[Omniscient]

Sun has acknowledged a vulnerability in the Java Web Start of the Java 2 Platform, which can be exploited by malicious people to bypass certain security restrictions.


Be sure to check if your system is missing security updates or have insecure applications installed:
http://secunia.com/software_inspector/

Feature Overview - The Secunia Software Inspector:
Detects insecure versions of applications installed
Verifies that all Microsoft patches are applied
Assists you in updating your system and applications
Runs through your browser. No installation or download is required.

Posted at http://secunia.com/advisories/25069/

[_ryuurei]

Hm... It's amazing this sort of thing can be done. There goes Java's reputation. To some extent.

[Dr.SLiM]

I hope this helps someone out. Always gotta be careful with Java

[Fizzix]

Today (three years after this was posted), I actually found something out in the wild, using an updated method for this. It silently infected me, except for I have the console pop up when applets run(while running Java 7, and fully updated Windows 7). It didn't have the "do you want to run this applet" box.

I'll probably provide more details once I figure it out. ATM trying to get w/e was put on my pc off.

[[[R9]]]

Well i heard this some time before coming online from my uncle. He is cyber security analyst.
Thanx anyway for info.
Java is future of computer language. Which is not easy to be exploited but have too many must do improvment thing.

[Kyuubi]

Good thing I have secunia already on my PC ;]

[Fizzix]

Good thing I have secunia already on my PC ;]

I doubt it will detect it... The one I came across uses a different method.