Where Customization Begins 

  • [UPDATED] Turn off your Java now

  • Keep your self updated on current affairs. Tech, news, Politics, blah blah. You decide.
Keep your self updated on current affairs. Tech, news, Politics, blah blah. You decide.
 #24916  by Angel
 12 Jan 2013, 00:03
Turn off your Java now - Dangerous vulnerability in latest Java version

The latest Java version, Java 7 Update 10 contains a critical security vulnerability which is reportedly already being used for large scale cyberattacks. Users who have Java installed on their computers should deactivate the Java plugin in their browsers without delay.

A malware researcher calling himself kafeine has discovered an online exploit which makes use of a previously unknown Java vulnerability. Security experts at AlienVault have analyzed the exploit and confirmed the significance of the find. They were able to use it to inject code onto a fully patched Windows system running Java 7 Update 10. It is currently unclear whether the vulnerability is also present in Java 6, though the exploit did not work in initial tests on Java 6 carried out by kafeine.

The vulnerability is, however, already being exploited by cybercriminals to distribute malware. Security blogger Brian Krebs says that attack modules for the Black Hole and Nuclear Pack exploit kits are already available. According to Krebs, a Black Hole developer calling himself "Paunch", posting on underground forums yesterday (Wednesday), heralded the zero day exploit as a New Year's gift for his paying customers.

Because the vulnerability, thanks to the various exploit kits, requires minimum effort to exploit, it is reasonable to expect that the number of web sites hosting the exploit is likely to rise exponentially over the next few days. Simply visiting an infected web site is all that's required to fall victim to a malware infection. The attack code may also be hosted on mainstream web sites.

Users should therefore deactivate the Java plugin in their browsers without delay. Instructions for doing so can be found on the following web pages:

Deactivating the Java plugin in Firefox
Code: Select allhttps://support.mozilla.org/en-US/kb/How%20to%20turn%20off%20Java%20applets


Deactivating the Java plugin in Chrome
Code: Select allhttps://support.google.com/chrome/bin/answer.py?hl=en&answer=142064


Deactivating the Java plugin in Safari
Code: Select allhttps://support.apple.com/kb/HT5241


In Opera, the plugin manager can be accessed by entering opera plugins in the address bar. Disabling Java under Internet Explorer is not straightforward. Tests carried out by our associates at heise Security found that Microsoft's flagship browser was still able to access the Java plugin even after it had been explicitly disabled. Users running IE are therefore advised to uninstall Java completely using the Add or Remove Programs option in Windows' Control Panel. Users can check whether Java has been successfully deactivated using the Java test page in our browser check suite.

Source: Majorgeeks

Oracle has just released 7u11 to fix these issues.
32-bit
Code: Select allhttp://javadl.sun.com/webapps/download/AutoDL?BundleId=73141

64-bit
Code: Select allhttp://javadl.sun.com/webapps/download/AutoDL?BundleId=73143

Release notes
Code: Select allhttp://www.oracle.com/technetwork/java/javase/7u11-relnotes-1896856.html
 #24919  by Neuropass
 12 Jan 2013, 02:08
Here's the Dev build for anyone who's interested. Java™ Platform, Standard Edition 7 Update 12 Developer Preview Releases
 #24924  by 351837
 12 Jan 2013, 16:40
I'm still on 6 u 38.lol
Well, being lazy-ass sometimes pays off. :ha:
 #24926  by TheAslan
 12 Jan 2013, 22:35
Chrome and Chromium is very handy again because you can change how plugins works, you can make your plugins to ask first if you want to run them or not ;-) So basically your browsing is always secured if you're using Chrome or Chromium, though Chromium is even more secure than Chrome because there's no Google tracking.
 #24927  by Neuropass
 13 Jan 2013, 00:47
351837 » Sat Jan 12, 2013 12:40 pm wrote:I'm still on 6 u 38.lol
Well, being lazy-ass sometimes pays off. :ha:



lol :lau1:
 #24940  by Angel
 14 Jan 2013, 12:26
Updates released. See first post for details.
 #26830  by Animeware
 20 May 2013, 16:41
Java doesn't bother me much at all I just leave it alone.....