I guess the more important question is what kind of process changes are FireEye going to make?<p>FireEye is a security company. Their business is security and catching hacking attempts. They of all people should know how dangerous it is to scrape and parse potentially malicious data off the wire in large quantities, and yet it doesn&#x27;t sound like they&#x27;ve taken any special precautions. OK, the JAR disassembler doesn&#x27;t run as root, but there&#x27;s a privilege escalation so simple the description fits in a single line of text, so that&#x27;s not worth much.<p>The fact that JODE has the potential to execute arbitrary code whilst decompiling isn&#x27;t a secret, it&#x27;s mentioned in the FAQ. So there must have been some kind of failure in the development process that led to the appliance developers simply grabbing whatever package they encountered first in order to ship the feature, without taking into account the security of their own software stack.<p>To me this says that the appliance is very likely to have lots of other vulnerabilities in it. Sort of like how anti-virus engines have been found to be vipers nests of exploits.