Wednesday, July 01, 2015
Search
  
Submit your own News for
inclusion in our Site.
Click here...
Breaking News
Samsung Unveils New LEVEL U Wireless Bluetooth Headset
Sony's New Wireless Speakers Available In The U.S.
Fujitsu ETERNUS DX8000 S3 Disk Storage Systems Aim At mainframes And Open Systems
Sony Launches Crowdfunding Platform For Its Products
FIDO Alliance Specifications Add Support for NFC and Bluetooth
Apple Music Goes Live
New Acer Curved IPS Display Comes With AMD FreeSync Support
New Meizu MX5 Unveils In China
Active Discussions
How to back up a PS2 DL game
Copy a protected DVD?
roxio issues with xp pro
How to burn a backup copy of The Frozen Throne
Help make DVDInfoPro better with dvdinfomantis!!!
Copied dvd's say blank in computer only
menu making
Optiarc AD-7260S review
 Home > News > General Computing > New Eme...
Last 7 Days News : SU MO TU WE TH FR SA All News

Tuesday, March 05, 2013
New Emergency Fix Releaseed For Java zero-day Exploit Released


Oracle on Monday released Security Alert CVE-2013-1493, to address two vulnerabilities affecting Java running in web browsers (CVE-2013-1493 and CVE-2013-0809).

These vulnerabilities may be remotely exploitable without authentication, i.e., they may be exploited over a network without the need for a username and password. For an exploit to be successful, an unsuspecting user running an affected release in a browser must visit a malicious web page that leverages these vulnerabilities.

One of these vulnerabilities (CVE-2013-1493) has recently been reported as being actively exploited by attackers to maliciously install the McRat executable onto unsuspecting users' machines. Both vulnerabilities affect the 2D component of Java SE. These vulnerabilities are not applicable to Java running on servers, standalone Java desktop applications or embedded Java applications. They also do not affect Oracle server-based software. These vulnerabilities have each received a CVSS Base Score of 10.0.

Oracle recommends that this Security Alert be applied as soon as possible. Desktop users can install this new version from java.com or through the Java autoupdate.

Oracle has recently switched Java security settings to "high" by default. This high security setting results in requiring users to expressly authorize the execution of applets which are either unsigned or are self-signed. As a result, unsuspecting users visiting malicious web sites will be notified before an applet is run and will gain the ability to deny the execution of the potentially malicious applet. In order to protect themselves, desktop users should only allow the execution of applets when they expect such applets and trust their origin.


Previous
Next
New ZOTAC StreamBox and RAIDbox Ease Digital Sharing        All News        IBM To Make Its Cloud Services and Software Open Sourced-based
Samsung To Buy Stake in Rival Sharp     General Computing News      IBM To Make Its Cloud Services and Software Open Sourced-based

Get RSS feed Easy Print E-Mail this Message

Related News
Google Loses Appeal In Case Against Oracle
Oracle Extends Enterprise Cloud Portfolio
Oracle, SAP Settle Lawsuit
Oracle's Ellison Steps Down
Oracle To Buy Micros Systems
Oracle Accelerates Its Databases
Oracle Wins Appeal In Legal Battle With Google
Microsoft Retains No. 1 Spot; Oracle Moves Into No. 2 In Global Software Market
Oracle Buys Responsys For $1.5 billion
GPU Acceleration Coming to Java
IBM, Oracle, EMC To Face China Probe Over Security Concerns: report
ARM and Oracle to Optimize Java SE for Enterprise and Embedded Markets

Most Popular News
 
Home | News | All News | Reviews | Articles | Guides | Download | Expert Area | Forum | Site Info
Site best viewed at 1024x768+ - CDRINFO.COM 1998-2015 - All rights reserved -
Privacy policy - Contact Us .