website statistics

FireEye, a security firm, has discovered yet another 0-day Java vulnerability which is currently being used by hackers.
1 Star2 Stars3 Stars4 Stars5 Stars (Rate This)
Loading...

The discovery of new Java vulnerabilities has become a bit too common over the last few months. Every few days, we get to see a new security exploit present in the software. Now, the security firm FireEye, has discovered another 0-day Java vulnerability that is actively being used to attack ‘multiple customers.’


Java

This essentially means that although the security experts have discovered this exploit only now, the hackers in the wild have been in knowledge of it for a while and had been using it actively for their nefarious purposes. The scary part is that this vulnerability is present even in the recent version of Java such as the Java v1.6 Update 41 or Java v1.7 Update 15.

So how exactly does this vulnerability work? According to FireEye,

“Not like other popular Java vulnerabilities in which security manager can be disabled easily, this vulnerability leads to arbitrary memory read and write in JVM process. After triggering the vulnerability, exploit is looking for the memory which holds JVM internal data structure like if security manager is enabled or not, and then overwrites the chunk of memory as zero.

Upon successful exploitation, it will download a McRAT executable from same server hosting the JAR file and then execute it.”

Naturally, like so many times in the past, this time too the most effective solution is to uninstall Java plugin on your browser. If you must use the software, install it as a plugin on a secondary browser and not on the default browser.

Source: FireEye

Courtesy: TNW

Buy Cheapest Related Product From Amazon.com


Apple May Be Readying A Polycarbonate iPhone Priced At $330

Facebook Finally Bought Atlas Ads Network From Microsoft
You can also press the left/right arrow key on your keyboard to go to previous/next post
  On March 1, 2013(3 years, 2 months ago.)

You May Also Like:

What Do You Think?

Leave a Reply




Loading Facebook Comments ...

FTC Disclosure: Some of the links of this website are "affiliate links." This means if you click on the link and purchase the item, we will receive an affiliate commission.


Recent Search

Recent Tutorials

Check out how to teach Siri about nicknames and relationships of the important people in your life in order to make your life easier.
Has your iPhone suddenly turned black & white? Check out this tutorial to know possible reasons & how to fix iPhone screen with few taps.
Check out this tutorial to download FREE movies and TV Shows streaming Showbox app and install it on your Android smartphone or tablet.
Parental Controls allows you to put restrictions on apps or content that can or can not be used by anyone else on your Apple iPhone or iPad.
If you want to print from iPhone without using any computer, check this out to connect and print wirelessly right from the Apple device.
Using Siri, anyone can bypass the Passcode even if iPhone or iPad is locked. Check out this to know how you can disable Siri on lock screen.
Floatify will let you quick reply to the messages or emails through notification bar using your Android Lollipop or Marshmallow.
If you do not know to do face swap, check out this tutorial to learn how the new Snapchat face swapping feature actually works.
Facebook has released the Live video streaming feature and we will show you how to go live using the Facebook app for Android or Apple.
Apple has added some new features along with the releasing of iOS 9.3. Now you can secure your iPhone Notes app with password protection.
Close You Have To Login
User:
Pass:
Login With »Login With TwitterLogin With Facebook