Forest Global Training Partners

Cyber Risks · Krebs on Security

Oracle Ships Critical Security Update for Java

Summary: Oracle released Java 7 Update 11 to fix a critical vulnerability (CVE-2013-0422) in Java 7 Update 10 and earlier versions of Java 7 that malware and attackers were exploiting to break into vulnerable computers. The update also raised the default security level for Java applets and web start applications from "Medium" to "High," so users are now warned before any unsigned application runs.

Why it matters: Oracle had already tried and failed to fix this flaw in an earlier update, and researcher Adam Gowdiak found the new patch still leaves a number of critical security flaws - a reminder that a vendor patch is not the same as a closed hole.

Read the original at Krebs on Security ↗

Topics
Vulnerabilities & Patching
Mentions
CVE-2013-0422
Related
CVE-2013-0422: Oracle JRE Remote Code Execution Vulnerability Known Exploited Vulnerabilities · May 25, 2022