Scritto da
Non Autenticato
il 2016-02-09 02:41:35.0 alle 2016-02-09 02:41:35.0
http://www.csoonline.com/article/3031019/security/... 
Stavolta sull'installazione.
The reason is that older Java installers are designed to look for and automatically load a number of specifically named DLL (Dynamic Link Library) files from the current directory. In the case of Java installers downloaded from the Web, the current directory is typically the computer's default download folder.
If an attacker manages to place a specifically named malicious DLL into a computer's "Downloads" folder, that file will be executed when the user tries to install Java for the first time or when he manually updates an existing Java installation by downloading and running a new installer.
Stavolta sull'installazione.
The reason is that older Java installers are designed to look for and automatically load a number of specifically named DLL (Dynamic Link Library) files from the current directory. In the case of Java installers downloaded from the Web, the current directory is typically the computer's default download folder.
If an attacker manages to place a specifically named malicious DLL into a computer's "Downloads" folder, that file will be executed when the user tries to install Java for the first time or when he manually updates an existing Java installation by downloading and running a new installer.
-
Java, ennesimo bug grave @ 2016-02-09 02:41:35.0 di Non Autenticato
-
■ @ 2016-02-09 13:38:54.0 di ::1
-
■ @ 2016-02-09 13:55:37.0 di Non Autenticato
-
■ @ 2016-02-09 21:08:35.0 di ::1
-
■ @ 2016-02-09 21:19:59.0 di Non Autenticato
-
■ @ 2016-02-09 21:20:51.0 di Non Autenticato
-
-
■ @ 2016-02-09 21:18:40.0 di Non Autenticato
-
-
■ @ 2016-02-09 14:36:03.0 di Giambo
-
■ @ 2016-02-09 14:58:49.0 di Non Autenticato
-
■ @ 2016-02-09 15:05:12.0 di Non Autenticato
-
■ @ 2016-02-09 15:18:32.0 di Non Autenticato
-
■ @ 2016-02-09 15:50:39.0 di Non Autenticato
-
■ @ 2016-02-09 16:09:48.0 di Non Autenticato
-
■ @ 2016-02-09 19:39:46.0 di Non Autenticato
-
-
-
-
-
■ @ 2016-02-09 15:35:04.0 di Giambo
-
-
-
■ @ 2016-02-09 14:03:18.0 di Non Autenticato
-
-
■ @ 2016-02-09 13:42:41.0 di Giambo
-
-