|
Authored by: Anonymous on Sunday, January 13 2013 @ 01:28 PM EST |
Sorry I don't have the ability to run tests on the code in different OS.
The
vulnerability is reported by several to be in the browser Java applet, so any
browser, any OS that uses a browser Java applet
from Oracle would seem to be
targets.
Starting at
isc.sans.edu , going via
krebsonsecurity , leads to malware.dontneedcoffee
.
In addition it is
now reported that there is a similar/followon vulnerability in
Java 6, with a technical analysis (PDF) at immunityinc.com [ Reply to This | Parent | # ]
|
|
Authored by: Anonymous on Sunday, January 13 2013 @ 04:14 PM EST |
A plain spoken article with lots of links to outside experts from
Krebs on Security
TLDR version: This is a class loader
defect in the Oracle JRE. Other vendors/devs using similar code
may (or not) be
vulnerable. It allows a Java applet to jump the sandbox and run naked,
screaming
and slashing thru your system. If you think your system is immune to
that, Good Luck.
[ Reply to This | Parent | # ]
|
|
|
|
|