Oracle fixes critical hole in Java, may have known about the issue for months - DreamTeamDownloads1, FTP Help, Movies, Bollywood, Applications, etc. & Mature Sex Forum, Rapidshare, Filefactory, Freakshare, Rapidgator, Turbobit, & More MULTI Filehosts

online24 · 04-09-12, 17:10

August 30, 2012 6:16 PM
Meghan Kelly

Oracle patched the hole in Java 7 that allows hackers to secretly download malware to your computer today in an uncharacteristic update to its software, according to Forbes.
But it seems the company knew about the issue far longer than the rest of us.
Oracle usually only pushes out updates to its Java software on a quarterly basis, and many did not expect the company to provide a patch for this hole.
Indeed, researchers suggested people who did not need to use Java should turn it off just in case.
But while the patch is a positive step toward protecting Java users, security researchers at Security Explorations are saying that they told Oracle about the issues four months ago.
The security firm released a list of all the vulnerability reports it supposedly sent to Oracle in April, as well as confirmation that the Java creator received the bug reports.
In it, Oracle says it received the report, and pushes a code update in June, but “continues to investigate” other existing issues into August.

The vulnerability in Java 7 Runtime allowed malware writers to push viruses to both PC and Mac computers since both are compatible with the software.
It reminded researchers of the Java vulnerability that enabled the Flashback virus that forced Mac users to realize that the Apple-made computers are not impervious to malware.
Exploits seen in the wild, however, only attacked PC computers, more than likely because PCs are a larger, more profitable market for hackers.

People “caught” the virus by visiting infected websites.
The malware executed a download when the webpage opened, and it did not give any signals that it was downloading other than a few people who saw a “loading” sign over a java icon pop up and disappear.

The vulnerability was even being sold as part of an exploit kit in the hacker underground market. Find the patch for the hole on Java’s website.

New Java is aviable 1. september.
Update your Java now!!!!!

Code: [Check Download Links]

http://www.java.com/en/download/index.jsp

Ladybbird · 04-09-12, 20:26

Dont care, even though I keep getting pop ups to update with the new fix, Im not going to...

Read more about this here;

Code: [Check Download Links]

http://www.dreamteamdownloads1.com/general-computer-help-news-info-new-technology/231666-mozilla-warns-users-disable-java-zero-day-exploit.html

photostill · 04-09-12, 21:16

Don't put your trust in Oracle just yet and it's proposed patch. Seems the patch isn't patching what it's supposed to fix.

Here we go again: Critical flaw found in just-patched Java

Code: [Check Download Links]

http://www.theregister.co.uk/2012/08/31/critical_flaw_found_in_patched_java/

Ladybbird · 04-09-12, 22:37

Quote:

Originally Posted by photostill

Don't put your trust in Oracle just yet and it's proposed patch. Seems the patch isn't patching what it's supposed to fix.

Here we go again: Critical flaw found in just-patched Java

Code: [Check Download Links]

http://www.theregister.co.uk/2012/08/31/critical_flaw_found_in_patched_java/

You are right, & thats why Mozillza dont recommend it, is it really necessary? & what alternative would you recommend if it is.

photostill · 05-09-12, 01:14

Run noscript. Doesn't matter if java is patched or not, the malware can not interact with java unless you ok it.

*edit* Java is popular because it can be programmed for all OSes. Recently was an article that malware was looking at browser identification routines when you arrived at an infected site and gave you malware, dependent on what OS you were running. Mac, Linux, and Windows, all got their own version served to them.

