{"id":9689,"date":"2013-01-14T09:43:28","date_gmt":"2013-01-14T17:43:28","guid":{"rendered":"http:\/\/www.intego.com\/mac-security-blog\/?p=9689"},"modified":"2013-01-14T09:43:28","modified_gmt":"2013-01-14T17:43:28","slug":"oracle-emergency-update-fixes-java-security-bug","status":"publish","type":"post","link":"https:\/\/www.intego.com\/mac-security-blog\/oracle-emergency-update-fixes-java-security-bug\/","title":{"rendered":"Oracle Emergency Update Fixes Java Security Bug"},"content":{"rendered":"

Last week we mentioned that a\u00a0Java vulnerability put some Mac users at risk<\/a>, and that an attack on OS X users may not be that far behind.\u00a0At that time, your best course of action was to disable Java until a patch was released.\u00a0Over the weekend, Oracle released a patch for the vulnerable Java version 7 to resolve CVE-2013-0422. This update applies only to people that have updated to the Java 7.<\/p>\n

 <\/p>\n

There’s a #Mac<\/a> OS X implementation of that CVE-2013-0422 #Java<\/a> exploit inside the metasploit framework.<\/p>\n

\u2014 Intego Mac Security (@IntegoSecurity) January 11, 2013<\/a><\/p><\/blockquote>\n

 <\/p>\n

After much public disclosure of technical details and the reported exploitation of CVE-2013-0422<\/a>, Oracle worked vigorously over the weekend to resolve the security bug and is now recommending customers apply the updates as soon as possible to mitigate problems. Java 7 Update 11 resolves CVE-2013-0422 and another vulnerability (CVE-2012-3174) affecting Java running in web browsers. Both vulnerabilities may be remotely exploitable without authentication, Oracle reported, meaning that the bug may be exploited over a network without the need for a username and password.<\/p>\n

We recommend updating Java immediately.\u00a0Mac users can go to Oracle\u2019s website to download Java SE 7u11<\/a>. After doing so, if you have previously disabled Java in your browser, you will need to manually re-enable it after installing the updated release. In Firefox, you can do this in the Add Ons > Plugin screen. In Safari, choose Preferences and then click Security; make sure the Enable Java checkbox is selected. Google Chrome does not support<\/a> Java 7 on the Mac platform.<\/p>\n","protected":false},"excerpt":{"rendered":"

Last week we mentioned that a\u00a0Java vulnerability put some Mac users at risk, and that an attack on OS X users may not be that far behind.\u00a0At that time, your best course of action was to disable Java until a patch was released.\u00a0Over the weekend, Oracle released a patch for the vulnerable Java version 7 […]<\/p>\n","protected":false},"author":4,"featured_media":8999,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[13],"tags":[209,75,211,183],"class_list":["post-9689","post","type-post","status-publish","format-standard","has-post-thumbnail","category-security-privacy","tag-cve-2013-0422","tag-java","tag-java-vulnerability","tag-oracle"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t