Skip to main content
Question

YAJ0 - Yet Another Java Zero Day Exploit

  • March 1, 2013
  • 6 replies
  • 8 views

ImAMacGuy
Forum|alt.badge.img+23

http://blog.fireeye.com/research/2013/02/yaj0-yet-another-java-zero-day-2.html

detected a brand new Java zero-day vulnerability that was used to attack multiple customers. Specifically, we observed successful exploitation against browsers that have Java v1.6 Update 41 and Java v1.7 Update 15 installed.

6 replies

mm2270
Forum|alt.badge.img+24
  • Legendary Contributor
  • March 1, 2013

sigh


Forum|alt.badge.img+19
  • Contributor
  • March 1, 2013

mm2270
Forum|alt.badge.img+24
  • Legendary Contributor
  • March 1, 2013

They're probably not willing to incur that backlash again after the last time they jumped the gun on the blacklisting.


donmontalvo
Forum|alt.badge.img+36
  • Hall of Fame
  • March 1, 2013

LOLOL...

RT "@hammen: After the last month, earned 2 more IT certs: "Certified Flash Update Deployment" (CFUD) and "Certified Java Update Deployment" (CJUD)"


mm2270
Forum|alt.badge.img+24
  • Legendary Contributor
  • March 1, 2013

@donmontalvo-
Hahaha! I seriously need to put that onto my resume. I think we all should. Never know, it could prove handy in our next gigs! :D


Chris_Hafner
Forum|alt.badge.img+27
  • Jamf Heroes
  • March 4, 2013

If only we could leverage xprotect!

EDIT: discussed and answered in
https://jamfnation.jamfsoftware.com/discussion.html?id=6696