Secunia CSI7
Advisories
Research
Forums
Create Profile
Our Commitment
PSI
PSI API
CSI
OSI
xSI
Vulnerabilities
Programs
Open Discussions
My Threads
Create Thread
Statistics
About

Forum Thread: About Sun Java JRE 1.6x./6x.

You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.

This thread was submitted in the following forum:
Programs

Relating to this vendor:
Sun Microsystems
And, this specific program:
Oracle Java JRE 1.6.x / 6.x

This thread has been marked as locked.
Toki About Sun Java JRE 1.6x./6x.
Member 1st Apr, 2009 12:17
Ranking: 0
Posts: 5
User Since: 4th Dec, 2008
System Score: 98%
Location: NO
About Sun Java JRE 1.6x./6x.
Is there necessery/correct that this said program shall be resident in both Windows\system32\java.exe, and in
C:\Programfiles\Java\jre6\bin\java.exe

I will be pleased if someone out here could enlight me about this.
The version inmy computer now is 6.0.130.3.
regards Toki

Maurice Joyce RE: About Sun Java JRE 1.6x./6x.
Handling Contributor 1st Apr, 2009 14:09
Score: 11726
Posts: 8,970
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Necessary & correct. U are up to date

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+0
-0
dwneel RE: About Sun Java JRE 1.6x./6x.
Member 2nd Apr, 2009 18:32
Score: 0
Posts: 2
User Since: 2nd Apr 2009
System Score: N/A
Location: N/A
I received two warnings for "Sun Java JRE 1.6 / 6.x" Do I need to do anything. I have ZERO technical computer knowledge.
Was this reply relevant?
+0
-0
Sigrun Helene RE: About Sun Java JRE 1.6x./6x.
Member 2nd Apr, 2009 19:38
Score: 0
Posts: 10
User Since: 5th Jan 2009
System Score: N/A
Location: N/A
on 1st Apr, 2009 12:17, Toki wrote:
About Sun Java JRE 1.6x./6x.
Is there necessery/correct that this said program shall be resident in both Windows\system32\java.exe, and in
C:\Programfiles\Java\jre6\bin\java.exe

I will be pleased if someone out here could enlight me about this.
The version inmy computer now is 6.0.130.3.
regards Toki

Was this reply relevant?
+0
-0
Sigrun Helene RE: About Sun Java JRE 1.6x./6x.
Member 2nd Apr, 2009 19:39
Score: 0
Posts: 10
User Since: 5th Jan 2009
System Score: N/A
Location: N/A
on 2nd Apr, 2009 19:38, Sigrun Helene wrote:

Was this reply relevant?
+0
-0
Kurosh RE: About Sun Java JRE 1.6x./6x.
Member 3rd Apr, 2009 05:48
Score: 3
Posts: 64
User Since: 30th Mar 2009
System Score: N/A
Location: CA
on 2nd Apr, 2009 18:32, dwneel wrote:
I received two warnings for "Sun Java JRE 1.6 / 6.x" Do I need to do anything. I have ZERO technical computer knowledge.


Most likely you aren't running the latest version of Java. (Update 13)

Try this first:

http://www.java.com/getjava/

Download and install the latest Java, and that should clear up the warnings. If not, let us know and someone will assist.

Best Wishes,
Kurosh
Was this reply relevant?
+0
-0
dwneel RE: About Sun Java JRE 1.6x./6x.
Member 3rd Apr, 2009 16:06
Score: 0
Posts: 2
User Since: 2nd Apr 2009
System Score: N/A
Location: N/A
The download seems to have worked. Will post if problems occur. Thanks!
Was this reply relevant?
+0
-0
seamusmaccorcrain RE: About Sun Java JRE 1.6x./6x.
Member 3rd Apr, 2009 19:16
Score: 0
Posts: 2
User Since: 3rd Apr 2009
System Score: N/A
Location: N/A
I've got the latests Sun Java update, rebooted, made sure that I deleted the OLD files thru winblows exploder etc etc. Even did a registry edit to make sure of things before installing the full java package but it's still showing up as out of date..version shown is 1.5x/5.x !

