Exploiting JAVA 7 difficult with ASLR !

Java 7 Released.Apart from the security enhancements mentioned, it looks like all modules are now protected with ASLR (Address Space Layout Randomization) so comparably  better protection from JAVA based exploits ! It's a very important security enhancement and going to give some hard time to write exploits for JAVA(JDK/JRE). Needless to say, Upgrade now.Kudos to Sun/Oracle !

Joshua: (via twitter)

"Java 7 is now available. All modules have ASLR enabled, so it is no longer possible to bypass ASLR via a Java ROP. Congrats to Oracle / Sun!"


JAVA 7 Security
http://download.oracle.com/javase/7/docs/technotes/guides/security/enhancements7.html

JDK 7 Download:
http://www.oracle.com/technetwork/java/javase/downloads/java-se-jdk-7-download-432154.html

JRE 7 Download
http://www.oracle.com/technetwork/java/javase/downloads/java-se-jre-7-download-432155.html