Viruses/Worms News

Apple fixes Java security flaw for Mac OS X

Wednesday, June 17, 2009

Apple patched 32 vulnerabilities in multiple versions of Java used in Mac OS X 10.5 and Mac OS X 10.4, more than six months after Sun Microsystems fixed the same flaws for Windows and Linux platforms.

The company acknowledged that some of the flaws could be used by remote attackers to take control of Macs. "Visiting a web page containing a maliciously crafted untrusted Java applet may lead to arbitrary code execution," the company said in its security bulletin.

Because Apple uses its own versions of Java, the company frequently fixes security flaws months after Sun issues them.

Last month, Landon Fuller, a former Apple employee, published proof-of-concept for a Mac Java vulnerability on his blog because "it seems that many Mac OS X security issues are ignored if the severity of the issue is not adequately demonstrated."

As the vulnerability had been public knowledge for six months, "I have decided to release a my own proof of concept to demonstrate the issue," Fuller wrote.

ADNFCR-1765-ID-19223342-ADNFCR

Related News:

Researchers: Malware attackers reloading for Windows 7 assaults - 11.20.2009
A report issued yesterday by computer security firm Symantec says that hackers are undoubtedly reworking their malicious software to target Windows 7 as more users switch to the latest version of Microsoft's flagship OS.

Want to secure your iPhone against intruders? There's an app for that - 11.20.2009
Cisco Systems today released a free iPhone app that will allow users to receive security updates and the latest news on web threats, as well as aggregating additional security related content for iPhone users.

Microsoft says 64-bit versions of Windows are harder to infect - 11.19.2009
Members of Microsoft's security team write that 64-bit editions of Windows are much less susceptible to malware attacks, but outside experts caution that 64-bit malware could be the next big thing in cyber crime.

Google coming down hard on malicious advertisers - 11.18.2009
Search giant Google has said that it will lay down the law where scam artists and malvertisers are concerned: Permanent bans will be the result of any fraudulent activity on the company's AdWords service.

If at first you don't succeed: Most malware protection fails first round of certification testing - 11.17.2009
A study performed by security testing and research firm ICSA Labs says that almost four out of five computer security products fail their first certification tests and need to be retooled for a second and sometimes a third attempt.
View Related Resources
Or
Watch an Online Demo
Or
Have us call you now