CommanderFrank
Cat Can't Scratch It
- Joined
- May 9, 2000
- Messages
- 75,399
We reported to you earlier this week about the flaw in Java and the recommendations and precautions to take to safeguard your computers. Today Oracle announced that in addition to a scheduled update to patch 86 vulnerabilities on Tuesday, the company will also release a fix to the zero-day flaw.
Criminals were using the flaw to stealthily install malware on the computers of users who visit compromised websites. The problem, which affects Oracle Java 7 update 10 and earlier, can allow an untrusted Java applet to escalate its privileges, without requiring code signing.