Andy Davis has reported a vulnerability in BlackBerry Tablet OS, which can be exploited by malicious people and by malicious people with physical access to the host computer to compromise a user's device.

The vulnerability is caused due to an error in the Samba component.

For more information:
SA48152

Successful exploitation may allow execution of arbitrary code, but requires file sharing over Wi-Fi to be enabled (disabled by default) or a USB connected tablet to a host computer.

The vulnerability is reported in versions 1.x.

Solution
Upgrade to version 2.0.0.7971.

Provided and/or discovered by
Andy Davis, NGS Secure.

Changelog
Further details available in Customer Area

Original Advisory
BSRT-2012-001:
http://www.blackberry.com/btsc/KB29565

NGS Secure:
http://archives.neohapsis.com/archives/bugtraq/2012-02/0134.html

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area