Macs are at risk from a “super dangerous” Java zero-day vulnerability, reports “Computerworld” (http://macte.ch/V7MYQ).
David Maynor, chief technical officer, of Errata Security, confirmed that the Metasploit exploit — which was published less than 24 hours after the bug was found — is effective against Java 7 installed on Mac OS X 10.8 Mountain Lion, the article adds. This exploit reportedly works on OS X if you are running the 1.7 JRE [Java Runtime Environment].
The unpatched bug can be exploited through any browser running on any operating system, from Windows and Linux to OS X, that has Java installed, Tod Beardsley, the engineering manager for Metasploit told “Computerworld.” Metasploti is an open-source penetration testing framework used by both legitimate researchers and criminal hackers, the article adds.