Multiple vulnerabilities have been reported in BlackBerry Device Software, which can be exploited by malicious people to disclose sensitive information and compromise a vulnerable device.

1) An integer overflow exists in the WebKit browser engine when visiting a website.

Successful exploitation of this vulnerability allows execution of arbitrary code.

This is related to:
SA43748

2) Some vulnerabilities are caused due to a bundled vulnerable version of the WebKit browser engine.

For more information:
SA43683

The vulnerabilities are reported in the following products:
* BlackBerry Bold 9650 smartphone
* BlackBerry Bold 9700 smartphone
* BlackBerry Bold 9780 smartphone
* BlackBerry Curve 9300 Series
* BlackBerry Pearl 9100 Series
* BlackBerry Style 9670 smartphone
* BlackBerry Torch 9800 smartphone

Solution
Update to a fixed version.
Further details available in Customer Area

Provided and/or discovered by
1) Vincenzo Iozzo, Ralf Philipp Weinmann, and Willem Pinckaers via ZDI.

Changelog
Further details available in Customer Area

Original Advisory
http://www.blackberry.com/btsc/KB26132

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area