navigation bar left navigation bar right

Secunia CSI7
navigation left tab Advisories navigation right tab
navigation left tab Research navigation right tab
navigation left tab Forums navigation right tab
navigation left tab Create Profile navigation right tab
navigation left tab Our Commitment navigation right tab
PSI
PSI API
CSI
OSI
xSI
Vulnerabilities
Programs
Open Discussions
My Threads
Create Thread
Statistics
About

Forum Thread: Java 1.6/6.x

You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.

This thread was submitted in the following forum:
Programs

Relating to this vendor:
Sun Microsystems
And, this specific program:
Oracle Java JRE 1.6.x / 6.x

This thread has been marked as locked.
David.Perry.WA Java 1.6/6.x
Member 7th Jul, 2012 14:39
Ranking: 0
Posts: 2
User Since: 7th Jul, 2012
System Score: N/A
Location: CA
I have removed JRE 6 from my computer and replaced it with JRE 7. I am at the latest update for JRE7. Secunia continues to report the above vulnerability, even though it is no longer on my computer.

MaritimeRider RE: Java 1.6/6.x
Member 7th Jul, 2012 16:03
Score: 22
Posts: 174
User Since: 15th Mar 2009
System Score: 100%
Location: CA
The current update for java is -7 update 5. . If that is what you uploaded, you still may have another older version on your hard drive. Go into your computer and then programs ; all programs you downloaded will show here. Once found, delete all versions except the current one.
Was this reply relevant?
+0
-0
lmacri RE: Java 1.6/6.x
Member 8th Jul, 2012 15:38
Score: 42
Posts: 87
User Since: 9th Sep 2009
System Score: N/A
Location: CA
Last edited on 8th Jul, 2012 16:25
Hi David:

It's very common for Java updates to leave behind residual registry entries and files from previous installations, particularly if you update over an older version instead of uninstalling the older version first. Your PSI scan has probably detected a residual file from one of these older Java 6 installations and thinks that an update is required.

To prevent this problem I've gotten in the habit of uninstalling Java with the free Revo Uninstaller to ensure that Java is completely wiped off my system before I install the latest update. If you'd like to try Revo:

1. Download and install the free Revo Uninstaller (currently v. 1.94 - not the v. 2.5.8 Pro version) from http://www.revouninstaller.com/revo_uninstaller_fr...
2. Download the latest 32-bit offline installer of the Java JRE (currently Java 7 Update 5) from either FileHippo (http://www.filehippo.com/download_jre_32/) or Java (http://www.java.com/en/download/manual.jsp) and save it to your desktop (or any other location on your hard drive where the installer is easy to locate)
3. Run the Revo Uninstaller in Advanced mode (the most aggressive clean) to remove your current Java installation (see comments below)
4. Re-boot your PC
5. Install the latest Java JRE - I usually use the Run command from my Windows Start menu and browse to the saved location of the offline Java installer
6. Test your new Java installation at http://www.java.com/en/download/testjava.jsp
7. Run a new PSI scan

If the above instructions don't work you might have to manually delete residual Java 6 files from C:\Program Files\Java\ jre6 after Step 3. I don't think this will be necessary but it's possible that the Revo Uninstaller will only look for residual files in C:\Program Files\Java\ jre7 since you've already performed a major upgrade from Java 6 to Java 7.

The Help files of the free Revo Uninstaller (Help | Current tool help) have excellent step-by-step instructions to how to run the Revo Uninstaller in Advanced mode and use the Select All and Delete buttons to ensure that all residual Java registry entries and files left behind by the native Java uninstaller are wiped from your system. Note that only bolded registry keys and values displayed by Revo during the Java uninstall will be cleaned off your system. I've been using the free Revo Uninstaller to remove Java (and several other programs) from my system for a few years now and the Aggressive mode of Revo has never corrupted my Windows registry.

A user manual for Revo Uninstaller Pro (the full paid version) is available at http://www.revouninstaller.com/manuals/RevoUninsta...

--
Vista Home Premium SP2 32-bit * NIS 2013 v. 20.5.0.28 * IE 9 * FF v. 31.0 * PSI v. 2.0.0.3003
Was this reply relevant?
+2
-0
MaritimeRider RE: Java 1.6/6.x
Member 10th Jul, 2012 16:14
Score: 22
Posts: 174
User Since: 15th Mar 2009
System Score: 100%
Location: CA
Last edited on 10th Jul, 2012 16:16
Not sure if you restarted your computer after the update. If you didn't, try that, and then do a rescan. Revo uninstaller is no longer a free program.
Was this reply relevant?
+0
-1
Maurice Joyce RE: Java 1.6/6.x
Handling Contributor 10th Jul, 2012 17:42
Score: 11865
Posts: 9,101
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Ruth,
I mention in another thread of yours that Revo Uninstaller remains free:

The download link is here:

http://c464521.r21.cf0.rackcdn.com/revosetup.exe

The Hash details are:
CRC32: 8482BE42
MD5: 979E536F75C1512CA0A13E07835A40FD
SHA-1: BF6F4BA40D0F10646E4489B42F0BA462A3AE2089

The actual download link from the website is here:

http://www.revouninstaller.com/revo_uninstaller_fr...

Scroll to the bottom & U will see the blue download link.

What makes U think it has been discontinued?

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+2
-0
David.Perry.WA RE: Java 1.6/6.x
Member 11th Jul, 2012 10:14
Score: 0
Posts: 2
User Since: 7th Jul 2012
System Score: N/A
Location: CA
Thank you for the suggestion to use Revo Uninstaller. As a result I found there was a lot of Java residual files left on my system, even though I had removed the older versions. I have cleaned out the directories, reinstalled JRE 7U5 and all is fine now. It was a struggle to find everything though.

The problem is resolved.
Was this reply relevant?
+0
-0
Maurice Joyce RE: Java 1.6/6.x
Handling Contributor 11th Jul, 2012 11:29
Score: 11865
Posts: 9,101
User Since: 4th Jan 2009
System Score: N/A
Location: UK
David,
Pleased to see U are all fixed up. If it occurs again there is also a specialist tool that deals with all things Oracle JAVA which U may wish to try.

The link is here:
http://singularlabs.com/software/javara/

When using the Additional Tasks option it is surprising how much JAVA dross it clears from a system even when the Revo Freebie has done its task.

In case U are not aware U can,to some extent,prevent a build up of dross by lowering the default cache level to between 100-200MB. Clicking on the Control Panel icon will quickly show U where the slider is to reduce the level.


--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+2
-0

This thread has been marked as locked.


 Products Solutions Customers Partner Resources Company
 
 Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)
 Industry
Compliance
Technology
Integration
 Customers
Testimonials
 MSSP
Technology Partners
References
 Reports
Webinars
Events
 About us
Careers
Memberships
Newsroom


Secunia is a member of FIRST Secunia is a member of EDUcause Secunia is a member of The Open Group Secunia is a member of FS-ISAC
 
Secunia © 2002-2014 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability - Disclaimer
follow Secunia on Facebook follow Secunia on Twitter follow Secunia on LinkedIn follow Secunia on YouTube follow Secunia Xing follow Secunias RSS feed follow Secunia on Google+