Friday, August 31, 2012

MC2 Post 1375 My Cup Runneth Over Oracle Patches JAVA 7 Security Flaws




After listening to Steve Gibson on Security Now wednesday's Netcast This Morning, I was wondering How I was going to BLOG about the Java 7 Vulnerability.  The one that someone in Chatroom Quipped:  

"Write Once, Infect Every Where...".

Turns out Oracle Did-Not Drag Its Patch Fix This Time (The Quarterly Update Schedule patch would come in October).


They Put Out A PATCH Today....


From:  http://reviews.cnet.com

-----------------------------------------------------------------
What Version of JAVA am I Running (Check Page):
----------------------------------------------------------------

Oracle Patches Java 7 Vulnerability

Breaking its quarterly update schedule, Oracle has released a new Java runtime that addresses recent security flaws.


In response to the findings of a recent vulnerability in Java 7 that was being exploited by malware developers, Oracle has released an official patch that takes care of the problem.

In the past week, a new vulnerability was unveiled in Oracle's Java 7 runtime, which has been used by hackers in targeted attacks on Windows-based systems. Similar to the recent Flashback malware in OS X, this vulnerability allows criminals to create a drive-by hack where the only action needed to compromise a system is to visit a rogue Web page that hosts a malicious Java applet.





===================================
===================================



The Java 7 Update 7 patch can be downloaded from the Java SE Downloads Web page, and Oracle recommends that 
all users of Java 7 apply the update.


===================================
===================================

=============
=============


MC2 LOGO

=============
=============

No comments: