Java escalation issue fixed

Apple has released a security update for its OS X 10.4.5 operating system that plugs five security holes in the Java Virtual Machine.

The update prevents applications running in Java Web Start from seizing additional privileges, which could result in a Java application granting itself permission to read and write local files on a system.

The patch updates the Java 2 Standard Edition (J2SE) on OS X to J2SE 1.5.0_06.

Sun Microsystems, which develops the J2SE used in OS X, disclosed and patched the vulnerabilities on 7 February. The company noted that the flaw also affects Windows, Linux and Solaris systems.