Security storm brewing for Oracle Java-powered smart cards: More than a dirty dozen flaws found

ronjor · Mar 22, 2019

By Shaun Nichols in San Francisco 22 Mar 2019
Vuln hunters warn malicious applets can bust through protections, snoop on or hijack access gizmos

guest · Apr 25, 2019

Oracle, Gemalto Downplay Java Card Vulnerabilities
April 25, 2019
https://www.securityweek.com/oracle-gemalto-downplay-java-card-vulnerabilities

Java Card technology is designed to provide a secure environment for applications running on smart cards, SIM cards and other trusted devices that have limited memory and processing capabilities. Oracle says the technology is deployed on nearly six billion devices every year, including in the financial, telecoms, and government sectors.

Both Oracle and Gemalto have been notified, but they don’t appear to take the findings too seriously. Oracle claims the Java Card Reference Implementation (RI), in which the vulnerabilities were uncovered, is not intended for production environments and suggested that it’s up to third-party vendors to ensure the security of their implementations.
“It's surprising to learn that one of the world's top SIM card vendors dismisses a threat reported with respect to company's products, which are potentially used to safeguard security and privacy of hundreds of millions of people around the globe,” Security Explorations said.
Click to expand...

Log in or Sign up

Security storm brewing for Oracle Java-powered smart cards: More than a dirty dozen flaws found

ronjor Global Moderator

guest Guest

Log in or Sign up

Security storm brewing for Oracle Java-powered smart cards: More than a dirty dozen flaws found

ronjor Global Moderator

guest Guest

Useful Searches