The problem lies in the BlackBerry Browser, specifically in the dialog box that alerts users if the URL they have clicked on does not match the domain they are being sent to, the company warned in an advisory on Monday.

To exploit the flaw, a hacker could craft a malicious website that spoofs a trusted website, then send users a link to that site using text messaging or email. If the malicious domain name contains a null character and the user chooses to access the site, the certificate-handling software on the device will note that there is a mismatch, but the warning dialog box will not display the null character in the link.

For example, the URL ‘zd[null character]net.co.uk’ will generate an alert, which will tell the user they are about to visit ‘zdnet.co.uk’. BlackBerryusers may ignore this alert, as malicious websites could appear benign, RIM said.

“RIM recommends that BlackBerry device users exercise caution when clicking on links that they receive in email or SMS messages,” the company said in its advisory. “If a user visits a site that causes a BlackBerry Browser dialog box to warn the user about continuing the connection, the user should select Close connection.”

BlackBerry Device Software from version 4.5 onwards is affected. RIM has provided a software update, available from the BlackBerry updatessite, to mitigate the issue.

more from Zdnet

---

Filed under: blackberry,Security - @ September 30, 2009 9:19 pm

Tags: blackberry