Friday, January 11, 2013

Serious vulnerability found in latest version of Java

A serious vulnerability in Java has been reported, present in the latest update of Java (Java 7 Update 10).

As with some previous vulnerabilities discovered and patched in earlier months, it allows arbitrary code execution by Java code downloaded to the Java plugin in a web browser.

If you have not done so already, the current advice is to disable Java in your web browser until further notice or at least only let Java run on a site-by-site basis.

No comments: