Java’s implementation of ECDSA signature verification didn’t check if R or S were zero, so you could produce a signature value in which they are both 0 (appropriately encoded) and Java would ...

A signature of r=0 and s=0 is always valid, no private key needed. The Java code left out the sanity-check for zeroes in the signature, so any Java program using ECDSA signatures can be defeated ...

Malware used in a zero-day Java exploit was signed with certificates stolen from a security firm, researchers have found. The editions of Java targeted by the malware, Java 6 Update 41 and Java 7 ...