Page 1 of 2 12 LastLast
Results 1 to 15 of 27
  1. #1
    SkyLight's Avatar
    Join Date
    Jul 2011
    Gender
    male
    Location
    Earth
    Posts
    961
    Reputation
    33
    Thanks
    1,604

    Disable Java NOW, users told, as 0-day exploit hits web

    A new browser-based exploit for a Java vulnerability that allows attackers to execute arbitrary code on client systems has been spotted in the wild – and because of Oracle's Java patch schedule, it may be some time before a fix becomes widely available.

    The vulnerability is present in the Java Runtime Environment (JRE) version 1.7 or later, Atif Mushtaq of security firm FireEye reported on Sunday, while PCs with Java versions 1.6 or earlier installed are not at risk.

    The vulnerability allows attackers to use a custom web page to force systems to download and run an arbitrary payload – for example, a keylogger or some other type of malware. The payload does not need to be a Java app itself.

    In the form in which it was discovered, the exploit only works on Windows machines, because the payload that it downloads is a Windows executable. But the hackers behind the Metasploit penetration testing software say they have studied the exploit and found that it could just as easily be used to attack machines running Linux or Mac OS X, given the appropriate payload.

    All browsers running on these systems were found to be vulnerable if they had the Java plugin installed, including Chrome, Firefox, Internet Explorer, Opera, and Safari.

    Although the actual source of the exploit is not known, it was originally discovered on a server with a domain name that resolved to an IP address located in China. The malware it installed on compromised systems attempted to connect to a command-and-control server believed to be located in Singapore.

    Oracle has yet to comment on the vulnerability or when users should expect a fix, but it might be a while. The database giant ordinarily observes a strict thrice-annual patch schedule for Java, and the next batch of fixes isn't due until October 16.

    Downgrading to an earlier version of Java is not advised, because even though earlier versions aren't vulnerable to this particular exploit, they may contain other bugs that expose still other vulnerabilities.

    In advance of any official patch, and because of the seriousness of the vulnerability, malware researchers at DeepEnd Research have developed an interim fix that they say seems to prevent the rogue Java code from executing its payload, although it has received little testing.

    Because the patch could be used to develop new exploits if it fell into the wrong hands, however, DeepEnd Research is only making it available by individual request to systems administrators who manage large numbers of clients for companies that rely on Java.

    For individual users, the researchers say, the best solution for now is to disable the Java browser plugin until Oracle issues an official patch. ®
    Disable Java NOW, users told, as 0-day exploit hits web ? The Register

  2. #2
    yugurt's Avatar
    Join Date
    Jul 2011
    Gender
    male
    Posts
    3,410
    Reputation
    364
    Thanks
    681
    fuck it

  3. The Following User Says Thank You to yugurt For This Useful Post:

    ZeroTroubles (08-30-2012)

  4. #3
    ShunnyBun's Avatar
    Join Date
    Sep 2010
    Gender
    female
    Location
    MPGH Paradise
    Posts
    1,650
    Reputation
    33
    Thanks
    111
    My Mood
    Happy
    without java it's like without anything basically...
    My opera will do just fine with java activated


  5. #4
    𝕡𝕠𝕔𝕜𝕖𝕥𝕤 𝕤𝕠 𝕗𝕒𝕥
    Admin
    arunforce's Avatar
    Join Date
    Dec 2005
    Gender
    male
    Location
    A place for amigos
    Posts
    22,696
    Reputation
    3409
    Thanks
    10,669
    My Mood
    Yeehaw
    I don't even have Java installed on my computer. Fuck that shit.

    MineCraft can go SMD, ain't worth it.



    v1.96 - Tutorials, Upgraded Town, Def Revamp
    v1.97 - Cutscenes/Quests, Friend List
    v1.98 - Classes, Necklace/Rings
    v1.99 - Guilds
    v2.00 - Open Beta


  6. #5

  7. #6
    Ahmad's Avatar
    Join Date
    Aug 2011
    Gender
    male
    Location
    Portland, OR
    Posts
    6,015
    Reputation
    642
    Thanks
    1,522
    My Mood
    Bashful
    Quote Originally Posted by arunforce View Post
    I don't even have Java installed on my computer. Fuck that shit.

    MineCraft can go SMD, ain't worth it.
    H- How could you hate MINECRAFT
    Wanna win $5 on PayPal? Subscribe to my Youtube for a chance to win.
    EVERY WEEK


  8. #7
    Azathᴏth's Avatar
    Join Date
    Oct 2009
    Gender
    male
    Location
    49°51′S 128°34′W
    Posts
    13,526
    Reputation
    1136
    Thanks
    1,683
    My Mood
    Lurking
    I dun even know how to disable java. Fuuuuuucked.

