The security expert known as Kafeine and administrator of the website Malware Don't Need Coffee, has discovered a new Java 0day.
The vulnerability affects the latest Java 1.7 and was discovered on a website that receives hundreds of thousands of visits every day.
Experts from AlienVault have analyzed the vulnerability and discovered that the malicious Java applet can be used to execute code on victims' computers through innocent system applications. They cite the Windows calculator application as an example.
“The Java file is very vague, but from a quick analysis we did, the exploit probably bypasses some security checks by spoofing the permissions of some Java classes.”
Researchers from Bitdefender are also analyzing the new zero-day, as reported by softpedia and warn, it already exists in the tools of the new Cool exploit kit.
Disable Java plugins now!
