Access member only content, take part in discussions with comments on blogs, news and reviews and receive all the latest security industry news directly to your inbox. Join now for free.
A confirmation email has been sent to your email address - SUPPLIED EMAIL HERE. Please click on the link in the email to verify your email address. You need to verify your email before you can start posting.
If you do not receive your confirmation email within the next few minutes, it may be because the email has been captured by a junk mail filter. Please ensure you add the domain @scmagazine.com.au to your white-listed senders.
Landon Fuller, a former Apple engineer, said he decided to publish an "innocuous" proof-of-concept for a previously-patched critical Sun Java vulnerability so that he could shed light on the severity of the issue. The Mac OS X platform, last updated May 12, still does not contain a fix for the bug, in addition to 12 other, now-fixed Java vulnerabilities, he said.In an email, Fuller told SCMagazineUS.com that an unpatched user can be infected simply by visiting a website hosting a malicious Java applet. "With the ability to run arbitrary code, an applet may perform any action on the user's system, on the user's behalf," he said.Fuller, who in 2007 helped issue unofficial fixes for flaws disclosed by the Month of Apple Bugs Project, said he decided to publish the proof-of-concept in hopes Apple will realise the potential payload."The vulnerability has been publicly known for six months, fixed by multiple vendors and publicly described by several security researchers," Fuller said. "Unfortunately, Mac OS X issues often appear to be ignored if the severity of the issue is not adequately demonstrated."Fuller published the proof-of-concept in a blog post. As a workaround, he suggested Mac OS X users disable Java applets in their browsers.See original article on scmagazineus.com
To begin commenting right away, you can log in below or register an account if you don't yet have one. Please read our guidelines on commenting. Offending posts will be removed and your access may be suspended. Abusive or obscene language will not be tolerated. The comments below do not necessarily reflect the views or opinions of SC Magazine, Haymarket Media or its employees.