04-09-12, 17:10	#1
online24 VIP & Santa Claus in Hiatus Join Date: Apr 2011 Location: Norway Posts: 507 Thanks: 156 Thanked 297 Times in 189 Posts Awards Showcase Total Awards: 2	Oracle fixes critical hole in Java, may have known about the issue for months August 30, 2012 6:16 PM Meghan Kelly Oracle patched the hole in Java 7 that allows hackers to secretly download malware to your computer today in an uncharacteristic update to its software, according to Forbes. But it seems the company knew about the issue far longer than the rest of us. Oracle usually only pushes out updates to its Java software on a quarterly basis, and many did not expect the company to provide a patch for this hole. Indeed, researchers suggested people who did not need to use Java should turn it off just in case. But while the patch is a positive step toward protecting Java users, security researchers at Security Explorations are saying that they told Oracle about the issues four months ago. The security firm released a list of all the vulnerability reports it supposedly sent to Oracle in April, as well as confirmation that the Java creator received the bug reports. In it, Oracle says it received the report, and pushes a code update in June, but “continues to investigate” other existing issues into August. The vulnerability in Java 7 Runtime allowed malware writers to push viruses to both PC and Mac computers since both are compatible with the software. It reminded researchers of the Java vulnerability that enabled the Flashback virus that forced Mac users to realize that the Apple-made computers are not impervious to malware. Exploits seen in the wild, however, only attacked PC computers, more than likely because PCs are a larger, more profitable market for hackers. People “caught” the virus by visiting infected websites. The malware executed a download when the webpage opened, and it did not give any signals that it was downloading other than a few people who saw a “loading” sign over a java icon pop up and disappear. The vulnerability was even being sold as part of an exploit kit in the hacker underground market. Find the patch for the hole on Java’s website. New Java is aviable 1. september. Update your Java now!!!!! Code: [Check Download Links] http://www.java.com/en/download/index.jsp __________________ ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Donate and you will be blessed. Give me a thanks if I deserve it. Have a good day. [SIGPIC][/SIGPIC] (PS.I love Fantasy and SciFi)

04-09-12, 20:26	#2
Ladybbird Join Date: Feb 2011 Posts: 47,549 Thanks: 27,621 Thanked 14,458 Times in 10,262 Posts Awards Showcase Total Awards: 8	Re: Oracle fixes critical hole in Java, may have known about the issue for months Dont care, even though I keep getting pop ups to update with the new fix, Im not going to... Read more about this here; Code: [Check Download Links] http://www.dreamteamdownloads1.com/general-computer-help-news-info-new-technology/231666-mozilla-warns-users-disable-java-zero-day-exploit.html __________________ PUTIN TRUMP & Netanyahu Will Meet in HELL ..................*SHARKS are Closing in on TRUMP*.......................... *TRUMP WARNS; 'There'll Be a Bloodbath* If I Don't Get Elected'..MAGA - MyAssGotArrested...IT's COMING** PLEASE HELP THIS SITE..Click DONATE & Thanks to ALL Members of ... 1.. THIS SITE IS MORE THAN JUST WAREZ...& TO STOP SPAM-IF YOU WANT TO POST, YOUR FIRST POST MUST BE IN WELCOMES

04-09-12, 21:16	#3
photostill The Enigma Join Date: Apr 2012 Posts: 9,977 Thanks: 3,009 Thanked 1,524 Times in 928 Posts	Re: Oracle fixes critical hole in Java, may have known about the issue for months Don't put your trust in Oracle just yet and it's proposed patch. Seems the patch isn't patching what it's supposed to fix. Here we go again: Critical flaw found in just-patched Java Code: [Check Download Links] http://www.theregister.co.uk/2012/08/31/critical_flaw_found_in_patched_java/ __________________ You can help this site, by clicking on the link below to buy a Premium Account. & Thank you for helping us. Click;

05-09-12, 01:14	#5
photostill The Enigma Join Date: Apr 2012 Posts: 9,977 Thanks: 3,009 Thanked 1,524 Times in 928 Posts	Re: Oracle fixes critical hole in Java, may have known about the issue for months Run noscript. Doesn't matter if java is patched or not, the malware can not interact with java unless you ok it. edit Java is popular because it can be programmed for all OSes. Recently was an article that malware was looking at browser identification routines when you arrived at an infected site and gave you malware, dependent on what OS you were running. Mac, Linux, and Windows, all got their own version served to them. __________________ You can help this site, by clicking on the link below to buy a Premium Account. & Thank you for helping us. Click; Last edited by photostill; 05-09-12 at 01:25.

Currently Active Users Viewing This Thread: 2 (0 members and 2 guests)