Serious New Java Flaw Affects All Current Versions of Windows

Forums » General Opera topics » Security and privacy in Opera

You need to be logged in to post in the forums. If you do not have an account, please sign up first.

Go to last post

10. April 2010, 07:21:28

GiraffePC

Posts: 653

Serious New Java Flaw Affects All Current Versions of Windows

"There is a serious vulnerability in Java that leaves users running any of the current versions of Windows open to simple Web-based attacks that could lead to a complete compromise of the affected system."

More here:

http://threatpost.com/en_us/blogs/serious-new-java-flaw-affects-all-browsers-040910

Even disabling Java plugin won't stop it - can Opera do anything?
XP Pro SP3; 1GB RAM; Avast! AV; Comodo F/W; always the latest Opera!

10. April 2010, 18:17:29

Ngamer01

Posts: 643

Sun has SE 6 U 19 up on it's site (as I don't know if java.com has it yet as it kept giving me SE 6 U18 earlier). I take it U19 is not the fix for this?

10. April 2010, 18:57:30

prd3

Posts: 928

Originally posted by GiraffePC:

Even disabling Java plugin won't stop it - can Opera do anything?


If it doesn't happen through the browser there's obviously nothing a browser vendor can do about it.

11. April 2010, 23:00:05

BtEO

Posts: 1022

As I understand it the flaw isn't in the Java VM but in a component added to make it easier for developers to deploy applications (not applets) via the Internet. This is a separate plugin from the one used to applets, and can be disabled in Opera by adding npdeploytk.dll to your plugin-ignore.ini file. From everything I've read this should prevent exploitation via Opera.
MyOpera Community Enhancements — by xErath & BtEO
MyOpera Community Optimizations — by fearphage
Scribit improved posting tools for the MyOpera Community — by xErath
Improve Weeklies Blog — by MisterE & fearphage

12. April 2010, 12:11:20

dantesoft

No, really

Posts: 1268

This is a case for an Opera-issued kill command for misbehaving/insecure plugins, a la Firefox's add-on control. The infrastructure for browser.js updates is there.

13. April 2010, 09:38:39

dantesoft

No, really

Posts: 1268

Heh. I didn't expect to be so easy to use browser.js bigsmile

Forums » General Opera topics » Security and privacy in Opera