SEI CERT Oracle Coding Standard for Java

Space shortcuts

Page tree

Versions Compared

Old Version 57

changes.mady.by.user Dean Sutherland

Saved on

compared with

New Version 58

changes.mady.by.user David Svoboda

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

This code was subsequently invoked by an exploit called Flashback that infected 600,000 Macintosh computers in April 2012.1

Compliant Solution (CVE-2012-0507)

...

[Sterbenz 2006]Secure Coding Antipatterns: Avoiding Vulnerabilities
 

Analysis of Java Flashback Exploit

1 "Exploiting Java Vulnerability CVE-2012-0507 Using Metasploit" is shared by user BreakTheSec on Slideshare.net (July 14, 2012). www.slideshare.net/BreakTheSec/exploiting-java-vulnerability.

 

...