New Java vulnerability being exploited in the wild

Victor Barreiro Jr.
Posted on 01/11/2013 12:13 PM  | Updated 01/11/2013 12:32 PM

JAVA VULNERABILITY. It may be time to uninstall or disable Java on your system. Screen shot from Java homepage.JAVA VULNERABILITY. It may be time to uninstall or disable Java on your system. Screen shot from Java homepage.

MANILA, Philippines - Those of you with Java plugins on your computers will want to disable or uninstall it for a bit. A new report is pointing to a vulnerability in Java that is currently being exploited.

The US Computer Emergency Readiness Team (US-CERT) issued a notice saying that, "Java 7 Update 10 and earlier contain an unspecified vulnerability that can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system."

According to the report, users who visit a "specially crafted HTML document" can become susceptible to remote attackers who can fire off "arbitrary code" on the affected system. For example, AlienVault Labs noted it was able to replicate the issue and make an affected system run a calculator program without user prompts.

The vulnerability was first found out by a French researcher called Kafeine who posted relevant findings on his Malware Don't Need Coffee blog.

The only way to remedy the issue at present is to disable Java or otherwise uninstall Java from your system. Searching on Google should provide additional information on uninstalling Java relative to your system, but How-To Geek and Sophos both have walkthroughs for disabling Java on most browsers. - Rappler.com


This story makes people happy
How did this story make you feel?

EDITOR'S PICK



Who will inherit the throne?

Rappler takes you through the Miss Philippines Earth 2013 competition with these specials: