java exploit

Posted on 2012-09-05
Last Modified: 2012-09-06
Is anone familar with this oracle/java exploit:

If so, does anyone have any clever ideas as to thwart against it until a patch is released. I have a large internet explorer environment and need help with ideas as to a makeshift countermeasure to protect against it. Thoughts?
Question by:DEFclub
    LVL 38

    Accepted Solution

    Least use Privilege is a good start, users should not be administrators of their machines. That step mitigates 90% of virus/malware effectiveness as well.
    Other than that, currently there is a Java update you should push out, and 24hrs later someone created a way around that update, so you have to rely on your AV on the client or at a proxy level to stop them. Next to that you either disable Java, uninstall Java, or only allow java to be used/called for certain trusted sites. All of which are difficult to do if you do not have the tools or resources at hand. Having the users as non-admins from jump may save you 90% of the time (like here) but there are other exploits where you need to rely on other mitigation like AV or system settings.

    Author Closing Comment


    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    What Security Threats Are You Missing?

    Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

    SHARE your personal details only on a NEED to basis. Take CHARGE and SECURE your IDENTITY. How do I then PROTECT myself and stay in charge of my own Personal details (and) - MY own WAY...
    The use of stolen credentials is a hot commodity this year allowing threat actors to move laterally within the network in order to avoid breach detection.
    This video is in connection to the article "The case of a missing mobile phone (". It will help one to understand clearly the steps to track a lost android phone.
    Illustrator's Shape Builder tool will let you combine shapes visually and interactively. This video shows the Mac version, but the tool works the same way in Windows. To follow along with this video, you can draw your own shapes or download the fileā€¦

    759 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    11 Experts available now in Live!

    Get 1:1 Help Now