Apple releases Java update; includes fix for vulnerability exploited by Flashback malware

(Publication) Google search: [1]

Apple releases Java update; includes fix for vulnerability exploited by Flashback malware
Botnet	Flashback
Malware	Flashback (bot)
Botnet/malware group
Exploit kits
Services
Feature
Distribution vector
Target
Origin
Campaign
Operation/Working group
Vulnerability
CCProtocol
Date	2012 / 4 avril 2012
Editor/Conference	Intego
Link	http://www.intego.com/mac-security-blog/apple-releases-java-update-includes-fix-for-vulnerability-exploited-by-flashback-malware/ (Archive copy)
Author
Type

Abstract

“ Apple has released Java for OS X 2012-001 and Java for Mac OS X 10.6 Update 7, featuring a dozen security fixes, including one that has been used a recent variant of the Flashback malware, CVE-2012-0507. As the information about this update that Apple provides says,

Visiting a web page containing a maliciously crafted untrusted Java applet may lead to arbitrary code execution with the privileges of the current user. This is exactly what happens with the recent variant of the Flashback malware that we discussed yesterday.

Bibtex

 @misc{2012BFR982,
   editor = {Intego},
   author = {},
   title = {Apple releases Java update; includes fix for vulnerability exploited by Flashback malware},
   date = {},
   month = ,
   year = {2012},
   howpublished = {\url{http://www.intego.com/mac-security-blog/apple-releases-java-update-includes-fix-for-vulnerability-exploited-by-flashback-malware/}},
 }