Apparently there is no fix at this point.  Be Careful out There...

"Internet users should consider disabling Java in their browsers because of an exploit that can allow remote attackers to execute code on a vulnerable system, the U.S. Computer Emergency Readiness Team (US-CERT) recommended late Thursday.

Security researchers reported this week that cybercriminals were using a zero-day vulnerability in Java to attack computer systems. Attackers were using the vulnerability to stealthily install malware on the computers of users who visit compromised websites, researchers said."

http://www.computerworld.com/s/article/9235615/US_CERT_tells_users_to_disable_Java_in_browsers_after_exploit

Firefox + NoScript + ABP + CommonSense = WIN

:-)

I disabled Java long ago.  It used to be a big part of web browsing, but now you rarely need it.

I have java disabled but Java script enabled. I also have a script block add-on that claims to stop malicious code.

It is a worry though.

Turned it off weeks ago for some (Other?) Java exploit.

I do not use Java. It has often been a vulnerability. I don't need a government agency to tell me this.

So, umm.  Does this NoScript thingy in Mozilla protect us, or what?  Should I panic?  I'm usually prepared to panic at least a little bit....  :unsure:

I've never quite understood the appeal of Java and scripts and whizwhams on a site, really.  Betting I probably end up using them a lot without realizing it, though....

Please pardon my elipses... they seem to be getting out of hand recently....

Louis Ferdinand Celine used ellipses as a signature literary device, Cage... You're in good company...

Quote - "Internet users should consider disabling Java in their browsers*..."*

This is incorrect. You should not consider disabling Java - you should disable it without any consideration whatsoever.

Cage,

Noscript prevents all Javascripts, Java and Flash from running.  You can then whitelist sites to allow scripts needed to run sites you use, such as here.  For instance,  I have google-analytics.com blocked, which keeps some of their tracking at bay; Rendo uses it, but it doesn't affect the function of the site. 

It takes a few days of whitelisting one's haunts (a page can have six or more other sites wanting to run scripts and you usually don't want to allow them all; just the ones that will make it work) but after that it's pretty seamless......

Java is not the same as Javascript.

In fact, Java is a runtime environment and has nothing to do with Javascript, which is a script language for browsers.  

So how do you disable java?

So how do you disable java? It's in the tools/options menu of your internet browser. Disabled it ages and apart from a few sites you won't even notice it's been nobbled.

Thanks MrSparky