Any ideas for me to try here ?

Seamus
Was this reply relevant?
+0
-0
Kurosh RE: About Sun Java JRE 1.6x./6x.
Member 3rd Apr, 2009 20:09
Score: 3
Posts: 64
User Since: 30th Mar 2009
System Score: N/A
Location: CA
on 3rd Apr, 2009 19:16, seamusmaccorcrain wrote:
I've got the latests Sun Java update, rebooted, made sure that I deleted the OLD files thru winblows exploder etc etc. Even did a registry edit to make sure of things before installing the full java package but it's still showing up as out of date..version shown is 1.5x/5.x !

Any ideas for me to try here ?

Seamus


See: http://secunia.com/community/forum/thread/show/163...

Please let us know what the "path" of the "insecure" version detected is.

Care of Maurice Joyce:

(unknown source)
To locate the exact file that the Secunia PSI has detected, please follow there guidelines using the
ADVANCED interface:
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
* Click on the + sign of the programme to “expand’ it & it will show the path.


Best Wishes,
Kurosh
Was this reply relevant?
+0
-0
Joleca RE: About Sun Java JRE 1.6x./6x.
Member 3rd Apr, 2009 21:24
Score: 0
Posts: 1
User Since: 3rd Mar 2009
System Score: 99%
Location: Denver, US
Getting the same 2 warnings..

on 2nd Apr, 2009 18:32, dwneel wrote:
I received two warnings for "Sun Java JRE 1.6 / 6.x" Do I need to do anything.


Per the Sun Java site I'm running the latest version:

Verifying Java Version
Congratulations!
You have the recommended Java installed (Version 6 Update 13).



