Page 1 of 1

Serviio and java zero day malware

PostPosted: Wed Jan 30, 2013 11:55 pm
by jim501
The recent java zero day malware concerns got me thinking. I assume there is no cause for worry, but I thought I would ask anyway since Serviio can access web streams.

What is the possibility that one of these bugs will travel along a web stream through Serviio and infect my PC since Serviio is based on Java run time technology?

I assume hulu and cbs are as safe as you can get. But what if someone wrote a groovy for a malware site? Could they break through?

Re: Serviio and java zero day malware

PostPosted: Thu Jan 31, 2013 12:05 am
by zip
The Java concerns are related to the browser plugins, not the desktop Java. Obviously if you install a dodgy groovy file, it might do something to your system - but this is not related to the fact they are Java based, but because you are running unverified code.

Re: Serviio and java zero day malware

PostPosted: Sat Feb 02, 2013 10:01 am
by NX3
Today Oracle release a patch with 50 fix including the recent well documented bug. Update away if you need to run it...

Re: Serviio and java zero day malware

PostPosted: Sat Feb 02, 2013 6:03 pm
by jhb50
I did a boot scan of my system last week and it found and deleted a lot of java malware in my windows/user/.../appdata directory. AFAIK Serviio is the only app that I've been running lately that could have exposed me to that.
Seems no harm was done and the system is now running clean I think.

Re: Serviio and java zero day malware

PostPosted: Sat Feb 02, 2013 7:42 pm
by zip
jhb50 wrote:AFAIK Serviio is the only app that I've been running lately that could have exposed me to that.
Seems no harm was done and the system is now running clean I think.

Please stop scaring people. It has nothing to do with Serviio.