News

UPDATE: Oracle Releases Patch for Java Zero-Day Flaw

Oracle released an update for Java 7 that addresses "3 distinct but related vulnerabilities and one security-in-depth issue affecting Java running in desktop browsers," said the company.  

The company didn't explicitly state that today's update took care of this week's disclosure of a Java flaw that attackers were using to remotely load targeted systems with malware.  

However, security researcher Tod Beardsley of Rapid7 told Computerworld that today's out-of-band update does take care of the issue.

"It appears that it's effective in blocking the exploit," said Beardley.

According to an Oracle security advisory, if an unpatched system were attacked using any of the three related Java holes, "these vulnerabilities can provide a malicious attacker the ability to plant discretionary binaries onto the compromised system, e.g. the vulnerabilities can be exploited to install malware, including Trojans, onto the targeted system."

Security firm FireEye, which publically disclosed the Java vulnerability earlier this week, said that it had seen attackers suing a Chinese IP addresses use this hole to infect targeted systems with the Poison Ivy Trojan.

However, with the online release of a proof-of-concept video on how to exploit the vulnerability, security experts were warning that the amount of attacks was predicted to rise. In response, and without a solution readily available from Oracle, many (including Microsoft) had been advising users to completely disable the Java plugin for Web browsers.

With the release of today's Java update (available for download here), Oracle is advising that users upgrade as soon as possible.

About the Author

Chris Paoli is the site producer for Redmondmag.com and MCPmag.com.

Featured

  • Gears

    Top 10 Microsoft Tips and Analyses of 2018

    Here are the year's most popular explainers and how-to columns -- along with some plain, old "Why did Microsoft do that?" musings thrown in.

  • Sign

    2018 Microsoft Predictions Revisited

    From guessing the fate of Windows 10 S to predicting Microsoft's next big move with Linux, Brien's predictions from a year ago were on the mark more than they weren't.

  • Microsoft Recaps Delivery Optimization Bandwidth Controls for Organizations

    Microsoft expects organizations using its Delivery Optimization peer-to-peer update scheme will optimally see 60 percent to 70 percent improvements in terms of network bandwidth use.

  • Getting a Handle on Hyper-V Virtual NICs

    Hyper-V usually makes it easy to configure virtual network adapters within VMs. That is, until you need to create a VM containing multiple virtual NICs.

comments powered by Disqus
Most   Popular

Office 365 Watch

Sign up for our newsletter.

Terms and Privacy Policy consent

I agree to this site's Privacy Policy.