High-risk Java Vulnerabilities, all in the 7.x Branch

Source: Internet
Author: User

According to foreign security research institutions, the current Java version contains a serious security vulnerability, which may cause the computer to be infected when accessing a specific webpage with malicious code.

It is reported that the vulnerability has been exploited by hackers and is currently only targeted attacks. However, a vulnerability has begun to flow, so it is possible that a large wave of attacks will soon emerge.

So far, targeted attacks are known to be exploiting this vulnerability to install the Poison Ivy Trojan, which is hosted on a server located in Singapore.

This vulnerability affects all Java 7.x branch versions. During the test, all mainstream Windows browsers may be exploited and infected, including Chrome. It is said that the vulnerability also exists in Apple's latest Mountain Lion operating system.

Currently, users who have installed Java in the system should disable the browser plug-in, or simply remove the Java Plug-in, at least until Oracle releases the patch. When the browser plug-in is disabled, the local Java application can still be used normally.

Oracle has not commented on the vulnerability, so it is unknown whether the vulnerability has been fixed. According to the plan, the next version of Java 7 will be released on July 15, October 16, and may contain patches related to this vulnerability.

Via TheH

Related Article

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.