Flash exploits increase as Java threats decrease

90 per cent of Java's hackers have moved their focus to Flash:
Almost every Java-hacking black hat is now popping Adobe Flash, after Microsoft's hard-line patch policy made it harder to target software such as Java.
The stricken scum now face a choice: work harder to find Java zero-days or abandon ship and start exploiting old Flash bugs.
http://www.theregister.co.uk/2015/04/27/ninety_percent_of_java_blackhats_now_finger_flash/
[With acknowledgment to Corrine, for posting at Landzdown]

Hi,
I'm not 100% sure if this will help, but you could have a look at two places:
SAP Security Guides: [https://websmp210.sap-ag.de/securityguide]
  There are security guides for all applications / installations giving recommendations on how to secure the systems.
SAP Security notes: [https://websmp102.sap-ag.de/securitynotes]
These SAP OSS notes describe security issues in various SAP components including web applications. On monthly basis security issues and their solutions are published here
Kind regards
Maaike

Similar Messages

  • Need flash player 8 and java script enabled to play videos on ipad, need help please.

    need flash player 8 and java script enabled on my ipad in order to view videos.  please help.

    iPads do not directly support Flash.
    You can look for Flash Browsers in the App store for some options to try. Support is not 100%, but maybe one may work for you.  Browsers like Puffin, Skyfire, Photon etc...
    IPads do fully support JavaScript.  Just make sure its turned on under Settings->Safari->Advanced->JavaScript.
    If you require Java, which is completely different to JavaScript, again there are some browsers in the App store that support it.  Search for "Java browsers" in the store.

  • Methods to do increasing in java coding

    may i know how to do a selective code to do increasing in java code?
    like :
    i got numbers 20, 30, 20 ,20
    IT IS BEFORE I ENTERED ANY NUMBERS IN !!
    uniqueNumber 0
    numberOfuniqueNumbers 0
    occurrences 0
    IF i enter 20 into the system
    THEN
    uniqueNumber will become 1
    numberOfuniqueNumbers will become 1
    occurences will become 1
    when i enter 20 again
    uniqueNumber will become 1
    numberOfuniqueNumbers will become 1
    BUT
    occurrences will become 2
    and i dont know how to use if/else method to do the increment of occurences.
    is it like this?
    IF uniqueNumber ++
    occurences +1
    or is there any way out for it?

    ok, let's pretend that a user can only enter numbers from 1 to 5. And he's decided to input 5 numbers. We declare an integer input array of size 5 and an integer counter array of size 6.
    Input array = [1,3,4,1,3]
    Counter array = [0,0,0,0,0,0]
    uniqueNumbers = 0
    Loop through input array:
         1st input array value = 1
         set counter[1]++     
         now counter array = [0,1,0,0,0,0]
         2nd input array value = 3
         set counter[3]++
         now counter array = [0,1,0,1,0,0]
         3rd input array value = 4
         set counter[4]++
         now counter array = [0,1,0,1,1,0]
         4th input array value=1
         set counter[1]++
         now counter array = [0,2,0,1,1,0]
         5th input array value = 3
         set counter[3]++
         now counter array = [0,2,0,2,1,0]
    Loop through counter array
         1st counter array value (index 0) = 0, do nothing
         2nd counter array value (index 1) = 2,
              print "1 has 2 occurances"
              uniqueNumbers++ (now it equals 1)
         3rd counter array value (index 2) = 0, do nothing
         4th counter array value (index 3) = 2,
              print "3 has 2 occurances"
              uniqueNumbers++ (now it equals 2)
         5th counter array value (index 4) = 1,
              print "4 has 1 occurances"
              uniqueNumbers++ (now it equals 3)
         6th counter array value (index 5) = 0, do nothing
    Print out unique numbers (which equals 3)Now your turn. You can do it! :)

  • Integrate an interactive flash movie into a Java component?

    Is it possible to integrate a flash movie into a Java component? - say by shoving a certain web page into a JEditorPane (content type = html)? - even if java doesn't know anything about it?

    Theoretically... yes.
    You would have to write a java flash player... so... no - for real.

