Apple has informed AppleCare representatives and Apple Retail that it has updated the Safari web browser’s built-in plugin blocker to disable older versions of Oracle’s Java 6 and 7 software.

In recent days, a new Java vulnerability was discovered. The latest issue is described on the National Vulnerability Database:

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to “Incorrect image attribute verification” in 2D.

The issue could allow a hacker to input malicious code into a user’s web browser, and it has been rated as a flaw of “extreme importance.”

To project Safari users, Apple has blocked Java 6 versions below update 51, and Java 7 versions below update 25.

Leave a Reply

Please log in using one of these methods to post your comment: Logo

You are commenting using your account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

3 Responses to “Apple updates Safari web plugin blocker to disable new Java vulnerability”

  1. You’re distributing confidential information.


  2. Paul Clark says:

    First it was the Flashlight, now this? Why are you distributing confidential information?


  3. Java software has been controversial due to vulnerabilities that hackers have used to infect computers with viruses. Rather than letting end-users decide if they should uninstall Java or upgrade to newer versions, companies like Apple and Mozilla have changed their software to disable Java. Should large companies modify their software in ways that affect other software on your computer?

    Thank you in advance for any help / information you can provide,

    Timothy DeCarr