Advertisement
Help Keep Boards Alive. Support us by going ad free today. See here: https://subscriptions.boards.ie/.
If we do not hit our goal we will be forced to close the site.

Current status: https://keepboardsalive.com/

Annual subs are best for most impact. If you are still undecided on going Ad Free - you can also donate using the Paypal Donate option. All contribution helps. Thank you.
https://www.boards.ie/group/1878-subscribers-forum

Private Group for paid up members of Boards.ie. Join the club.

java exploit

Comments

  • #2
    LoLth
    Registered Users, Registered Users 2 Posts: 10,339 ✭✭✭✭LoLth


    Deepend security's article on it:
    http://www.deependresearch.org/2012/08/java-7-0-day-vulnerability-information.html

    US CERT Advisory on disabling java plugins:
    http://www.kb.cert.org/vuls/id/636312

    (note: they do say that the noscript plugin from firefox should protect you).


  • #3
    h57xiucj2z946q
    Closed Accounts Posts: 2,267 ✭✭✭h57xiucj2z946q


    Yup, java disabled for now!


  • #4
    infodox
    Registered Users, Registered Users 2 Posts: 126 ✭✭infodox


    J7u7 fixes it. Kind of, though there are a few others in the wild apparently.

    The scary bit is it works completely cross platform with little to no modification whatsoever...


  • #5
    BaconZombie
    Registered Users, Registered Users 2 Posts: 8,814 ✭✭✭BaconZombie


    I wish I could say the same for all of Oracles fecking apps.
    infodox wrote: »
    J7u7 fixes it. Kind of, though there are a few others in the wild apparently.

    The scary bit is it works completely cross platform with little to no modification whatsoever...


  • #6
    manutd4life
    Registered Users, Registered Users 2 Posts: 282 ✭✭manutd4life


    I have just downloaded Java 6 Update 35. Chrome is my default browser but I also have IE 64 bit which uses Java 6 Update 13.

    Is the 64 bit Java up to date or can I uninstall it because I don't use IE 64 bit at all?


  • Advertisement
  • #7
    h57xiucj2z946q
    Closed Accounts Posts: 2,267 ✭✭✭h57xiucj2z946q


    Check here: http://isjavaexploitable.com
    I take no responsibility of the authenticity of this site.


  • #8
    LoLth
    Registered Users, Registered Users 2 Posts: 10,339 ✭✭✭✭LoLth


    that site is run by Rapid7 and checks the installed Java for *any* vulnerabilities.

    http://zulu.zscaler.com/research/java_version.html

    this one tests for the 0-day exploit specifically.


  • #9
    h57xiucj2z946q
    Closed Accounts Posts: 2,267 ✭✭✭h57xiucj2z946q


    That last site says I'm still vulnerable after Oracles latest update.

    Will leave java disabled in browsers in the mean time anyway.


Advertisement