  • Inventory offset decrease/increase and G/L decrease/increase account

    Dear All,
    What are the differences among Inventory offset decrease/increase and G/L decrease/increase account ? I have a training material that tells about them but give different result when using. Thanks a lot
    Rgd
    John

    Hello
    But in Indian Localization Help file has mentioned opposite. like
    Inventory Offset – Decrease Account, Inventory Offset – Increase Account
    These accounts are used as balancing accounts when the stock value is increased or decreased due to the creation of a material revaluation document.
    G/L Decrease Account
    An offsetting account to the Stock account used in Goods Issues and negative difference in Stock Postings (updates after inventory). You can change this account manually while creating its corresponding document.
    G/L Increase Account
    Offsetting account to the stock account used in goods receipts and positive differences in stock postings (updates after inventory). You can change this account manually while creating its corresponding document.
    These wordings are directly copied by me from HELP File & i was also shocked to see such wrong thing bcoz at the time of using Goods Receipt & Issues i came across wrong a/c's & i had to change that setting though it was not matching Definition in HELP file.
    Maybe SAP should rectify it.

  • Flash Islands for WebDynpro Java

    Hi,
    I am new to Flash Islands, is there any tutorial kind of thing for Flash Islands for WebDynpro java.
    i found good tutorial by Thomas Jung for Flash Islands for WebDynpro ABAP.
    Please provide me similar kind of  links for WebDynpro java.
    Thanks,
    Dhananjaya R E

    Hi All,
    Thanks for your replay, i am using " NW711 CE SP03 MIN " for the development, i followed the bellow link
    /people/anilkumar.vippagunta2/blog/2008/11/13/adobe-flash-islands-in-web-dynpro-for-java
    i did not get the option FlashIsland under (RootElement ->Replace with->) option. i saw in some posts that NW711 CE supports Flash Islands, do i need to add any plugins for that ?
    please help me regarding this.
    Thanks,
    Dhananjaya R E

  • Working with Flash 5.0 in Java?

    Hi All,
    I need to embed flash 5.0 file in Java Application. I searched in macromedia and all searching sites. Everywhere its telling JMF will support till flash 2.0 only. I am badly in need of working flash 5.0 in java application. So, anybody who knows or tried any work around to place flash5.0 file in java app?
    Thanks in advance,
    Kishore.

    Sorry, no. QuickTime is only available for Mac and Windoze. Perhaps JMF will update its Flash support someday.
    BTW, I just read that QuickTime 6, which will be released once they resolve the MPEG-4 licensing problems, will support Flash 5.
    --invalidname

  • How to increase the Java Heap size ?

    Hi
    I am new to java. I have created a java application and i configured in Eclipse. While running my application it throws an error that
    "Exception in thread "Thread-21" java.lang.OutOfMemoryError: Java heap space"
    i have used threads in my application. Then i searched some forums regarding this. The answer i got is "Increase the java heap size" using
    "java -Xms64m -Xmx256m prog" in command prompt. while running.
    But i am not running my application in command prompt. I used Eclipse to run my application. Here my ultimate question is how to set the heap size while running the application in Eclipse and where to set in Eclipse.
    Kindly help me.
    Regards
    Ramesh E

    i have used 20 threads to extract the datas
    Then parallel i am starting one more thread to process the data. Means that i am starting 21st thread. In thread is throwing the error.
    20 threads:
    for (int i = 0; i < 20; i++) {
    try{
    extrThreads[i] = new Thread(this);
    extrThreads.start();
    }catch (Exception e) {
    System.out.println(e);
    21st Thread:
    public void processdata()throws Exception{
    Thread t = new Thread(this);
    t.start();
    if(t!= null)
    t.join();
    funtion();
    This thread is throwing the error

  • Remote will INCREASE volume but not decrease

    I just purchased a Samsung 32" HDTV for a spare room. I have programmed the S10 remote according to instructions BUT the volume control on the remote will increase only - I cannot decrease the volume using the s10 remote. Obviously the Samsung remote works fine. I tried all the programming codes available on my list. Any thoughts? Thanx, Vic

     - I believe the vol down button was the first to wear out. I always found irony in that.
    Call in for a new remote. The remotes being shipped are S-20. There are differences in support & programming, but it should be fine for your case.

