Posté par: igor51 le mars 05, 2013, 20:33:56
Giving a prolific bug hunter an excuse to go poking deeper into a potential security issue generally doesn?t end well or the vendor in question?in this case Oracle. Polish security firm Security Explorations, noteworthy for its Java security research, said today it reported five new vulnerabilities in Java SE 7 to Oracle. If combined, researcher Adam Gowdiak said, they can be used to gain a complete bypass of the Java sandbox.
Source: Prompted by Oracle Rejection, Researcher Finds Five New Java Sandbox Vulnerabilities (http://threatpost.com/en_us/blogs/prompted-oracle-rejection-researcher-finds-five-new-java-sandbox-vulnerabilities-030413)