Java 7 Zero-Day Security Hole Fixed

[rakman]

Java 7 version 7 is now available for Windows PCs at www.java.com

Windows 7 PC are being hacked more frequently with this security hole, so patch now.

http://www.computerworld.com/s/article/9230786/Oracle_s_emergency_Java_patch_blocks_zero_day_exploits_researchers_confirm?source=CTWNLE_nlt_pm_2012-08-30

[Jayman]

or could follow that thread

[MJCM]

It seems it's not over yet ....

One of the research groups that first reported the zero-day patched by Oracle yesterday (ref: J7 U7) reports a new zero day vulnerability.

Link: http://news.softpedia.com/news/Java-Users-Still-Not-Safe-Experts-Report-New-Vulnerability-to-Oracle-Exclusive-289249.shtml

[Jayman]

Thanks for the heads up. Think it's time to just disable java.

[Phil Conners]

I think with the default browser setting, the browser pops up a confirmation box before executing any Java content, at least that's what happens for me with Chrome Canary. Obviously there is the option of ticking "always accept anything" but that'd just basically make it a user-area error. I need Java for certain server tools so prefer having it installed. I could install it in a different browser but that'd just be inconvenient and with the pop up I guess it's safe enough.

[MJCM]

^ Maybe you can Have a look at NotScripts for Chrome

NotScripts gives you a high degree of "NoScript" like control over what javascript, iframes, and plugins runs in your browser to increase security and lower the CPU usage. It is useful to help mitigate some attacks like certain cross-site scripting (XSS) vulnerabilities and drive by downloads by blocking the third-party content before it even runs with it's default deny policy.

You can whitelist the sites you want through an easy to use url bar icon and drop down menu.

Link : http://optimalcyclin...cts/notscripts/

Link: https://chrome.google.com/webstore/search/notscripts

[Chicog]

Latest version of 6 is 35 by the way.

[Jayman]

Latest version of 6 is 35 by the way.

ver 6 is ripe with it's own set of problems. You should always be running the latest java or just disable it.

[sbk]

Hi

Please do check and don't post the same thing over and over

Please continue here

http://www.thaivisa.com/forum/topic/580180-java-7-zero-day-security-hole/

//CLOSED//