Vulnerability Bulletins |
Grave vulnerabilidad en BlackBerry a través de WebKit |
|
Vulnerability classification |
|
| Property | Value |
| Confidence level | Oficial |
| Impact | Obtener acceso |
| Dificulty | Avanzado |
| Required attacker level | Acceso remoto sin cuenta a un servicio exotico |
System information |
|
| Property | Value |
| Affected manufacturer | Comercial Software |
| Affected software |
Research In Motion Blackberry PlayBook Tablet Software 2.0.0.7971 Research In Motion Blackberry PlayBook Tablet Software 1.0.8.6067 Research In Motion Blackberry PlayBook Tablet Software 1.0.8.4985 Research In Motion Blackberry PlayBook Tablet Software 1.0.7.3312 Research In Motion Blackberry PlayBook Tablet Software 1.0.7.2942 Research In Motion Blackberry PlayBook Tablet Software 1.0.6 Research In Motion Blackberry PlayBook Tablet Software 1.0.5.2342 Research In Motion Blackberry PlayBook Tablet Software 1.0.5.2304 Research In Motion Blackberry Device Software 6.0 Research In Motion Blackberry Device Software 7.1 Research In Motion Blackberry Device Software 7 |
Description |
|
|
Se ha descubierto una vulnerabilidad de ejecución remota de código en Blackberry WebKit Browser. Un atacante remoto puede aprovechar esta vulnerabilidad para hacer que una posible víctima engañada, visite una página web con contenido malicioso, o para ejecutar código arbitrario en el contexto de la aplicación afectada. Son vulnerables los smartphones con BlackBerry 6, BlackBerry 7 y BlackBerry 7.1 y todas las versiones del software de BlackBerry PlayBook Tablet. Las siguientes aplicaciones de la tableta BlackBerry PlayBook son vulnerables: Navegador web BlackBerry PlayBook Bridge Browser Android Runtime Messages (solo BlackBerry PlayBook 2.0) App de correo BlackBerry Bridge |
|
Solution |
|
| Aplicar la actualización publicada. | |
Standar resources |
|
| Property | Value |
| CVE | |
| BID | 52288 |
Other resources |
|
|
Vulnerability in WebKit browser engine impacts BlackBerry 6, BlackBerry 7, BlackBerry 7.1, and BlackBerry PlayBook tablet software BSRT-2012-002 http://btsc.webapps.blackberry.com/btsc/dynamickc.do?externalId=KB30152&sliceID=1&command=show&forward=nonthreadedKC&kcId=KB30152 |
|
Version history |
||
| Version | Comments | Date |
| 1.0 | Aviso emitido | 2012-03-14 |