If you follow this blog you know that a critical vulnerability was discovered recently in Oracle’s Java Runtime Environment that has been actively exploited in the wild ever since. The vulnerability affected only Java running in a web browser, and my initial recommendation was to turn off Java in all web browsers, or to uninstall the software completely, to protect the computer system from exploits targeting the vulnerabilities.
Oracle pushed out a patch a few days ago that resolves the security issue In Java 7 Patch 6 and earlier. Polish-based security company Security Explorations however discovered a new vulnerability in Oracle’s patched version that attackers can exploit to get out of the Java sandbox on vulnerable systems to execute code on the operating system.
The company has informed Oracle about the new vulnerability, and won’t release public information or proof of concept code until Oracle addresses the issue. What’s interesting in this regard is that the company claims to have submitted 29 Java 7 vulnerabilities to Oracle in April, of which two have been actively exploited by attackers in the last days.
If you follow this blog you know that a critical vulnerability was discovered recently in Oracle’s Java Runtime Environment that has been actively exploited in the wild ever since. The vulnerability affected only Java running in a web browser, and my initial recommendation was to turn off Java in all web browsers, or to uninstall the software completely, to protect the computer system from exploits targeting the vulnerabilities.
Oracle pushed out a patch a few days ago that resolves the security issue In Java 7 Patch 6 and earlier. Polish-based security company Security Explorations however discovered a new vulnerability in Oracle’s patched version that attackers can exploit to get out of the Java sandbox on vulnerable systems to execute code on the operating system.
The company has informed Oracle about the new vulnerability, and won’t release public information or proof of concept code until Oracle addresses the issue. What’s interesting in this regard is that the company claims to have submitted 29 Java 7 vulnerabilities to Oracle in April, of which two have been actively exploited by attackers in the last days.
Vastaukset 8
Vanhimmat
Kannattaako edes testata http://www.itviikko.fi/tietoturva/2012/09/03/java-vuotaa-viela-paivityksen-jalkeenkin/201236940/7
Warning: Java still vulnerable after patch
If you follow this blog you know that a critical vulnerability was discovered recently in Oracle’s Java Runtime Environment that has been actively exploited in the wild ever since. The vulnerability affected only Java running in a web browser, and my initial recommendation was to turn off Java in all web browsers, or to uninstall the software completely, to protect the computer system from exploits targeting the vulnerabilities.
Oracle pushed out a patch a few days ago that resolves the security issue In Java 7 Patch 6 and earlier. Polish-based security company Security Explorations however discovered a new vulnerability in Oracle’s patched version that attackers can exploit to get out of the Java sandbox on vulnerable systems to execute code on the operating system.
The company has informed Oracle about the new vulnerability, and won’t release public information or proof of concept code until Oracle addresses the issue. What’s interesting in this regard is that the company claims to have submitted 29 Java 7 vulnerabilities to Oracle in April, of which two have been actively exploited by attackers in the last days.
http://www.ghacks.net/2012/09/02/warning-java-still-vulnerable-after-patch/
http://translate.google.com/translate?langpair=auto|fi&twu=1&u=http://www.ghacks.net/2012/09/02/warning-java-still-vulnerable-after-patch/
Ei ongelmia http://aijaa.com/0072110834082
Öö, tuohan selviää Ohjelmat ja toiminnot sovelluksellakin.
jos pois haluaa niin tuolla lähtee java hyvin pois http://www.download.fi/jarjestelma/ohjelmien_poisto/revo_uninstaller.cfm
niin lähti java kuin kuppa töölöstä kaikkine tiedostoineen tuolla revolla
tuskinpa kaikkine tiedostoineen