old java flaw

ZDNet Resources

• sort by:
• Relevance
• Date
• Popularity

Mac OS X vulnerable to 6-month old Java flaw

Mac OS X vulnerable to 6-month old Java flawNah.....Apple designed OSX with security in mind from the start. What, this isn't an OSX flaw? Just goes to show you that you can never be too safe. I would expect that Apple users will make a run on...

Tags: Operating systems, Desktops, Apple Mac OS X, old Java flaw, Java, Java flaw, Apple Macintosh, Apple Mac OS, Apple Inc., OSX Flaw, security, flaw

Discussion threads 2009-05-20

Additional Resources

New LoroBot ransomware encrypts files, demands $100 for decryption

You forgot to mention....which OSs it affects! Or is it based on something multi-platform like Java?Look at the bigger size version of the screenshot, it's all in thereA lot of russian characters and...YES, you guessed it right, the word "windows" prominently displayed in red in the title.Who would ever thought...

Tags: Spyware, adware & malware, Cyberthreats, LoroBot, decryption, malware

Discussion threads 2009-10-27

Microsoft breaks Firefox

IE Welded into WindowsIE is welded into the Windows Operating System,that is why Windows is so insecure and proneto viruses/worms.They thought by making IE basically explorer.exein concept they would ruin any competitor likeNetscape well they did in a way.Interesting part of it is, they failed becauseFirefox is the most popular...

Tags: Web browsers, SECURITY, Operating systems, Microsoft Internet Explorer, Mozilla Firefox, Microsoft Corp., flaw, Microsoft Windows

Discussion threads 2009-10-19

Apple finally patches musty old Java for Mac vulnerabilities

Apple has finally released a Java for Mac update to fix multiple security flaws that were patched upstream more than six months ago. The fix comes three weeks after developers released proof-of-concept code to demonstrate the severity of the flaw and to nudge embarrass Apple into shipping...

Tags: Apple Macintosh, Vulnerability, Patch Management, Apple Inc., Programming Languages, Java, Software Development, Software/Web Development, Ryan Naraine

Blog posts 2009-06-15

News to know: Botnets; Adobe patch day; NetApp; Craigslist

Here are today’s notable headlines. You can get News To Know via email alert and RSS daily.  For continuous updates see BNET’s around-the-Web tech coverage. Dancho Danchev: Inside the botnets that never make the news - a gallery Images: Inside the botnets that never make the news right ...

Tags: Adobe Systems Inc., NetApp Inc., Craigslist, Dana Blankenhorn, Microsoft Corp., Robots, GPS, Document Management, Storage, Emerging Technologies, Consumer Electronics, Personal Technology, Enterprise Software, Software, Finance, Managerial Accounting, Hardware, Larry Dignan

Blog posts 2009-05-21

Mac OS X vulnerable to 6-month old Java flaw

Attention Mac OS X users:  Turn Java off immediately or you could be at high risk of malicious code execution attacks. Tired of waiting for a patch from Apple for a Java flaw that was fixed upstream six months ago, Mac developer Landon Fuller (of Month of...

Tags: Malicious Code, Apple Macintosh, Java Applet, Flaw, Vulnerability, Apple Inc., Applet, Landon Fuller, CVE-2008-5353, Apple Mac OS X, Apple Mac OS, Java, Programming Languages, Operating Systems, Security, Software, Software Development, Software/Web Development, Ryan Naraine

Blog posts 2009-05-20

EC wants software makers held liable for code

EC wants software makers held liable for code ABOUT TIME!!!!This goes for everyone...Only in software can you find a known defect and then have to pay for the "upgrade" to fix the bug.Many states do this sort of thing with insurance companies every so oftenEither they'll require certain coverage and...

Tags: Tools & Techniques, Insurance, software, software company

Discussion threads 2009-05-11

GPL's cloudy future

One of the things about getting older is that you learn to ignore things until you have to do something about them. It's a learned efficiency, I suppose, rationing your increasingly precious time out to the unceasing demands upon it. I finally realized I have to do some serious thinking...

Tags: Software, GPL, Cloud Computing, Free Software Foundation, BSD, Free Software, Affero GPL, AGPL, Open Source, Jeremy Allison

Blog posts 2009-04-07

Google Chrome ... the day after

Google Chrome ... the day afterGoogle Chrome ... the day afterGoogle Chrome had its initial spike from people trying it then realizing how broken it is. So they went back to their default browsers leaving Google out in the cold. The countdown begins now for them to cut...

Tags: Web browsers, Scripting languages, countdown, FF3, Google Chrome, Google Inc., Chrome, IE8

Discussion threads 2008-09-03

Windows broken ... I'm surprised it took this long

Windows broken ... I'm surprised it took this longBest security is to take computers off the NetFor my computers at home, there is now only one that has firewalled access to the Internet. My kids' computers DO NOT. My media server DOES NOT. The PC with my finance stuff and...

Tags: Microsoft Windows Vista (Longhorn), Operating systems, Web browsers, Microsoft Windows Vista, Microsoft Windows, UAC, administrative right

Discussion threads 2008-08-09

ToorCon Seattle 2008: Nuke plants, non-existent sub domain attacks, muffin diving, and Guitar Hero

*** Updated: ToorCon images uploaded.  Click here!  Alright, that title probably sounds pretty random... well, welcome to ToorCon!  ToorCon has long been one of my favorite conferences for the easy atmosphere, laid-back presentations, and parties.  This year's Seattle-based ToorCon was the best I've been to. ...

