.0 Affected Products**
- BlackBerry smartphones running BlackBerry Device Software version 6.0 and later
**4.0 RecommendationsAs of the writing of this advisory, Research In Motion Limited has not released any security patches for this vulnerability. However, users can use the following recommendation as a temporary workaround:**
> **4.1 Disable JavaScript use in the BlackBerry Browser**
>
> Users of BlackBerry Device Software version 6.0 and later can disable the use of JavaScript in the BlackBerry Browser to prevent exploitation of the vulnerability. The issue is not in JavaScript but the use of JavaScript is necessary to exploit the vulnerability. [1]
>
> Instructions for turning off JavaScript based on the smartphone model:
>
> - **[BlackBerry Torch 9800](http://docs.blackberry.com/en/smartphone_users/deliverables/18577/Turn_off_JavaScript_support_60_1049442_11.jsp)**
>
> - **[BlackBerry Style 9670](http://docs.blackberry.com/en/smartphone_users/deliverables/21510/Turn_off_JavaScript_support_60_1049442_11.jsp)**
>
> - **[BlackBerry Bold 9700](http://docs.blackberry.com/en/smartphone_users/deliverables/23895/Turn_off_JavaScript_support_60_1049442_11.jsp)**
>
> - **[BlackBerry Bold 9650](http://docs.blackberry.com/en/smartphone_users/deliverables/23782/Turn_off_JavaScript_support_60_1049442_11.jsp)**
>
> - **[BlackBerry Curve 9300](http://docs.blackberry.com/en/smartphone_users/deliverables/25326/Turn_off_JavaScript_support_60_1049442_11.jsp)**
>
> - **[BlackBerry Pearl 9100](http://docs.blackberry.com/en/smartphone_users/deliverables/25417/Turn_off_JavaScript_support_60_1049442_11.jsp)**
>
> **4.2 Disable the BlackBerry Browser**
>
> - Click Service Exclusivity policy group.
> - Set Allow Other Browser Services to False.
> - Click Global items.
> - Set Allow Browser to False
>
> **4.3 Use alternative browser from trusted source such as BlackBerry App World**
Users are also recommended not to click on suspicious/unknown URL received via email, IM or any social networking client on the affected BlackBerry devices.
MyCERT would like to advise the users of this product to be vigilant of the latest security announcements by Research In Motion Limited.
MyCERT can be reached through the following channels for further assistance:
**E-mail** : [[email protected]](/cdn-cgi/l/email-protection#93feeaf0f6e1e7d3feeaf0f6e1e7bdfce1f4bdfeea)
**Phone** : 1-300-88-2999 (monitored during business hours)
**Fax** : +603 89453442
**Handphone** : +60 19 2665850 (24x7 call incident reporting)
**SMS** : CYBER999 REPORT <EMAIL> <COMPLAINT> to 15888
**Business Hours** : Mon - Fri 08:30 -17:30 MYT
**Web**: [https://www.mycert.org.my](https://www.mycert.org.my/)
**5.0 References**
- <http://www.blackberry.com/btsc/search.do?cmd=displayKC&docType=kc&externalId=KB26132>