[ThreatPost]Prompted by Oracle Rejection, Researcher Finds Five New Java Sandbox Vulnerabilities

[igor51]

Prompted by Oracle Rejection, Researcher Finds Five New Java Sandbox Vulnerabilities

Giving a prolific bug hunter an excuse to go poking deeper into a potential security issue generally doesn?t end well or the vendor in question?in this case Oracle. Polish security firm Security Explorations, noteworthy for its Java security research, said today it reported five new vulnerabilities in Java SE 7 to Oracle. If combined, researcher Adam Gowdiak said, they can be used to gain a complete bypass of the Java sandbox.

read more

Source: Prompted by Oracle Rejection, Researcher Finds Five New Java Sandbox Vulnerabilities