Click here to Skip to main content
15,897,371 members

The Insider News

   

The Insider News is for breaking IT and Software development news. Post your news, your alerts and your inside scoops. This is an IT news-only forum - all off-topic, non-news posts will be removed. If you wish to ask a programming question please post it here.

Get The Daily Insider direct to your mailbox every day. Subscribe now!

 
NewsArduino GSM GPRS and GPS shield Pin
Terrence Dorsey3-Sep-12 9:08
sitebuilderTerrence Dorsey3-Sep-12 9:08 
NewsHow NASA's Odyssey phoned home for the Curiosity landing Pin
Terrence Dorsey3-Sep-12 9:07
sitebuilderTerrence Dorsey3-Sep-12 9:07 
NewsAnother go at the Next Big Language Pin
Terrence Dorsey3-Sep-12 9:07
sitebuilderTerrence Dorsey3-Sep-12 9:07 
NewsSex, Lies, and (Server-side) Javascript Pin
Terrence Dorsey3-Sep-12 9:06
sitebuilderTerrence Dorsey3-Sep-12 9:06 
NewsLogins without logins Pin
Terrence Dorsey3-Sep-12 9:06
sitebuilderTerrence Dorsey3-Sep-12 9:06 
JokeIf programming languages were religions Pin
michaelvdnest3-Sep-12 4:34
michaelvdnest3-Sep-12 4:34 
GeneralRe: If programming languages were religions Pin
PIEBALDconsult3-Sep-12 5:31
mvePIEBALDconsult3-Sep-12 5:31 
NewsVulnerabilities have been uncovered in Oracle's Java 7 runtime Pin
Karthik J, Coimbatore2-Sep-12 19:27
Karthik J, Coimbatore2-Sep-12 19:27 
Article from http://news.cnet.com/[^]

Only hours after Oracle released its latest Java 7 update to address active exploits, security researchers found yet another vulnerability that can be exploited to run arbitrary code on systems that have the runtime installed.

Oracle's latest release of its Java 7 runtime has come under scrutiny in the past few weeks after it was found being actively exploited in malware attacks that target Windows systems. While so far the vulnerability has only been found being used against Windows, other platforms such as the Mac OS could potentially be targeted through the same exploit.

In response to these findings, Oracle broke its quarterly update schedule for Java and released update 7 for the runtime; however, even after this update, yet more vulnerabilities have been found. 

According to MacWorld, the Polish security firm Security Explorations is claiming to have discovered two new vulnerabilities in Java 7, which so far are proof-of-concept exploits that can be used to break the Java 7 sandbox and execute code. However, as with any vulnerability this opens new avenues for malware attacks.

Security Explorations is keeping the details about these latest vulnerabilities secret until Oracle addresses the problem, and has only stated that when exploited they allow rogue Java applets to break the Java sandbox and execute arbitrary code on the system.

Being only proof-of-concept attacks means that for now they should not pose much of a threat to Java users, and Oracle should address them in future updates. However, Oracle has recently met some criticism for its lackadaisical approach to addressing some known exploits. According to PCWorld, Oracle has known about these and other exploits since April of this year, and has not taken steps to close them.

These latest developments serve as a warning against using Java when not needed and also prematurely updating Java. Java 7 is still very early in its development, being only the seventh release so far, whereas prior runtimes have received over 30 updates to patch and manage vulnerabilities. As a result, if you need Java then you might consider installing a prior runtime version that has been well-tested, but if you do not need Java then you might consider avoiding installing it or removing it from your system if it is already installed.

Java 7 is an optional third-party installation for its supported operating systems, so only those who have installed it should be cautious of these vulnerabilities.


Thanx
~Karthik

GeneralRe: Vulnerabilities have been uncovered in Oracle's Java 7 runtime Pin
Ravi Bhavnani3-Sep-12 8:56
professionalRavi Bhavnani3-Sep-12 8:56 
NewsWanton waste leaves us in a terrible state Pin
bryce2-Sep-12 16:30
bryce2-Sep-12 16:30 
GeneralRe: Wanton waste leaves us in a terrible state Pin
Eddy Vluggen3-Sep-12 0:02
professionalEddy Vluggen3-Sep-12 0:02 
GeneralRe: Wanton waste leaves us in a terrible state Pin
Ravi Bhavnani3-Sep-12 8:57
professionalRavi Bhavnani3-Sep-12 8:57 
NewsWindows Phone to Windows 8: API Mapping Pin
Terrence Dorsey2-Sep-12 9:37
sitebuilderTerrence Dorsey2-Sep-12 9:37 
NewsWhy should I have written ZeroMQ in C, not C++ Pin
Terrence Dorsey2-Sep-12 9:37
sitebuilderTerrence Dorsey2-Sep-12 9:37 
NewsBaking Pi - Operating Systems Development on Raspberry Pi Pin
Terrence Dorsey2-Sep-12 9:37
sitebuilderTerrence Dorsey2-Sep-12 9:37 
NewsCondition Handling for Non-Lispers Pin
Terrence Dorsey2-Sep-12 9:36
sitebuilderTerrence Dorsey2-Sep-12 9:36 
NewsMath for game programmers Pin
Terrence Dorsey2-Sep-12 9:36
sitebuilderTerrence Dorsey2-Sep-12 9:36 
GeneralRe: Math for game programmers Pin
Pete O'Hanlon3-Sep-12 5:45
mvePete O'Hanlon3-Sep-12 5:45 
NewsThe not very tabletly Windows 8 tablets of IFA Pin
Terrence Dorsey2-Sep-12 9:35
sitebuilderTerrence Dorsey2-Sep-12 9:35 
NewsUser-Friendliness on Windows and Linux Pin
Terrence Dorsey2-Sep-12 9:35
sitebuilderTerrence Dorsey2-Sep-12 9:35 
NewsSongs of the IBM Pin
Terrence Dorsey2-Sep-12 9:34
sitebuilderTerrence Dorsey2-Sep-12 9:34 
NewsThe Soul of a Typeface Pin
Terrence Dorsey2-Sep-12 9:34
sitebuilderTerrence Dorsey2-Sep-12 9:34 
NewsMulti-Armed Bandit; A Primer Pin
Terrence Dorsey2-Sep-12 9:33
sitebuilderTerrence Dorsey2-Sep-12 9:33 
NewsLinux and the cure to the Curse of Microsoft Pin
Loknath Bharti1-Sep-12 3:30
Loknath Bharti1-Sep-12 3:30 
GeneralRe: Linux and the cure to the Curse of Microsoft Pin
Eddy Vluggen1-Sep-12 4:02
professionalEddy Vluggen1-Sep-12 4:02 

General General    News News    Suggestion Suggestion    Question Question    Bug Bug    Answer Answer    Joke Joke    Praise Praise    Rant Rant    Admin Admin   

Use Ctrl+Left/Right to switch messages, Ctrl+Up/Down to switch threads, Ctrl+Shift+Left/Right to switch pages.