  • Need flash player 8  and java script

    why i try to open a videos from mac tube why is it showing i need a flash player 8+ and java script .

    iPads do not directly support Flash.
    You can look for Flash Browsers in the App store for some options to try. Support is not 100%, but maybe one may work for you.  Browsers like Puffin, Skyfire, Photon etc...
    IPads do fully support JavaScript.  Just make sure its turned on under Settings->Safari->Advanced->JavaScript.
    If you require Java, which is completely different to JavaScript, again there are some browsers in the App store that support it.  Search for "Java browsers" in the store.

  • What is the java threat?

    What is the jave threat and how do you remove it?

    I am not sure but the Version of Java that is affected is 7 not 6. I could be wrong as I only heard about this half an hour ago.
    This ZDNET article mentions only Java 7, http://www.zdnet.com/homeland-security-warns-to-disable-java-amid-zero-day-flaw- 7000009713/
    I am on 10.8.2. My Xprotect.plist was updated in Jan 11 2013 as per the location it can be found under, /System/Library/CoreServices/CoreTypes.bundle/Contents/Resources. I am running Java 7 Update 10 as per Java System Preferences.
    When I try to install Java 7 Update 11 I get an error.
    "Update Error
    An error occurred while downloading the update. Please try again later."
    All I can do is click Cancel.
    I will download the Java 7 Update 11 manually to see what is up. I cannot restart now as a troubelshooting step.
    I installed Java 7 Update 11 manually via the link, http://www.oracle.com/technetwork/java/javase/downloads/jre7-downloads-1880261.h tml
    The manual update installed fine and the Java Control Panel reports I am running the recommended verison of Java.
    I don't use Java anyway, I use Safari and have it turned off from Safari Preferences but I know some of you out there depend on it like you depend on water.

  • HT5242 Since installing this update today, screen flashing has increased dramatically; just wondering if anyone else has this problem and, is there a way to remove an update?

    Since installing this update today, screen flashing has increased dramatically.  Anyone else has this problem and is there a way to remove a software update?

    I just had random letters flash like i was typing them but they didnt show up in the typed section. So weird, bad thing is that I didnt have the original keyboard flickering problem but updated anyway cause Im a fool i guess. It only happened while writing an email n was only the letters U n G.

  • Flash Builder 4.6 Java Heap Space Error

    Hi,
    I get this error "Java Heap Space" when trying to clean build (or build in any way) my project.
    I have a lot of embeded assets (png, mp3 and some binary files embeded to be read as a ByteArray) which total about 37 MB. Including one more 1.6MB binary asset causes this error to occur.
    I have tried to change my memory settings about (-Xmx and -Xms) as previous posts have suggested but this doesn't seem to make any difference.
    Is there any patch or solution to this very frustrating limitation of Flash Builder?
    Thanks for any help!
    Tom

    I constantly had issues with this.  I managed to run into the max for increasing the heap space.  I was able to get beyond the limit by flagging the FlashBuilder.exe file to allow it to allocate to higher memory address ranges.  I'm on a 64 bit machine, so the only limitation was the 32 bit FlashBuilder process.  Anyways i was able to get from 1024m up to 1720m.  Also note that FlashBuilder 4.7 Beta is out and it is a native 64 bit application, so you will get higher addressing there.  I just found it to be too buggy for my every day development tasks.  Also missing the Design view really hurts development.  I hope they put that back in.
    Here's more detail on how I got beyond the java heap ceiling.
    http://chrsmrtn.azurewebsites.net/flash-builder-java-heap-errors-limitations-of-xms-and-xm x/