Tags: Attack, Conference, Domain, Microsoft Corp., Nathan McFeters, Researcher, Security, ToorCon Seattle 2008, XSS

Blog posts 2008-04-21

Defending Java against Paul Murphy

Defending Java against Paul MurphyA musician's mindObviously no musician created it. But did he or she hang around a radio station before throwing the logic in there?Sorry Mr. Carroll...... but I'll remind you that "What moved me to respond ... was what I consider to be an inaccurate portrayal...

Tags: Programming languages, C/C++, SECURITY, Paul Murphy, Java, flaw, C, Microsoft .NET, Microsoft Corp.

Discussion threads 2008-04-08

More details on the Pwn2Own Flash flaw that won the Vista machine

More details on the Pwn2Own Flash flaw that won the Vista machineOr should we blame MicrosoftFor their inability to push DEP sooner and get more of a response out developers sooner and breaking applications that have been coded wrongly for years.That would be the ABMer's excuse anyway.NBMer would say that...

Tags: Microsoft Windows Vista (Longhorn), Programming languages, Operating systems, UNIX, SECURITY, Pwn2Own Flash, Pwn2Own Flash flaw, Microsoft Windows Vista, data execution prevention, Vista Machine, Java, flaw, Nate, Adobe Systems Inc., Microsoft Corp., Linux

Discussion threads 2008-03-31

Mozilla ups unpatched Firefox flaw to 'high severity'; Preps fix

Mozilla ups unpatched Firefox flaw to 'high severity'; Preps fixIt seems you are the only one showing bias.That story was covered here http://blogs.zdnet.com/security/?p=840 and has nothing to do with this article. Try staying on subject.Please don't......make someone have to post links to all the hundreds of ZD Net articles...

Tags: Web browsers, SECURITY, window, Microsoft Windows Vista, Mozilla Firefox, flaw, Mozilla Corp., Google Inc.

Discussion threads 2008-01-30

Visual Studio 2008 has shipped

Visual Studio 2008 has shippedSlight-typoMicrosoft tends to drive adoption of it's technology through strong-[b]arm[/b] tools support.Just ask Compaq about how MS treated them when they didn't give IE top billing...More revisionist history"From the BASIC compiler developed by Bill Gates in the company's early days and used in early Apple computers...

Tags: PRODUCTIVITY, Microsoft development tools, Tools & Techniques, Development tools, Middleware, Microsoft Visual Studio 2008, Microsoft Corp., Apple Inc., Microsoft Visual Studio

Discussion threads 2007-11-21

Unpatched QuickTime-to-Firefox flaw dings IE too

Security researcher Aviv Raff has found a way to use the one-year-old and still unpatched QuickTime vulnerability to automate XAS cross application scripting attacks against users of Microsoft's Internet Explorer. To demonstrate the attack scenario, Raff embedded a rigged QuickTime file on Google's BlogSpot to force a...

Tags: Apple QuickTime, Microsoft Internet Explorer, Attack, Ryan Naraine

Blog posts 2007-09-14

Apple patches AirPort Extreme base station

Apple has released a firmware upgrade to fix a remotely exploitable security issue in the AirPort Extreme Base Station. The flaw, publicly known since April, could allow remote attackers  to adversely affect network performance," Apple said in an advisory. The skinny (CVE-2007-2242): A...

Tags: IPv6, Network, Patch Management, Apple Inc., Ryan Naraine

Blog posts 2007-08-29

Apple's iPhone vulnerable to hackers: report

Apple's iPhone vulnerable to hackers: reportWhere's the beef?Exactly what is the exploit?Design Flaw From The Start - No Java; WiMaxFriday, I concluded that the iPhone would not be enhanced in any way owing to the replacement of WiFi with WiMax and Job's refusal to entertain Java in the browser. In...

Tags: Programming languages, WiMAX, Wi-Fi, Apple Inc., job, Apple iPhone, Java, phone, hacker

Discussion threads 2007-07-23

Java flaw poses widespread security threat

Java flaw poses widespread security threatArticle needs more detail...NTI'm sure it's only java on windozejava on Linux is safe because of the security built into the OS.One more reason to switch to Linux.I use NOSCRIPT in firefoxso i can limit the sites which use java...Too late..Vuln affects only JRE 1.5.0_10...

Tags: Programming languages, security, Google Inc., Microsoft Corp., job, VMware Inc., Java, applet

Discussion threads 2007-07-13

Apple plugs eight more QuickTime holes

Apple plugs eight more QuickTime holesDoesn't affect me, I steer clear of all Apple softwareSo far, I've yet to be infected with any type of malware in the 12 years I've been running Windows. Hmm, we already know that [url=http://blog.washingtonpost.com/securityfix/2006/10/apple_ships_video_ipods_with_w.html] Apple deliberately infects their Windows software with viruses [/url] so...

Tags: Tools & Techniques, Spyware, adware & malware, Cyberthreats, Digital music, SECURITY, Digital media, Apple Inc., Apple Software, zealot, software, Apple QuickTime, flaw, Microsoft Windows

Discussion threads 2007-07-11