Newsletter sign-up

View all newsletters

Enterprise Java Newsletter
Stay up to date on the latest tutorials and Java community news posted on JavaWorld

Java, BlackBerry get critical security fixes

Sun released a critical update to its Java Runtime Environment and RIM patched the software used to sync data between the BlackBerry and a PC

By Robert McMillan and IDG News Service, - Choose -, 11/12/09

Sun Microsystems and Research In Motion have issued critical bug fixes for security issues with their products.

The patches were issued separately earlier this month, with Sun releasing version 6 Update 17 of its Java Runtime Environment and BlackBerry updating its BlackBerry Desktop Software, used to sync data between the BlackBerry and a PC.

[ Discover what's new in business applications with InfoWorld's Technology: Applications newsletter and Killer Apps blog. ]

Both updates include fixes for critical security bugs that could be abused by attackers to run unauthorized software on a victim's computer.

Sun patched 12 Java bugs in total, including flaws that could be exploited to crash a computer or allow untrusted applications to run as though they were trusted.

Sun estimates that there are about 800 million Java desktop users worldwide, so Sun's updates are important. Hackers have increasingly turned to third party software such as Java as Microsoft has made it harder to attack the core Windows operating system.

There is just one BlackBerry bug fix. The problem lies in a Lotus Notes DLL that is included by default in all BlackBerry Desktop 5.0 and earlier installations. RIM warned that the flaw could be used to run unauthorized software on a victim's PC.

As with the worst of the Java bugs, an attacker could take advantage of the BlackBerry bug by first tricking the victim to visit a specially crafted Web page.

 

XpoLog Center Correlate application logs with server metrics - XpoLog

About Us | Advertise | Contact Us | Terms of Service/Privacy

Copyright, 2006-2008 Network World, Inc. All rights reserved.