  • Flash Builder 4.5 Java Heap Space Error

    Hello everyone,
    I've downloaded Flash Builder 4.5 trial a few days ago. Let me first tell that I like the new features a lot and they help to speed up the development process noticably. I thank Adobe for that very much.
    However I did not notice any performance boost over the Flash Buidler 4. Even worse, the 4.5 version seems to run much slower and use more memory than Flash Builder 4. I constantly keep getting Java Heap Space errors and needles to say, the tool just crashes and I have to restart it.
    Here how my experience working with the new version looks like. I start the Flash Builder 4.5 which has my current project open (for the record, I still use Flex 4.1, and the project includes roughly 300+ classes and 30000+ lines of code (AS and MXML)). At the beggining everything works fine and pretty fast. UI, code completion, snippets and all other good stuff works pretty fast. However, after each build, FlashBuilder.exe process eats up from 50 to 100 megabytes of memory and does not seem to release it or reuse it. So after a 5 or 10 builds it already appears to be using over 1 GB of RAM. At that point the editor becomes sloppy - it can't keep up with my typing, code completion popups takes a few seconds to show up. And a few more builds - the Flash Builder freezes and after a minute or two I get Java Heap Space error.
    I've tried increased the JRE heap space used by the Flash Builder (flashbuilder.ini, flashbuilderc.ini, eclipse.ini) to -Xms512m -Xmx1024m as well as permanent generation heap space to -XX:MaxPermSize=512m -XX:PermSize=256m and the mxml compiler (jvm.config) to -Xms384m -Xmx768m. However this did not solve the problem. Maybe just postponed it a bit.
    Am I the only one observing such behaviour of Flash Builder 4.5? Does any one have any other ideas how to fix this? (by the way, I work on 64bit machine with Widnows Server 2008R2, 4GB of RAM and 2.66 GHz Intel Core 2 Duo).
    Thanks in advance.
    Michael

    I'm seeing nearly the same thing.  I also have a very large set of projects similar to what you are describing and I do have Java Heap Space errors (The details show an error of "java.lang.OutOfMemoryError: unable to create new native thread" occurring for me)
    I had similar issues, although they are more frequent in the 4.5 builder, in the 4.1 builder.  In 4.1 builder, I didn't get the exact same detailed error regarding threads.
    I did install my flash builder into a clean instance of eclipse 3.6.2 vs using the standalone install.  That shouldn't make a difference though.  In 4.1, I tried he standalone install and saw the same issues I saw in the plugin version.
    I'm also using the 4.1 SDK in Flash Builder 4.5 (It appears that is what you are doing).  I've been attributing the crashes to the following bug in the 4.1 SDK, although I have applied the files in the bug report and still have the problem.  I'm hoping when I'm able to switch to the 4.5 SDK it may help.  (I can't switch yet because from what I can tell, it requires 10.2 Flash Player and my company is currently only on 10.0)
    The Bug Report I'm referring to is: https://bugs.adobe.com/jira/browse/SDK-26366
    I've bumped up all of the memory settings you've referred to and it helps the environment run longer, but it still eventually crashes.  One thing I definately do is make sure that the "Build Automatically" is unchecked.
    The machine I'm running on is an Intel 2600K with 16GB of memory running Windows 7 64-bit, so I don't think hardware is the issue.
    No real answer, but your not alone in having similar issues.
    Jon

  • UNpatched Windows Privilege Escalation Vulnerability + Flash exploits

    The following has been copied/pasted from http://secunia.com/advisories/64146/ (which, while free, requires registration to view):
    A [0-day] vulnerability has been reported in Microsoft Windows, which can be exploited by malicious, local users to gain escalated privileges.
    The vulnerability is caused due to an unspecified error. No further information is currently available.
    Note: Reportedly, the vulnerability is being currently exploited in limited, targeted attacks .
    =====================================================================
    The following has been copied/pasted from https://www.fireeye.com/blog/threat-research/2015/04/probable_apt28_useo.html
    FireEye Labs recently detected a limited APT campaign exploiting [a combination of] zero-day vulnerabilities in Adobe Flash and a brand-new one in Microsoft Windows...
    While there is not yet a patch available for the Windows vulnerability, updating Adobe Flash to the latest version [17.0.0.169] will render this in-the-wild exploit innocuous.
    It is therefore prudent for anyone who has not updated an older Flash (<=17.0.0.134) do so expeditiously.
    ===================================
    EDIT:  (With acknowledgement to "Puppy" at the Lenovo Forum)
    It seems that even the newest version of Flash (x.169) is no longer secure:
    On April 14th 2015, Adobe patched CVE-2015-0359 in APSB15-06. On April 17th, just 3 days later, a new version of the Angler Exploit Kit (EK) was released that targets the patched vulnerability.
    https://www.fireeye.com/blog/threat-research/2015/04/angler_ek_exploiting.html

    Hi colbabomb, I rarely visit sites that use QuickTime (e.g., Apple). The problem pages used Flash (such as the page with the video of last Monday's SuMo meeting).

Maybe you are looking for