Java 0-day found in the wild.

[lazer]

http://www.theregister.co.uk/2012/08/27/disable_java_to_block_exploit/

Older versions are not affected by this 0-day but they have other vulnerabilities, so downgrade isn't an option for home users.

Uninstall Java to totally avoid this exploit or disable Java for all browsers until the issue gets fixed.

More: https://isc.sans.edu/diary.html?storyid=13984&rss

 

[RobinHood]

To disbale Java in your browser:


In Firefox: Press Firefox button -> Add-ons, go to Plugins and click the "Disable" button next to anything named "Java".
In Chrome: Type in: "chrome://plugins/" into the address bar (no speech marks). Scroll down to Java and click disable.
In Opera: Type in "opera: plugins" into the address bar (no speech marks or space). Scroll down to:

• Java(TM) Platform <click on> Disable.
• Java Deployment Toolkit <click on> Disable.

In Internet Explorer: Go to Tools -> Manage add-ons -> Toolbars and Extensions. At the bottom, show: All add-ons. Find anything under Sun Microsystems or named "Java"/"Deployment Toolkit" and right-click -> Disable it.

 

[MagnusB]

You can use about:plugins in chrome as well, easier to remember...

EDIT:
Damn smiles

 

[JacquiiDesigns]

Okay - I'm a little confused - my Java version says "Java Deployment Toolkit 7.0.50.255 - 10.5.1.255"Is this part of the 1.7 series the article speaks of? Thanks.

J.

 

[MagnusB]

If I am not mistaken, JRE 1.7 is 7, they are non consistent with versioning different components, as I recall.

 

[jasetaro]

Okay - I'm a little confused - my Java version says "Java Deployment Toolkit 7.0.50.255 - 10.5.1.255"Is this part of the 1.7 series the article speaks of? Thanks.

J.

Yes, and it's out of date too. The current release is Java Deployment Toolkit 7.0.60.24 - 10.6.2.24.

 

[JacquiiDesigns]

If I am not mistaken, JRE 1.7 is 7, they are non consistent with versioning different components, as I recall.

You're right. I suppose I could have googled before posting LOL
Thanks

 

[MagnusB]

In Norway most banks use a common (java) platform for log in to their online bank solutions. It seems this vulnerabillity has hit that solution hard, and now the banks are going public saying the consumers have to be responsible and update their java software.... My take is a bit different though....