--
~~~~ Nothing's forgotten. Nothing is ever forgotten. ~~~~
Was this reply relevant?
+0
-0
Kurosh RE: About Sun Java JRE 1.6x./6x.
Member 3rd Apr, 2009 21:47
Score: 3
Posts: 64
User Since: 30th Mar 2009
System Score: N/A
Location: CA
on 3rd Apr, 2009 21:24, Joleca wrote:
Getting the same 2 warnings..



Per the Sun Java site I'm running the latest version:

Verifying Java Version
Congratulations!
You have the recommended Java installed (Version 6 Update 13).


Do you see any Java entries in your Add / Remove Programs? If so, you can remove all of them except this newest version. Otherwise, see the post above and let us know where PSI is detecting the "insecure" versions.

Best Wishes,
Kurosh
Was this reply relevant?
+0
-0
seamusmaccorcrain RE: About Sun Java JRE 1.6x./6x.
Member 3rd Apr, 2009 23:27
Score: 0
Posts: 2
User Since: 3rd Apr 2009
System Score: N/A
Location: N/A
Ok.......did the same thing re: microsofties add/remove programs..nada but then I checked the path and found that it was leading to my old "d" drive....removed the folders and now it's showing ok :)

Thanks and you folks rock!

Seamus
Was this reply relevant?
+0
-0
meintower RE: About Sun Java JRE 1.6x./6x.
Member 14th Apr, 2009 23:56
Score: 0
Posts: 41
User Since: 18th Feb 2009
System Score: 98%
Location: N/A
on 3rd Apr, 2009 19:16, seamusmaccorcrain wrote:
I've got the latests Sun Java update, rebooted, made sure that I deleted the OLD files thru winblows exploder etc etc. Even did a registry edit to make sure of things before installing the full java package but it's still showing up as out of date..version shown is 1.5x/5.x !

Any ideas for me to try here ?

Seamus

Winblows exploder!!!He,he!

--
meintower
Was this reply relevant?
+0
-0
jesusito RE: About Sun Java JRE 1.6x./6x.
Member 17th Apr, 2009 09:43
Score: 0
Posts: 1
User Since: 12th Apr 2009
System Score: N/A
Location: N/A
on 1st Apr, 2009 12:17, Toki wrote:
About Sun Java JRE 1.6x./6x.
Is there necessery/correct that this said program shall be resident in both Windows\system32\java.exe, and in
C:\Programfiles\Java\jre6\bin\java.exe

I will be pleased if someone out here could enlight me about this.
The version inmy computer now is 6.0.130.3.
regards Toki

Was this reply relevant?
+0
-0
Etain RE: About Sun Java JRE 1.6x./6x.
Member 18th Apr, 2009 03:28
Score: 0
Posts: 10
User Since: 3rd Apr 2009
System Score: N/A
Location: US
I just want to be certain before I delete anything, so a question please...

I've two Java installed showing in my Programs and Features:
Java(TM)6 Update7
Java(TM)6 Update13

The PSI Path for this issue is:
C:\Program Files(x86)\Java\jre1.6.0_07\bin\java.exe

(I'm using vista premium, 64bits, FF browswer)

Do I simply need to uninstall Update7 and restart? Or will this mess up all the Java?
Was this reply relevant?
+0
-0
Maurice Joyce RE: About Sun Java JRE 1.6x./6x.
Handling Contributor 18th Apr, 2009 09:00
Score: 11726
Posts: 8,970
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Uninstall it via add/remove

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+0
-0
Etain RE: About Sun Java JRE 1.6x./6x.
Member 19th Apr, 2009 07:11
Score: 0
Posts: 10
User Since: 3rd Apr 2009
System Score: N/A
Location: US
on 18th Apr, 2009 09:00, Maurice Joyce wrote:
Uninstall it via add/remove



Thank you, issue cleared.
Was this reply relevant?
+0
-0
All_Ready RE: About Sun Java JRE 1.6x./6x.
Member 14th Jul, 2009 04:19
Score: 0
Posts: 1
User Since: 18th Jun 2009
System Score: N/A
Location: N/A
Hello, my secunia is troubling me with the same issue and I've updated to the current version (Java 6 update 14) and it's still appearing like a issue.

The problem is in this folder:
C:\Arquivos de programas\Arquivos comuns\i4j_jres\jre1\bin\java.exe

I'm using Firefox 3.5, Google Chrome 2.x and IE 8.0 and the plugin java sun JRE is highlighted insecure too.

at last, I've tried the JavaRA to remove olders java installations and no results. What I can do to solution this problem and secure my pc?
Was this reply relevant?
+0
-0
eSKzHvZreJxktYLUd4jN1oy... RE: About Sun Java JRE 1.6x./6x.
Member 14th Jul, 2009 12:43
Score: -1
Posts: 82
User Since: 7th Dec 2009
System Score: N/A
Location: N/A
