By dotCore
via threatpost.com
Published: Mar 06 2013 / 08:12
Giving a prolific bug hunter an excuse to go poking deeper into a potential security issue generally doesn’t end well or the vendor in question—in this case Oracle. Polish security firm Security Explorations, noteworthy for its Java security research, said today it reported five new vulnerabilities in Java SE 7 to Oracle. If combined, researcher Adam Gowdiak said, they can be used to gain a complete bypass of the Java sandbox.
-
How to read a XHTML form data using EJB
-
Dealing with Windows Azure Storage transient faults
-
What Types of Virtualization Are Most Vulnerable to Network Blind Spots
-
Performance matters when writing, too: more SQL tips
-
.NET Guidelines: Should I have one class per file?
-
5 Tips for Mainframe Modernization: Transitioning to a GUI
Comments
mheath replied ago:
"Giving a prolific bug hunter an excuse to go poking deeper into a potential security issue generally doesn’t end well or the vendor in question." How does this not end well? In the end, 5 problems were found and now they can be fixed. You can't fix a problem that you don't know about. In the end, this is good for the vendor because they're product will be better. In the short term, it's not good because of the bad publicity.
Voters For This Link (8)
Voters Against This Link (0)