New Java Attack Rolled into Exploit Packs
Summary: An exploit for the Java sandbox-bypass flaw CVE-2012-0507 has been rolled into automated exploit kits, including BlackHole, the most widely used exploit pack, after Microsoft's Malware Protection Center reported samples loading the ZeuS Trojan. Rapid7 researcher Marcus Carey estimated that 60 to 80 percent of computers running Java were vulnerable at the time, and Oracle says Java is deployed on more than 3 billion systems worldwide.
Key Takeaway: Rapid7's patch data showed adoption of a Java update at under 10 percent in the first month and the highest rate last year at 38 percent three months after release, so an exploit added to BlackHole reaches a large unpatched population almost immediately.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2012-0507
- Related
- CVE-2012-0507: Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability Known Exploited Vulnerabilities · Mar 03, 2022Urgent Fix for Zero-Day Mac Java Flaw Cyber Risks ·Multiple Human Rights, Foreign Policy Sites Hacked Cyber Risks ·