Apple patches Summerc0n Java for Mac security hole
Apple has rushed out a Java for Mac update to fix multiple security vulnerabilities, including a critical flaw discussed three months ago at Summerc0n by researcher Dino Dai Zovi.
The Java for Mac update rolls up fixes for extremely critical security holes in Java 1.6.0_20. The most serious flaws allows an untrusted Java applet to execute arbitrary code outside the Java sandbox. These could be exploited to launch drive-by download attacks.
Apple also fixed two additional remote code exection issues, including one that was publicly released by Dai Zovi in June (see slides - PDF).
Continue reading
The Java for Mac update rolls up fixes for extremely critical security holes in Java 1.6.0_20. The most serious flaws allows an untrusted Java applet to execute arbitrary code outside the Java sandbox. These could be exploited to launch drive-by download attacks.
Apple also fixed two additional remote code exection issues, including one that was publicly released by Dai Zovi in June (see slides - PDF).
Continue reading
Comments
Post a Comment