Monday, February 08, 2016
Search
  
Submit your own News for
inclusion in our Site.
Click here...
Breaking News
Google Has A Gear VR Competitor In The Works: report
Sony Xperia Z5 and Xperia Z5 Compact Are Now Shipping In The U.S.
Following Outcry, Twitter's Dorsey Says Live Tweets Are Here To Stay
Samsung Files Patent For A Vein-authentication System On A Smartwatch
BlackBerry Cuts 200 Jobs To Trim Costs
Taiwan Earthquake Temporarily Suspended TSMC's And UMC's Production
Samsung Loses Memory-Chip patent Trial Against Nvidia
Twitter Suspends Accounts To Combat Extremism
Active Discussions
Which of these DVD media are the best, most durable?
How to back up a PS2 DL game
Copy a protected DVD?
roxio issues with xp pro
How to burn a backup copy of The Frozen Throne
Help make DVDInfoPro better with dvdinfomantis!!!
Copied dvd's say blank in computer only
menu making
 Home > News > General Computing > New Eme...
Last 7 Days News : SU MO TU WE TH FR SA All News

Tuesday, March 05, 2013
New Emergency Fix Releaseed For Java zero-day Exploit Released


Oracle on Monday released Security Alert CVE-2013-1493, to address two vulnerabilities affecting Java running in web browsers (CVE-2013-1493 and CVE-2013-0809).

These vulnerabilities may be remotely exploitable without authentication, i.e., they may be exploited over a network without the need for a username and password. For an exploit to be successful, an unsuspecting user running an affected release in a browser must visit a malicious web page that leverages these vulnerabilities.

One of these vulnerabilities (CVE-2013-1493) has recently been reported as being actively exploited by attackers to maliciously install the McRat executable onto unsuspecting users' machines. Both vulnerabilities affect the 2D component of Java SE. These vulnerabilities are not applicable to Java running on servers, standalone Java desktop applications or embedded Java applications. They also do not affect Oracle server-based software. These vulnerabilities have each received a CVSS Base Score of 10.0.

Oracle recommends that this Security Alert be applied as soon as possible. Desktop users can install this new version from java.com or through the Java autoupdate.

Oracle has recently switched Java security settings to "high" by default. This high security setting results in requiring users to expressly authorize the execution of applets which are either unsigned or are self-signed. As a result, unsuspecting users visiting malicious web sites will be notified before an applet is run and will gain the ability to deny the execution of the potentially malicious applet. In order to protect themselves, desktop users should only allow the execution of applets when they expect such applets and trust their origin.


Previous
Next
New ZOTAC StreamBox and RAIDbox Ease Digital Sharing        All News        IBM To Make Its Cloud Services and Software Open Sourced-based
Samsung To Buy Stake in Rival Sharp     General Computing News      IBM To Make Its Cloud Services and Software Open Sourced-based

Get RSS feed Easy Print E-Mail this Message

Related News
Oracle To Kill Java Plug-in For Browsers
Oracle SettleS FTC Charges It Deceived Consumers About Java
Oracle Breakthrough SPARC M7 Processor and Systems Design
Oracle Unveils New Services, Layouts Java's Future
Google Loses Appeal In Case Against Oracle
Oracle Extends Enterprise Cloud Portfolio
Oracle, SAP Settle Lawsuit
Oracle's Ellison Steps Down
Oracle To Buy Micros Systems
Oracle Accelerates Its Databases
Oracle Wins Appeal In Legal Battle With Google
Microsoft Retains No. 1 Spot; Oracle Moves Into No. 2 In Global Software Market

Most Popular News
 
Home | News | All News | Reviews | Articles | Guides | Download | Expert Area | Forum | Site Info
Site best viewed at 1024x768+ - CDRINFO.COM 1998-2016 - All rights reserved -
Privacy policy - Contact Us .