Mozilla Warns Users to Disable Java -Zero-Day Exploit
 

Mozilla Warns Firefox users to Disable Java following Zero-Day Exploit

31 August, 2012

An unpatched vulnerability in the current version of Java has "gone mainstream," prompting Mozilla to direct Firefox users to switch the plugin off entirely. The zero-day exploit could currently affect users running Java 1.7 on any Windows browser, and Websense reports that it's now included in Blackhole, the "most prevalent exploit kit out there."

While Oracle is yet to issue a patch for the exploit, IDG says that it was among several security issues reported to the company back in April that have been left untouched until the planned October Critical Patch Update. Mozilla is preparing its own solution which will disable Java by default, but hasn't announced how this will be implemented. In the meantime, the company is giving users instructions on how to disable Java, and anyone using other browsers may well wish to do the same.
END

There is now an UPDATE to this, Yesterday Oracle released a patch for the critical vulnerabilities identified within Java.
Visit the Mozilla Plugin Check webpage to find out if your Java plugin needs to be updated, click here;

Firefox Users

https://www.mozilla.org/plugincheck/

And as far as plugins go, try VLC plugin and a PDF plugin from Foxit.

Re: Mozilla Warns Users to Disable Java -Zero-Day Exploit
 

Thanks for the info and link. mine is ok :)

Re: Mozilla Warns Users to Disable Java -Zero-Day Exploit
 

Oracle released a patch yesterday I think it was...only it wasn't an effective patch. It didn't patch what it was supposed to address. No word when a new patch will be released.