Sun Releases Patch for Java Runtime Environment Bug


A bug in the Java Runtime Environment (JRE) can leave corporate systems open to attack if a user visits a site containing malicious code, security researchers have warned. The bug affects Windows, Linux and Solaris, and Sun has released a patch.

The JRE includes the Java Virtual Machine and supporting executables and files, and contains safeguards that prevent applets from causing trouble on the wider system. The newly disclosed flaw allows applets to upgrade their privileges, effectively giving them free access to the rest of the system, Sun said in an advisory. Sun Releases Patch for Java Runtime Environment Bug - Security Feed - News - CSO Magazine

Linked by shanmuga Thursday, 18th January 2007 6:37AM