Apple releases Security Update for Java 1.4.2

By Scott McNulty

Security updates aren't supposed to be fun and what Apple has dubbed 'Security Update 2005-002' isn't an exception to this. What is Apple's Marketing Group thinking with a name like Security Update 2005-002? Aren't animal names all the rage?  I think Apple should start naming each update individually, therefore I shall call this update
'Wombat.'

What's included in Wombat? From Apple's site: A
vulnerability in the Java Plug-in may allow an untrusted applet to escalate privileges, through JavaScript calling into Java code, including reading and writing files with the privileges of the user running the applet. Releases prior to Java 1.4.2 on Mac OS X are not affected by this vulnerability. Further information is available in Document ID 57591 from Sun.

A separate download isn't available at this time, so it is Software Updatin' time.

Recommended