New Java Vulnerability Found Affecting Java 5, 6, and 7 SE

Posted by Unknown on Tuesday September 25, 2012 @07:15AM from the everything-is-compromised dept.

jcatcw writes "Just as Oracle is ramping up for the September 30 start of JavaOne 2012 in San Francisco, researchers from the Polish firm Security Explorations disclosed yet another critical Java vulnerability that might 'spoil the taste of Larry Ellison's morning ... Java.' According to Security Explorations researcher Adam Gowdiak, who sent the email to the Full Disclosure Seclist, this Java exploit affects one billion users of Oracle Java SE software, Java 5, 6 and 7. It could be exploited by apps on Chrome, Firefox, Internet Explorer, Opera and Safari. Wow, thanks a lot Oracle."

1 of 121 comments (clear)

Min score:

Reason:

Sort:

"Wow, thanks a lot Oracle." by Anonymous Coward · 2012-09-25 07:26 · Score: 5, Insightful

Release of Java 5: September 30, 2004
Oracle's acquisition of Sun: January 27, 2010
I know it's fun to hate on Oracle (commencing Ellison yacht joke in 5, 4, 3...), but it makes you look a little imbalanced to blame them for a vulnerability that exists in a product created by a different company almost 5+ years before Oracle even bought them.
Shouldn't we at least wait until after we find out that Oracle knew all about this for months on end, chose to tell no one, and then ported it forward into Java 7 before we lambaste them?