Apple updates Mountain Lion OS, includes Java Web Start fix

Share this article:
Apple updates Mountain Lion OS, includes Java Web Start fix
Apple updates Mountain Lion OS, includes Java Web Start fix

Apple has released a security update for its Mountain Lion operating system, which patched 21 flaws, including a vulnerability that could allow a Java Web Start application to be launched automatically, despite Java being disabled.

On Thursday, OS X Mountain Lion v10.8.3 became available for users, who last received an update to the operating system in September.

In the update, Apple detailed the now-patched Java Web Start vulnerability (CVE-2013-0967).

“Visiting a maliciously crafted website could allow a Java Web Start application to be launched automatically even if the Java plug-in is disabled,” the update said. Java Web Start allows users to download and run Java applications using their web browser.

The Java Web Start patch is available for users of OS X Lion (versions 10.7 to 10.7.5), OS X Lion Server (versions 10.7 to 10.7.5), and OS X Mountain Lion (versions 10.8 to 10.8.2).

With the update, Apple also released its latest Safari browser for Mac users, version 6.0.3, which patched 17 vulnerabilities. Of the bugs, 15 were flaws in WebKit, the open-source engine used to render web pages. The vulnerabilities could allow an unexpected application termination, arbitrary code execution or cross-site scripting attacks.

Share this article:
You must be a registered member of SC Magazine to post a comment.

Sign up to our newsletters

TOP COMMENTS

More in News

Information sharing requires breaking down barriers, White House cyber guru says

Information sharing requires breaking down barriers, White House ...

The White House has advanced an agenda to promote and facilitate information sharing on security threats and vulnerabilities.

Worm variant of Android ransomware, Koler, spreads via SMS

Worm variant of Android ransomware, Koler, spreads via ...

Upon infection, the Koler variant will send an SMS message to all contacts in the device's address book.

Patch for Windows flaw can be bypassed, prompts temporary fix from Microsoft

Patch for Windows flaw can be bypassed, prompts ...

The Windows zero-day received a patch last week, but the fix can still be bypassed by crafty attackers.