In OS X, check the Java Preferences utility to see what version of Java you are running. All you have to do is visit a compromised Web site with a malicious Java applet, and most browsers will not even indicate the exploit is running.
If by chance a Google search results in you clicking a site that has this exploit, then if you have Java installed, your computer could be quickly compromised. This behavior is not particularly new for vulnerabilities however, this one is a bit different in that the exploit is easy to perform, does not require authentication or other user input to run, and remains hidden on most browsers.īeyond all of these details is the real issue here, which is that packaged versions of the exploit are apparently being actively sold and distributed among hackers on underground cybercrime networks, meaning that it is very likely to be implemented on many sites. For standard user accounts that's restricted to the user's home folder and attached disks, but for administrators it includes the Applications folder and parts of the global library and system folders.
#JAVA 1.6 MAC OS X TIGER CODE#
This means that malicious code in the applet can have access to any system feature your account has access to. The vulnerability allows a maliciously crafted Java applet to run undetected on many browsers and allows code to execute outside of the Java sandbox with the privileges of the current user. The exploit was found a couple of months ago and was addressed in the latest round of Java updates both from Oracle and from Apple for OS X users however, many people have not yet updated their systems and hackers are working to take advantage of this flaw on these systems. There is a rather serious vulnerability in Java version 1.6.0_26 that is apparently being actively pursued by hackers, one that is easy to implement and allows hackers to compromise systems without being detected.
0 kommentar(er)
