RIM's released an software update to counter a security hole that could lead BlackBerry users to visit malicious Web sites because they think a link in an SMS message or e-mail message is coming from someone they trust.

The problem is the BlackBerry browser dialog box does not clearly indicate mismatches between web site domain names and associated certificates. This issue affects all built-in browsers on affected BlackBerry devices (BlackBerry Browser, Internet Browser, WAP Browser, and Wi-Fi (Hotspot) Browser).

RIM's update is for BlackBerry OS 4.5 and higher.

For those who have not updated their BlackBerry yet, RIM recommends they exercise caution when clicking on links that they receive in e-mail or SMS messages. If a user visits a site that causes a BlackBerry browser dialog box to warn the user about continuing the connection, the user should select Close connection.

Mobile Security Lab and CESG separately reported this issue to RIM.