Java, BlackBerry desktop get security bug fixes
Sun Microsystems and Research In Motion have issued critical bug fixes for security issues with their products.
The patches were issued separately on Tuesday, with Sun releasing version 6 Update 17 of its Java Runtime Environment and BlackBerry updating its BlackBerry Desktop Software, used to sync data between the BlackBerry and a PC.
Both updates include fixes for critical security bugs that could be abused by attackers to run unauthorized software on a victim's computer, although none of the flaws appear to have been publicly known before Tuesday.
Sun patched 12 Java bugs in total, including flaws that could be exploited to crash a computer or allow untrusted applications to run as though they were trusted.
Sun estimates that there are about 800 million Java desktop users worldwide, so Sun's updates are important. Hackers have increasingly turned to third party software such as Java as Microsoft has made it harder to attack the core Windows operating system.
There is just one BlackBerry bug fix. The problem lies in a Lotus Notes DLL that is included by default in all BlackBerry Desktop 5.0 and earlier installations. RIM warned that the flaw could be used to run unauthorized software on a victim's PC.
As with the worst of the Java bugs, an attacker could take advantage of the BlackBerry bug by first tricking the victim to visit a specially crafted Web page.
IDG News Service
Sign up for ITworld's Daily newsletter
Follow ITworld on Twitter @IT_world
On Twitter now
java patches
Powered by Twitter
Esther Schindler
If the comments are ugly, the code is ugly
claird
SVG a graphics format for 21st century
pasmith
Take Chrome OS for a test spin
Sandra Henry-Stocker
Solaris Tip: Have Your Files Changed Since Installation?
jfruh
Android fragments vs. the iPhone monolith
mikelgan
What Gizmodo missed about the Pro WX Wireless USB disk drive
Sidekick: The Good News & the Bad News
Either way you look at it Microsoft Data Center management did not follow standards or best practices in this failure. In which case it makes me wonder more about the outsourcing of corporate data much less personal data.
- mburton325
Join the conversation here
Quick, practical advice for IT pros. Made fresh daily.
Want to cash in on your IT savvy? Send your tip to tips@itworld.com. If we post it, we'll send you a $25 Amazon e-gift card.