  9. #8
    SkyLight's Avatar
    Join Date
    Jul 2011
    Gender
    male
    Location
    Earth
    Posts
    961
    Reputation
    33
    Thanks
    1,604
    Just disable Java in your browser, not the whole thing itself.

  10. #9
    𝕡𝕠𝕔𝕜𝕖𝕥𝕤 𝕤𝕠 𝕗𝕒𝕥
    Admin
    arunforce's Avatar
    Join Date
    Dec 2005
    Gender
    male
    Location
    A place for amigos
    Posts
    22,696
    Reputation
    3409
    Thanks
    10,669
    My Mood
    Yeehaw
    Quote Originally Posted by Ahmad View Post


    H- How could you hate MINECRAFT
    Because you run it.



    v1.96 - Tutorials, Upgraded Town, Def Revamp
    v1.97 - Cutscenes/Quests, Friend List
    v1.98 - Classes, Necklace/Rings
    v1.99 - Guilds
    v2.00 - Open Beta


  11. #10
    Azathᴏth's Avatar
    Join Date
    Oct 2009
    Gender
    male
    Location
    49°51′S 128°34′W
    Posts
    13,526
    Reputation
    1136
    Thanks
    1,683
    My Mood
    Lurking
    Quote Originally Posted by arunforce View Post


    Because you run it.
    Oh snap .

  12. #11
    Ahmad's Avatar
    Join Date
    Aug 2011
    Gender
    male
    Location
    Portland, OR
    Posts
    6,015
    Reputation
    642
    Thanks
    1,522
    My Mood
    Bashful
    Quote Originally Posted by arunforce View Post


    Because you run it.
    You just mad we got 4 worlds, and plugins that make hacking impossible
    Wanna win $5 on PayPal? Subscribe to my Youtube for a chance to win.
    EVERY WEEK


  13. #12
    Ghost's Avatar
    Join Date
    Jun 2009
    Gender
    male
    Location
    Under your bed, watching you sleep.
    Posts
    24,674
    Reputation
    3481
    Thanks
    3,602
    i refuse



    My games;

    x

  14. The Following User Says Thank You to Ghost For This Useful Post:

    [MPGH]KING (08-30-2012)

  15. #13
    ShunnyBun's Avatar
    Join Date
    Sep 2010
    Gender
    female
    Location
    MPGH Paradise
    Posts
    1,650
    Reputation
    33
    Thanks
    111
    My Mood
    Happy
    question, my java isn't updated does that mean I still can get it? I keep getting "update java" and I just say no lol


  16. #14
    Dreamer.JR's Avatar
    Join Date
    Jul 2009
    Gender
    male
    Posts
    4,567
    Reputation
    624
    Thanks
    565
    My Mood
    Relaxed


    Uploaded with ImageShack.us

    So its like a virus? I don't get it, sorry I am noob.

  17. #15
    𝕡𝕠𝕔𝕜𝕖𝕥𝕤 𝕤𝕠 𝕗𝕒𝕥
    Admin
    arunforce's Avatar
    Join Date
    Dec 2005
    Gender
    male
    Location
    A place for amigos
    Posts
    22,696
    Reputation
    3409
    Thanks
    10,669
    My Mood
    Yeehaw
    Quote Originally Posted by Ghost View Post
    i refuse
    You're not trying to spam to 20k hard enough.



    v1.96 - Tutorials, Upgraded Town, Def Revamp
    v1.97 - Cutscenes/Quests, Friend List
    v1.98 - Classes, Necklace/Rings
    v1.99 - Guilds
    v2.00 - Open Beta


Page 1 of 2 12 LastLast

Similar Threads

  1. Replies: 3
    Last Post: 05-03-2011, 01:09 AM
  2. Now I told you What Is Islam If You Have Time !!!
    By dillers in forum Islam vs Western World
    Replies: 35
    Last Post: 05-14-2010, 04:00 PM
  3. join mvpz_4 life rank 300 ojin now!!!!!!!!!!!!!!!!!!!!!we do clan war every day
    By ***crossfire*** in forum CrossFire Clan Recruitment & Advertising
    Replies: 1
    Last Post: 10-02-2009, 05:46 PM
  4. Teach Yourself Borland Jbuilder And Java 2 In 21 Days (Sams)
    By nukeist_ in forum C++/C Programming
    Replies: 0
    Last Post: 07-16-2007, 01:16 AM