Re: [RFC] Script only include/require
| From: | Yasuo Ohgaki | Date: | Wed, 25 Feb 2015 09:40:20 +0000 |
| Subject: | Re: [RFC] Script only include/require | ||
| References: | 1 2 3 4 5 6 7 8 9 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-83754@lists.php.net to get a copy of this message | ||
Hi Jan,
On Wed, Feb 25, 2015 at 5:31 PM, Jan Ehrhardt <phpdev@ehrhardt.nl> wrote:
> Google for "java malware" and you'll find things like
>
>
> http://www.javaworld.com/article/2104862/java-security/report-half-of-all-exploits-target-java.html
>
Thank you for the info.
We are talking about "image based malware".
I'm well aware of jar attack. It's classic attack. For example,
http://www.gnucitizen.org/blog/java-jar-attacks-and-features/
It's very rare that Java application could be vulnerable like this, though.
Regards,
--
Yasuo Ohgaki
yohgaki@ohgaki.net