What I would do is to uninstall and remove all Java programs on my PC. When the PSI can no longer find any traces of Java, I would trust them to be gone. Then I would install Java again from www.java.com.

That should work. :-)
Was this reply relevant?
+0
-0
taffy14 RE: About Sun Java JRE 1.6x./6x.
Member 15th Jul, 2009 07:43
Score: 0
Posts: 4
User Since: 20th Jun 2009
System Score: N/A
Location: US
hello to everyone: help!!! i just turned on my pc (windows vist) and i got 6 warnings Sun Java JRE 1.6.x/6.x.i was instructed by secunia to hit the download button to fix it or go to control panel and uninstall it.i do not have java anywhere installed that i could find. so,please anyone know what i should do??? a.s.a.p. A BIG THANKS FOR A REPLY!!taffy
Was this reply relevant?
+0
-0
eSKzHvZreJxktYLUd4jN1oy... RE: About Sun Java JRE 1.6x./6x.
Member 15th Jul, 2009 13:22
Score: -1
Posts: 82
User Since: 7th Dec 2009
System Score: N/A
Location: N/A
The PSI always tells you where the detected programs are. You can simply hover the cursor over the program to see the installation path.
Was this reply relevant?
+0
-0
rosenberg RE: About Sun Java JRE 1.6x./6x.
Member 12th Aug, 2009 22:14
Score: 0
Posts: 4
User Since: 24th Mar 2009
System Score: N/A
Location: N/A
on 1st Apr, 2009 12:17, Toki wrote:
About Sun Java JRE 1.6x./6x.
Is there necessery/correct that this said program shall be resident in both Windows\system32\java.exe, and in
C:\Programfiles\Java\jre6\bin\java.exe

I will be pleased if someone out here could enlight me about this.
The version inmy computer now is 6.0.130.3.
regards Toki

Was this reply relevant?
+0
-0
Maurice Joyce RE: About Sun Java JRE 1.6x./6x.
Handling Contributor 12th Aug, 2009 22:21
Score: 11726
Posts: 8,970
User Since: 4th Jan 2009
System Score: N/A
Location: UK
I have plastered this solution all over the Forum!

f U have not got the latest version of JAVA (Version 6 Update 15) download it from here:
http://www.filehippo.com/download_java_runtime/

Once the update is complete go to Control Panel>JAVA icon>Update Tab and take the tick out of box marked "Check for updates auto ....." (This will prevent a useless file called JUSCHED from being place in your start up menu.


Now remove all the old dross from previous versions.

The tool will remove all old versions, any useless files from previous installs except for the version U have just installed

http://raproducts.org/

*This link takes U to the site - select the Windows Binary (zip) option.
*This will lead U to Sourceforge.net to download it.
*Save the download to desktop.
*Activate the desktop zip icon which exposes the JAVARA EXE file. Click it
*Select RUN when asked.
*Select your language.
*The tool will now appear on the desktop - select REMOVE OLDER VERSIONS
*Once complete select ADDITIONAL TASKS - tick all boxes & activate.


* Right click on the desktop JAVARA zip file & delete it.

Future Updates Of JAVA.

Once all the old JAVA dross is removed future updating is easy.

Go to Start>Control Panel>click on the JAVA icon>select the Update tab>click the Update Now button.

Once the update is complete take the tick out of box marked "Check for updates auto ....." (This will prevent a useless file called JUSCHED from being place in your start up menu.

Run PSI & all aspects should register as secure.


--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+0
-0
kenpmason RE: About Sun Java JRE 1.6x./6x.
Member 13th Aug, 2009 08:17
Score: 0
Posts: 11
User Since: 5th Dec 2008
System Score: 100%
Location: CA
I keep getting the same insecure warning about Sun Java and Microsoft XML Core Services (MSXML) 4.x. My Java is the latest [Version 6 Update 1 6 (build 1.6.0_16-b01].

Sun Java JRE 1.6.x / 6.x (Requires uninstall) C:\Windows\System32\java.exe
Sun Java JRE 1.6.x / 6.x (Requires uninstall) C:\Windows\SysWOW64\java.exe

Microsoft XML Core Services (MSXML) 4.x
C:\Windows\System32\msxml4.dll
C:\Windows\SysWOW64\msxml4.dll

What's going on?

--
kenpmason
Was this reply relevant?
+0
-0
Maurice Joyce RE: About Sun Java JRE 1.6x./6x.
Handling Contributor 13th Aug, 2009 10:01
Score: 11726
Posts: 8,970
User Since: 4th Jan 2009
System Score: N/A
Location: UK
1. MSXML 4 is a standalone version that supports legacy 3rd party installs.
2. Microsoft have released the final SP prior to it becoming obsolete on 13 April 2010.

