If you can't disable java from
chrome://plugins, you can use the
-disable-java startup switch. Example:
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" -disable-java
Navigating to http://java.com/en/download/help/testvm.xml after a restart of the browser should give the message:
No working Java was detected on your system. Install Java by clicking
the button below.
You can read about other switches in The Power User’s Guide to Google Chrome.
To improve security for the future, not just react to public exploits, you might also want to go to
chrome://chrome/settings/content and check
Click to play on the Plug-ins:
This will wait for your click in order to run the plug-in therefore limiting your exposure.
And this should protect you from more than just Java vulnerabilities:
- Secunia PSI/VIM for notification of updates, vulnerabilities and automatic updates
- Microsoft EMET for preventing stack overflows and similar
- BufferZone for protection from drive-by installers
- iCore Virtual Accounts for times when you need to walk the dark side of the net on a production machine