Advanced

Oracle's Java patch leaves a loophole

Posted by Scott_Ruecker on · 2 comments
The H Open
Mail this story
Print this story

Adam Gowniak is indefatigable: last weekend, Oracle released an emergency patch for the 0day hole in Java, and the security researcher has already found the next loophole. In a posting on the Full Disclosure mailing list, the expert has only revealed that the flawed MBeanInstantiator method inspired him to search for further holes. Brian Krebs had previously mentioned a new exploit that can't be neutralised with Oracle's patch; whether this concerns the same vulnerability remains unclear.

Full Story

  Nav
» Read more about: Story Type: News Story; Groups: Oracle

» Get new stories by e-mail: nightly or as they are published

« Return to the newswire homepage

  Related stories
» More like this

Comments (2)

Well... some people can take care of that on their own.

I do (most definitely) ask first, before meddling that way. Tempting as it might be, I don't sneak in like some caped crusader in the night.

But so far no-one has refused the offer, except for a couple -- who know enough what they're doing to take care of it themselves, after checking that they don't need it.

Only issue so far has been Minecraft, but those who care that much, would rather not play in the browser, anyway.

Heh, was about to bring up Minecraft as I am occupationally bound to it, in a manner of speaking, being the co owner of a fairly prominent Minecraft server/community. But yeah you are correct, don't know anyone who'd want to run that in the browser.

Post a comment

A free account is needed to post. Write your comment here first: your text is kept in this browser while you sign up or log in, and is waiting for you when you come back.

Your message:
|||||
10
Markdown: **bold**, *italic*, [text](https://link), - lists, > quotes, $x^2$ for math. Formatting help

Sign up and post (it is free)  or  Log in and post