Slashdot Mirror

← Back to Stories (view on slashdot.org)

Serious New Java Flaw Affects All Browsers

Posted by Soulskill on from the at-least-it's-consistent dept.

Trailrunner7 writes "There is a serious vulnerability in Java that makes all current browsers vulnerable to simple Web-based attacks that could lead to a complete compromise of the affected system. Two separate researchers released information on the vulnerability on Friday, saying that it has been present in Java for years. The problem lies in the Java Web Start framework, a technology that Sun Microsystems developed to enable the simplified deployment of Java applications. In essence, the JavaWS technology fails to validate parameters passed to it from the command line, and attackers can control those parameters using specific HTML tags on a Web page, researcher Ruben Santamarta said in an advisory posted Friday morning."

9 of 164 comments (clear)

  1. All browsers? by K.+S.+Kyosuke · · Score: 4, Funny

    Oh come, on. Shall I try it in Links? I've told you a million times that you're not supposed to overuse hyperboles.

    --
    Ezekiel 23:20
    1. Re:All browsers? by Anonymous Coward · · Score: 2, Funny

      Perhaps, but if people have been getting bad java, they're going to need some ceramic parabolas right quick.

    2. Re:All browsers? by treeves · · Score: 3, Funny

      Stick it in your latus rectum.

      --
      ...the future crusty old bastards are already drinking the Kool-Aid.
  2. People have Java enabled in their browser? by WindSword · · Score: 3, Funny

    Wow! I never knew.

  3. This is Javocalypse by Anonymous Coward · · Score: 1, Funny

    Really.

  4. Re:Guess it's time to uncheck that box by AchilleTalon · · Score: 4, Funny

    Well, I am mainly writing Web client applications in Java to gain unauthorized access to your desktop.

    --
    Achille Talon
    Hop!
  5. Re:New? by Culture20 · · Score: 2, Funny

    [_] Enable computer power

    The ultimately in security, I've done it!

    I didn't see a "*($^#@$@^$&&&... NO CARRIER". I call shenanigans!

  6. HURRY!!! by Anonymous Coward · · Score: 2, Funny

    Both users of Java Web Start need to be contacted immediately!

  7. Re:Article Contents by Anonymous Coward · · Score: 1, Funny

    After all any geek here at /. can get a system fully running and tweaked nicely in a couple of hours, how long would it take to replace that only copy of your vacation photos, or that only copy of your late grandmother's last Xmas here on earth?

    Backups.
    Wanna hear somehing amazing? If your root/admin account is safe you can store those on the same computer!