News Vulnerability & Threats

2 More Java Zero-Day Vulnerabilities Emerge

While Oracle investigates reports that two bugs in Java 7 could allow attackers to remotely bypass the sandbox and compromise a system, security experts reiterate: If you don't need Java, turn it off

Mathew J. Schwartz, InformationWeek
Special to Dark Reading February 27, 2013

Cue yet another Java security warning: A security researcher said he's spotted two new zero-day vulnerabilities in Java 7.

More Security Insights

White Papers

More >>

Reports

More >>

Webcasts

More >>

"We had yet another look into Oracle's Java SE 7 software that was released by the company on Feb. 19, 2013," said veteran Java bug hunter Adam Gowdiak, CEO and founder of Poland-based Security Explorations, in an email to the Bugtraq mailing list. "We have discovered two new security issues (numbered 54 and 55), which when combined together can be successfully used to gain a complete Java security sandbox bypass in the environment of Java SE 7 Update 15."

In other words, the most recently released version of Java has flaws that could be remotely exploited by attackers to bypass the built-in sandbox and compromise not only the Java software, but the system on which it's running.

Read the full article here.

Have a comment on this story? Please click "Discuss" below. If you'd like to contact Dark Reading's editors directly, send us a message.

Dark Reading Discussions

Start the Discussion

To upload an avatar photo, first complete your Disqus profile. | View the list of supported HTML tags you can use to style comments. | Please read our commenting policy.

Follow Dark Reading

Dark Reading Reports

Ten Emerging Threats Your Company May Not Know About

The devil you know is better than the one you don't. Never was that adage more true than in today's complex, ever-changing computing landscape. Unfortunately, new (and sometimes renewed) security threats are rising every day, putting IT and security pros in a defensive posture. In this Dark Reading report, we examine 10 emerging threats that you should have on your radar now.
Five Ways To Better Hunt The Zebras In Your Network

This issue of InformationWeek's Must Reads explores ways to protect vulnerable users in your company, lessons learned from the Evernote breach, how the FBI is improving enterprise insider theft detection and more.

Related Content

Sponsored by

Security for Software Systems in the Cloud

The software industry has learned that putting fancy boxes on the network doesn't fix bad software, cloud converts must focus on the risks they bring along with the software they deploy. This paper details risks to software deployed in the cloud and what steps to take to mitigate that risk.
2012 HP Cyber Risk Report

Did you know it takes an average of 416 days to detect a security breach? Read the 2012 HP Cyber Risk Report to learn about the intelligence your enterprise needs to better understand how to deploy security programs to minimize risk and protect against a breach. Gain insight into the top vulnerability trends, web application vulnerabilities, mobile application security, as well as what to look for in the year ahead to keep your enterprise secure.
Know the Big Three

There is no question that mobile computing is growing at an exponential rate. This rapid transformation has seen security concerns outpaced by the ease of use, flexibility, and productivity of mobile devices. When vulnerabilities are exploited, the security of mission-critical data becomes a serious concern. In this this white paper, learn about three of the top mobile application security threats facing businesses today and recommendations on how to mitigate the risk.
Seven Steps to Security

After a decade of news detailing countless successful cyber-attacks, it's hard to imagine a corporation not understanding that they need a software security solution. However, building a comprehensive software security program can be overwhelming. Unlike implementing software quality assurance, the processes that go into making an application more secure are still relatively immature. Read this paper and learn seven practical steps you can begin today to secure your applications and prevent the damages a successful cyber-attack can bring.
Mobility Tech Dossier: There's an app for that but is it secure?

Companies can't move fast enough to meet customer and employee demand for mobile services. But security has eroded over the past decade as companies strive to create applications for multiple platforms by farming design and development out to subcontractors. This trend has strained the processes and governance put in place to ensure application security. It takes proven best practices to mitigate risk and embrace mobility without trepidation.

Free Research and Reports

What's this?From the Editors of DarkReading

More >>

Box Icon

Whitepapers

What's this?

More >>

Box Icon

Dark Reading Digital Magazine

Dark Reading May 2013 Digital Supplemental Issue

Back Issues

In This Issue

The Future Of Web Authentication: Password technology is out of steam. We need safer ways to prove who's who online.
Rethink ID Management: If the technology continues to improve, it might soon be OK for all of us to be one person on the Web.

Download Now

First Name*:
Last Name*:
Email Address*:
Job Title:
Company/Organization/Gov't Dept.:
*Required field
Privacy Statement

Security

Protect The Business - Enable Access

News Vulnerability & Threats

2 More Java Zero-Day Vulnerabilities Emerge

While Oracle investigates reports that two bugs in Java 7 could allow attackers to remotely bypass the sandbox and compromise a system, security experts reiterate: If you don't need Java, turn it off

More Security Insights

White Papers

Reports

Webcasts

Related Reading

Dark Reading Discussions

Start the Discussion

Follow Dark Reading

Dark Reading Reports

Ten Emerging Threats Your Company May Not Know About

Five Ways To Better Hunt The Zebras In Your Network

Sign up for the Dark Reading Daily email newsletter

Free Research and Reports

Whitepapers

Upcoming Events

Dark Reading Digital Magazine

In This Issue

News Vulnerability & Threats

2 More Java Zero-Day Vulnerabilities Emerge

While Oracle investigates reports that two bugs in Java 7 could allow attackers to remotely bypass the sandbox and compromise a system, security experts reiterate: If you don't need Java, turn it off

More Security Insights

White Papers

Reports

Webcasts

Related Reading

Dark Reading Discussions

Start the Discussion

Follow Dark Reading

Dark Reading Reports

Related Content

Dark Reading Newsletter

Sign up for the Dark Reading Daily email newsletter

Free Research and Reports

Whitepapers

Upcoming Events

Dark Reading Digital Magazine

In This Issue