Browser dialog box not properly dismissed after downloading a corrupt JAD file

Article ID: KB04755

Type:   Security Advisory

First Published:

05-04-06

Last Modified: 09-02-2010

 

Product(s) Affected:

  • Past Devices
Collapse Products
ExpandAffected Software
  • BlackBerry® smartphones
  • BlackBerry® Device Software 4.0.1 and earlier
ExpandAre BlackBerry smartphones and the BlackBerry Device Software affected?
Yes.
CollapseIssue Severity

Not assigned.

CollapseOverview

An issue in the BlackBerry Device Software where a browser dialog box is not properly dismissed has been corrected in current releases of BlackBerry Device Software.

The browser displays the application name or vendor string on the download screen (this appears as several lines). The long application name indicates that there may be problems with the JAD file and caution should be exercised when downloading the application.

ExpandRecommendation
Complete the resolution actions documented in this advisory.
ExpandReferences

This article is in reference to US-CERT Advisory VU#829400.

CollapseProblem

You are running BlackBerry Device Software prior to version 4.0.2. You go to a web site and attempt to download a Java® Application Descriptor (JAD) file to your BlackBerry smartphone. If the JAD file is formatted to contain a long application name and vendor string (i.e., 256 or more characters), the browser appears to stop responding.

This does not affect other applications on the BlackBerry Device Software.

CollapseResolution

Install BlackBerry Device Software 4.0.2 or later. To obtain the most recent version of BlackBerry Device Software, contact your wireless service provider. To determine the BlackBerry Device Software version, click OptionsAbout.

CollapseAcknowledgements
RIM thanks FX of Phenoelit  for reporting this issue to RIM, and working with RIM to protect its customers.
CollapseChange Log

09-02-10

Updates to article formatting. No technical content changed.

12-09-08

Update due to a system upgrade that did not affect article content

Disclaimer

By downloading, accessing or otherwise using the Knowledge Base documents you agree:

   (a) that the terms of use for the documents found at www.blackberry.com/legal/knowledgebase apply to your use or reference to these documents; and

   (b) not to copy, distribute, disclose or reproduce, in full or in part any of the documents without the express written consent of RIM.


Visit the BlackBerry Technical Solution Center at www.blackberry.com/btsc.