Jump to content

Photo

Java 0-day exploit. Allows arbitrary execution of code on target machine.


  • Please log in to reply
2 replies to this topic

#1 K_N

K_N

    Megabyte

  • Members
  • 576 posts
  • LocationPhoenix

Posted 10 January 2013 - 11:04 PM

If you are up to date, you are vulnerable.

http://www.reddit.co...he_java_7_0day/

Rumors of my demise have been greatly exaggerated.


#2 Wolf

Wolf

    Zettabyte

  • Members
  • 6,487 posts

Posted 10 January 2013 - 11:44 PM

is classic load a class with maximum privileges then call a method on the class that does doPrivileged -> System.setSecurityManager(null);


classic mistake

#3 K_N

K_N

    Megabyte

  • Members
  • 576 posts
  • LocationPhoenix

Posted 12 January 2013 - 01:57 AM

class ClassClass extends Class {
public $class;

public function class($class) {
parent::class;
$this->class = $class
return $class + $class->class;
}
]

Rumors of my demise have been greatly exaggerated.