Sun Microsystems has fixed a pair of security bugs in Java that could be exploited by attackers to take over computers running Windows, Linux and Solaris.
The flaws are "highly critical," security monitoring company Secunia said in an advisory posted Tuesday. Flaws that get that ranking--one notch below Secunia's most severe "extremely critical" rating--are typically remotely exploitable and can lead to full system compromise.
Both flaws affect the Java Runtime Environment, or JRE. This is the Java software many computer users have on their system to run Java applications. The bugs could allow a Java application to read and write files or execute applications on a victim's computer, Sun said in two separate security advisories released Monday.
Solution:
View: More Information
Download: Java 2 Platform Standard Edition 5.0
Download: Java 2 Platform, Standard Edition, v 1.4.2 (J2SE)
News source: C|Net News.com
The flaws are "highly critical," security monitoring company Secunia said in an advisory posted Tuesday. Flaws that get that ranking--one notch below Secunia's most severe "extremely critical" rating--are typically remotely exploitable and can lead to full system compromise.
Both flaws affect the Java Runtime Environment, or JRE. This is the Java software many computer users have on their system to run Java applications. The bugs could allow a Java application to read and write files or execute applications on a victim's computer, Sun said in two separate security advisories released Monday.
Solution:
- Update to J2SE 5.0 Update 2 or 1.4.2_08 for Windows, Solaris, and Linux. (According to Secunia)
View: More Information Download: Java 2 Platform Standard Edition 5.0 Download: Java 2 Platform, Standard Edition, v 1.4.2 (J2SE) News source: C|Net News.com
What's New: (continued)
DivX Player:
- Features the latest DivX decoder for enhanced quality and performance
- Integrates support for DivX media file playback
- Incorporates enhanced HD playback capability
DivX Codec
- Offers up to 40% better quality and compression than the DivX 5 codec.
- Features enhanced playback performance and quality
- Adds DivX media file playback support to all popular media players
The DivX® codec is included in all DivX bundles. The DivX Pro™ codec is included in the DivX Create Bundle.
IMHO i dislike the webpages with javas.
I suggest you read the stuff in http://java.sun.com
WTF? More FUD from Secunia.
Microsoft has had this honor from Secunia numerous times. This company is in the same business as Chicken Little. Too bad they don't have more creditability.
Because there is a newer version out there that addresses additional issues, that's why.
First of all, there is nothing old about Java --it is one of the most modern platforms/environments available. Second, Java is actually pretty good at what it does, so save your lame comments unless you can be more specific.
Holy ****, call the president! Roll out the SWAT teams! Activate the emgency response plan!
Talk about a non-issue.
Commenting has either been disabled on this article or you are not logged in. Click here to login or register, its free!
Note: Anonymous commenting is disabled in order to keep the quality of responses to a high standard.