Musings of a Gotham City Geek
What is the sound of one blog clapping?
The fixes to JRE (Java Runtime Environment) 1.3.1, 1.4.2, 5.0, and 6.0 plug holes that attackers could use to bypass security restrictions, manipulate data, disclose sensitive information or compromise an unpatched machine. Among the JRE bugs, Sun said in several security advisories, are two that allow attack code from malicious sites to make network connections on machines other than the victimized computer. One possible result, according to a paper by several Stanford University researchers that was cited by Sun: circumvented firewalls.
