Latest in Apple

Image credit:

US-CERT warns users to disable Java in web browsers, Apple and Mozilla move to block it

Donald Melanson, @donmelanson
January 12, 2013
Share
Tweet
Share

Sponsored Links

It's far from the first time that computer users have been warned to disable Java, but this latest security issue has risen to some high levels at a particularly rapid pace. After first being reported by security researchers on Thursday, the United States Computer Emergency Readiness Team (or US-CERT, a part of the Homeland Security department) stepped in with a warning of its own on Friday, which bluntly suggested that all computer users should disable Java in their web browsers (for its part, Oracle says that a fix is coming "shortly"). The flaw itself is a vulnerability in the Java Security Manager, which an attacker could exploit to run code on a user's computer.

Not content to wait for a fix, some companies have already taken steps to block possible exploits. That includes Apple, which has added recent versions of Java to its blacklist covering all OS X users, and Mozilla, which has enabled its "Click To Play" functionality in Firefox for all recent versions of Java across all platforms (it was previously only enabled by default for older versions of Java). Apple's move follows an earlier decision to remove the Java plug-in from browsers in OS X 10.7 and up last fall. You can find the full alert issued by US-CERT and additional details on the vulnerability at the links below.

In this article: apple, browser, java, mozilla, security, webbrowser
All products recommended by Engadget are selected by our editorial team, independent of our parent company. Some of our stories include affiliate links. If you buy something through one of these links, we may earn an affiliate commission.
Comment
Comments
Share
Tweet
Share

Popular on Engadget

‘Cyberpunk 2077’ update introduced a game-breaking bug

‘Cyberpunk 2077’ update introduced a game-breaking bug

View
A personal trainer app guilt-tripped me into exercising (and it worked)

A personal trainer app guilt-tripped me into exercising (and it worked)

View
Instagram adds ‘professional dashboard’ for businesses and creators

Instagram adds ‘professional dashboard’ for businesses and creators

View
Apple shuffles hardware execs to make room for a mysterious new project

Apple shuffles hardware execs to make room for a mysterious new project

View
Huawei may spin off its P and Mate smartphone brands

Huawei may spin off its P and Mate smartphone brands

View

From around the web

Page 1Page 1ear iconeye iconFill 23text filevr