Keep up with the latest cybersecurity threats, newly discovered vulnerabilities, data breach information, and emerging trends. Delivered daily or weekly right to your email inbox.
2 More Java Zero-Day Vulnerabilities Emerge2 More Java Zero-Day Vulnerabilities Emerge
While Oracle investigates reports that two bugs in Java 7 could allow attackers to remotely bypass the sandbox and compromise a system, security experts reiterate: If you don't need Java, turn it off
1 Min Read
Cue yet another Java security warning: A security researcher said he's spotted two new zero-day vulnerabilities in Java 7.
"We had yet another look into Oracle's Java SE 7 software that was released by the company on Feb. 19, 2013," said veteran Java bug hunter Adam Gowdiak, CEO and founder of Poland-based Security Explorations, in an email to the Bugtraq mailing list. "We have discovered two new security issues (numbered 54 and 55), which when combined together can be successfully used to gain a complete Java security sandbox bypass in the environment of Java SE 7 Update 15."
In other words, the most recently released version of Java has flaws that could be remotely exploited by attackers to bypass the built-in sandbox and compromise not only the Java software, but the system on which it's running.
Read the full article here.
Have a comment on this story? Please click "Discuss" below. If you'd like to contact Dark Reading's editors directly, send us a message.
About the Author
You May Also Like
More Insights
Webinars
Uncovering Threats to Your Mainframe & How to Keep Host Access Secure
Feb 13, 2025Securing the Remote Workforce
Feb 20, 2025Emerging Technologies and Their Impact on CISO Strategies
Feb 25, 2025How CISOs Navigate the Regulatory and Compliance Maze
Feb 26, 2025Where Does Outsourcing Make Sense for Your Organization?
Feb 27, 2025
Events
