Apple has just issued a Java update that fixes a major security vulnerability in Java on Macs with Lion and OSX 10.6 installed. This update addresses a dozen security flaws, one of which has been exploited by hackers for at least two weeks. All of these flaws were classified as “critical” by Apple, so it’s good to know that the issue is under control.
Apple no longer updates Java with full system updates, so you will not be prompted to install this update until you run a Java applet on your system. It is recommended that you install this update as soon as possible, because the Flashback Trojan is already using this exploit, and it could cause serious issues for Mac users.
According to Apple’s support page, “Multiple vulnerabilities exist in Java 1.6.0_29, the most serious of which may allow a malicious Java applet to execute arbitrary code outside the Java sandbox. Visiting a web page containing a maliciously crafted Java applet may lead to arbitrary code execution with the privileges of the current user.”
Once a user runs the script, a dialog box will pop up, asking the user for their password. However, even if the user disregards this, the malware is already on the machine.
It’s possible that over 550,000 Macs are already infected with the Flashback Trojan, according to Russian firm Dr. Web.
It’s good to see that Apple pushed the update out, but with over 2 weeks to exploit these vulnerabilities hackers were able to do some serious damage. It’s very important that, if you have not updated Java on your Mac, you do so as soon as possible.
Source: Apple Support, Pc Mag
MakeUseOf Recommends
More articles about:
Hide 8 Comments
Hahaha!!! Sounds about right… But what i love to hear from mac users is “macs dont get viruses”, what they ought to say is “they dont get as many”. Yes i have a mac and never had a virus but that dosnt mean no one wrights them.
Yes, and no. I’m a Mac user myself and always believe that it’s not that Mac do not have virus or can’t be hacked. But Mac OS apprently got the least problem with such issue compared with Linux, Windows, and any other OS.
And I always tell others (especially Windows user) that at least, Mac doesn’t have that much of virus and hackers to spoil the usage on the Mac or iPhone or iPad. And this is something I considered as blessing. LOL
@Nolan:
Since you seem to be uneducated, let’s be clear: the Flashback trojan is not a virus, it’s a trojan horse. There is a vast difference. As any knowledgeable Mac user can tell you, there are no viruses for Mac OS X, and there’s no way to get one unless the Administrator password is provided.
————————————————–
Dave Leclair wrote:
“[…] hackers were able to do some serious damage.”
There’s no evidence of this at all, so that claim is false. Just because some unheard-of-before-today “security” firm in Russia claims that more than half a million Macs have been infected by this trojan horse does not make it true.
You need to stick to demonstrable facts and not be so gullible as to promote a claim that cannot be verified by anyone.
Mac don’t get viruses :p http://www.ibl0g.com/
Generally I don’t learn post on blogs, however I would like to say that this write-up very compelled me to try and do it! Your writing taste has been surprised me. Thanks, very nice article.
With havin so much content do you ever run into any issues of plagorism or copyright infringement? My blog has a lot of exclusive content I’ve either authored myself or outsourced but it appears a lot of it is popping it up all over the internet without my agreement. Do you know any techniques to help prevent content from being ripped off? I’d definitely appreciate it.
Fantastic web site. A lot of useful info here. I am sending it to a few buddies ans additionally sharing in delicious. And of course, thanks in your sweat!
java will be in the same place First place and other language will come later . about the moblie and according of the last reports smartphones will use in every thing as moblie , internet , e-reader , for that the lanugage that used in the programming of the moblie will be in the first level .. 0 0