Slashdot Mirror

← Back to Stories (view on slashdot.org)

Serious New Java Flaw Affects All Browsers

Posted by Soulskill on from the at-least-it's-consistent dept.

Trailrunner7 writes "There is a serious vulnerability in Java that makes all current browsers vulnerable to simple Web-based attacks that could lead to a complete compromise of the affected system. Two separate researchers released information on the vulnerability on Friday, saying that it has been present in Java for years. The problem lies in the Java Web Start framework, a technology that Sun Microsystems developed to enable the simplified deployment of Java applications. In essence, the JavaWS technology fails to validate parameters passed to it from the command line, and attackers can control those parameters using specific HTML tags on a Web page, researcher Ruben Santamarta said in an advisory posted Friday morning."

7 of 164 comments (clear)

  1. All browsers? by K.+S.+Kyosuke · · Score: 4, Funny

    Oh come, on. Shall I try it in Links? I've told you a million times that you're not supposed to overuse hyperboles.

    --
    Ezekiel 23:20
    1. Re:All browsers? by Anonymous Coward · · Score: 2, Funny

      Perhaps, but if people have been getting bad java, they're going to need some ceramic parabolas right quick.

    2. Re:All browsers? by treeves · · Score: 3, Funny

      Stick it in your latus rectum.

      --
      ...the future crusty old bastards are already drinking the Kool-Aid.
  2. People have Java enabled in their browser? by WindSword · · Score: 3, Funny

    Wow! I never knew.

  3. Re:Guess it's time to uncheck that box by AchilleTalon · · Score: 4, Funny

    Well, I am mainly writing Web client applications in Java to gain unauthorized access to your desktop.

    --
    Achille Talon
    Hop!
  4. Re:New? by Culture20 · · Score: 2, Funny

    [_] Enable computer power

    The ultimately in security, I've done it!

    I didn't see a "*($^#@$@^$&&&... NO CARRIER". I call shenanigans!

  5. HURRY!!! by Anonymous Coward · · Score: 2, Funny

    Both users of Java Web Start need to be contacted immediately!