VERICUT Users' Forum

BillH

VERICUT Specialist

From: Irvine, CA

Registered: 2004-10-08

Posts: 146

Website

Security warning about Java does not apply to VERICUT

The US Department of Homeland Security (DHS) alert TA13-010A that recommends disabling Java due to security vulnerabilities does not apply to VERICUT. Several news services reported abbreviated versions of the DHS alert and are easily misinterpreted. DHS clearly states the vulnerability is exploited by web applets “… leveraging a vulnerability in the Java Management Extensions (JMX) MBean components …”. VERICUT’s use of Java does not involve web applets or JMX and is unrelated to web browsing.

DHS’s official technical details describing the limited scope of the risk can be viewed here.

Oracle’s advisory describing how the risk is for web-browsing only can be viewed here.

Contact your local CGTech representative if you need more information.