Oracle is working on an update to address a flaw in its Java software.
The company says it will release a patch that will fix 86 vulnerabilities in Java 7 on Tuesday.
The Department of Homeland Security last week said computer users should disable the program in web browsers because hackers were using a zero-day vulnerability to attack computer systems. Criminals were using the flaw to stealthily install malware on the computers of users who visit compromised websites.
The problem, which affects Oracle Java 7 update 10 and earlier, can allow an untrusted Java applet to escalate its privileges, without requiring code signing.
Java, which is running on 850 million computers, is a computer language that lets programmers write software using just one set of codes for computers running Windows, Apple OS X and Linux. Internet browsers use it to access web content and computers and other devices use it to run a plethora of programs.
In fact, Java is so ubiquitous that the software has become a major bull’s-eye for hackers. Last year, Java overtook Adobe Reader as the most frequently attacked software, according to computer security firm Kaspersky Lab.
Mac users probably don’t have to worry because Apple already removed Java plug-ins from OS X browsers. Apple apparently learned a lesson last year when it took its time making a Java patch available and as a result more than 600,000 Macs were infected with malware.
Last February, Oracle released a fix for a targeted vulnerability identified as CVE-2012-0507 and included it in an update for the Windows version of Java. However, since Apple distributes a self-compiled version of Java for Macs, it ports Oracle's patches to it according to its own schedule, which can be months behind the one for Java on Windows.
Mozilla also has blacklisted all current releases of Java.
“The advantage to this approach is that you are prompted every time a website wants to launch a Java applet and you can make an informed decision as to whether you truly need that applet,” says security firm Sophos in a blog post.
Copyright (c) 2013 PCWorld Communications, Inc.
latest tech galleries
pc world news
Before the advent of agriculture 10,000 years ago, humans got their food by hunting, gathering, and fishing. Scientists are turning to these ancient me... More Before the advent of agriculture 10,000 years ago, humans got their food by hunting, gathering, and fishing. Scientists are turning to these ancient methods of subsistence for insights into how we can feed our growing global population in years to come—without overwhelming the planet. In its September 2014 issue, National Geographic magazine explores the evolution of the human diet across a wide spectrum of cultures: http://www.nationalgeographic.com/foodfeatures/evolution-of-diet/ By 2050 we'll need to feed two billion more people. Click here for a special eight-month series exploring how we can do that—without overwhelming the planet: http://food.nationalgeographic.com.
Date 23 hrs ago, Duration 1:19, Views 237