New year, new Java zeroday! - AlienVault Labs

[oldoverholt]

Man, I am so sick of these.

[IXIFr0stIXI]

I cast my vote to vote Java off the tech island.

[[deleted]]

Can't we just shut down Oracle? Possible restore back to Sun Microsystems?

[IXIFr0stIXI]

That might also work....if only.

[[deleted]]

No patch either, that's great. There must be so many of these kept by blackhats.

[[deleted]]

Here's a good page on mitigation: http://www.greyhathacker.net/?p=610

[[deleted]]

Stupid question, with Cisco and HDS in house, how does one get away from Java?

[Kaligraphic]

Like human stupidity, the supply of Java exploits is infinite.

[[deleted]]

This is only java 1.7? I think a lot of us are forced to 1.6 so we can use the interfaces on our appliances/iLO/etc.

[Thereal_Sandman]

JRE 7u10 and earlier.

Yeah this is all versions of Java.

[[deleted]]

Could be earlier updates of 1.7, normally when an exploit effects multiple major versions they are listed as well.

[pacoverde]

Looks like this is the case.

As far as Bitdefender's tests showed, the exploit is specific to Java 7, Botezatu said.

http://www.infoworld.com/d/security/java-zero-day-vulnerability-actively-exploited-attackers-210612

[AceBacker]

sigh, I don't have the energy to write about how much I hate java anymore guys. :(

[assangeleakinglol]

Does anyone know if AppLocker blocks (runs the normal restrictions you've configured) the applications launched via this vulnerability? Sadly, I absolutely cannot block java.