Google’s security team has discovered vulnerabilities in the Sun Java Runtime Environment that threaten the security of all platforms, browsers and even mobile devices.

“This is as bad as it gets,” said Chris Gatford, a security expert from penetration testing firm Pure Hacking.

“It’s a pretty significant weakness, which will have a considerable impact if the exploit codes come to fruition quickly. It could affect a lot of organizations and users,” Gatford told ZDNet Australia.

Australia’s Computer Emergency Response Team analyst, Robert Lowe, warned that anyone using the Java Runtime Environment or Java Development Kit is at risk.

“Delivery of exploits in this manner is attractive to attackers because even though the browser may be fully patched, some people neglect to also patch programs invoked by browsers to render specific types of content,” said Lowe.

continued @ News.com

Related Posts