You All Might Want to Disable Java

[Flamfas]

http://www.us-cert.gov/cas/techalerts/TA13-010A.html

until this issue can be fixed.
_________________
Gaming in 2013:
16 Games Beaten
8 Games Added to Library
Last Update: [beat] Pushmo

72 Unbeaten Games
Target: 75 Unbeaten Games

[Sunny]

I DISABLED JAVA NOW I CAN'T USE YOUTUBE!!

HELP???!

On a serious note, what does it mean when they say that "an attacker could execute arbitrary code on a vulnerable system with the privileges of the Java plug-in process"?
_________________
Support XSEED | Listen to Falcom music | Do life the right way

It's not that I'm above the law. It's just that the law is beneath me.

[Flamfas]

I think they mean, you could simply open a webpage, and if your Java plug-in was enabled, an attacker could use the vulnerability to gain access to your computer. Through nothing more than you opening the webpage. Which is a bit different than most virus type things, as they usually involve you being tricked into downloading or enabling something ...

I don't completely know for sure, but I think that's the case.
_________________
Gaming in 2013:
16 Games Beaten
8 Games Added to Library
Last Update: [beat] Pushmo

72 Unbeaten Games
Target: 75 Unbeaten Games

[Taiyz]

I use Java 6. Which is probably generally more vulnerable but whatever.
_________________

Dr Pepper.
It's an intellectual drink, for the chosen ones.

[Drake]

The exploit for Java 7 appeared because they didn't fix things they needed to in 6. It's present, but is probably not as risky.

Flamfas, all you would need to do is open the webpage if the applet was present, since it's all about how the applet is loaded by the Java plugin. The plugin runs the Java environment that exists on your system, so if you can bypass access restrictions to the user's system you could potentially run Java code on their system rather than just locally on the webpage through the plugin like an applet normally does.

But this doesn't really mean any random site is going to have an attacking applet. Basically nowhere uses applets anymore to begin with so it does have to be pretty specific. In any case, mainly you want to disable the Java plugin if you're often on websites that might have a bunch of third-party ads and other embedded things, which might be exploitable.
_________________

[Sânta Claus]

[Skythe]

thread derailer extraordinaire
_________________

[12/4/2009 10:59:17 PM] thingrue: skythe did you routinely huff paint thinner as a child

[Sânta Claus]

do something about it
_________________

Don't bro me if you don't know me.

[Flamfas]

Figured Drake would stop by. Thanks!! Sounds like it's not too huge a vulnerability, but I am still keeping my java disabled for now.
_________________
Gaming in 2013:
16 Games Beaten
8 Games Added to Library
Last Update: [beat] Pushmo

72 Unbeaten Games
Target: 75 Unbeaten Games