Your problem should be resolved if you uninstall all versions of MSXML 4 SP2 - reboot - and then install MSXML 4 SP3 which is a complete replacement for SP2 & the various hot fixes.

As for any new install read the Release Notes here:
http://download.microsoft.com/download/A/2/D/A2D85...

The download link is here:
http://www.microsoft.com/downloads/details.aspx?Fa...
The download file to select is MSXML.MSI 2.3MB

Secunia picks it up as secure with version 4.30.2100.0

JAVA

Am I correct in reading U have JAVA 6 Update 16 installed? Where did U get that download from? It is for Windows 7.


--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+0
-0
kenpmason RE: About Sun Java JRE 1.6x./6x.
Member 14th Aug, 2009 06:27
Score: 0
Posts: 11
User Since: 5th Dec 2008
System Score: 100%
Location: CA
Thanks so much. I followed your instructions, and now PSI is happy. I found Java Sun Java JRE 1.6x./6x at the SDN site. It doesn't mention that it's specifically for Win 7.

https://cds.sun.com/is-bin/INTERSHOP.enfinity/WFS/...

How did you know about this? I thought that Vista SP2 included this update, but I guess not.

--
kenpmason
Was this reply relevant?
+0
-0
Chachita RE: About Sun Java JRE 1.6x./6x.
Member 14th Aug, 2009 07:21
Score: -2
Posts: 4
User Since: 25th Jan 2009
System Score: N/A
Location: N/A
Hi,

Like other users on this thread, I have tried patching Sun Java JRE 1.6x./6x several times. I have even been to the Java site and had my version of Java tested and the report says it's working but Secunia still shows two instances of unsafe Sun Java JRE 1.6x./6x.

This is scary and very frustrating and I'm not sure what else to do. I'm running Windows XP and the latest version of Firefox.

I'm wondering if someone can help me fix this problem...?

Thank you, Johanna
Was this reply relevant?
+0
-0
Maurice Joyce RE: About Sun Java JRE 1.6x./6x.
Handling Contributor 14th Aug, 2009 09:12
Score: 11726
Posts: 8,970
User Since: 4th Jan 2009
System Score: N/A
Location: UK
@Johanna,
If U followed my detailed post (above) insecure JAVA will not be on your C Drive.

1. Look in Control Panel>Add/Remove> there should be one entry in there called JAVA 6 Update 15
Are there any more JRE/JSE/JAVA entries?

2. What is the path to the insecurity that PSI has found?

To locate the exact file that the Secunia PSI has detected, please follow there guidelines using the
ADVANCED interface:
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
* Click on the + sign of the programme to “expand’ it.
* Click on Technical Details in the Toolbox to see the installation path of the detected file.

Once I know the answers JAVA is esy to fix.

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+0
-0
dondtus RE: About Sun Java JRE 1.6x./6x.
Member 11th Oct, 2009 23:03
Score: 8
Posts: 6
User Since: 26th Nov 2008
System Score: N/A
Location: US
Secunia PSI v1.5.0.1 reports Sun Java JRE 1.6.x/6.x (Requires uninstall) with version 6.0.10.6 as insecure residing at c:\Program Files\Java\jre1.6.0_01\bin\java.exe. Sun Java Update reports I have the latest version installed. Appwiz.cpl only shows one entry: Java(TM) 6 update 16.

Now when I try to view the forum threads from within the direct links on the advanced interface the Microsoft Script debugger wants to try to debug the external call. I have removed and reinstalled PSI to no resolution.

Secunia: Any help?
Was this reply relevant?
+0
-0
kenpmason RE: About Sun Java JRE 1.6x./6x.
Member 12th Oct, 2009 05:46
Score: 0
Posts: 11
User Since: 5th Dec 2008
System Score: 100%
Location: CA
To everybody struggling to get rid of their old, outdated Java versions, I recommend JavaRa (http://raproducts.org/), which will faithfully remove all old versions. First remove the most recent version of Java in Programs and Features/Add-Remove, then run JavaRa, and lastly, install JRE 1.6x./6x

--
kenpmason
Was this reply relevant?
+0
-0
rosenberg RE: About Sun Java JRE 1.6x./6x.
Member 12th Oct, 2009 20:55
Score: 0
Posts: 4
User Since: 24th Mar 2009
System Score: N/A
Location: N/A
Security
Was this reply relevant?
+0
-0
kenpmason RE: About Sun Java JRE 1.6x./6x.
Member 13th Oct, 2009 00:12
Score: 0
Posts: 11
User Since: 5th Dec 2008
System Score: 100%
Location: CA
That's your answer to my posting? One word, security? You must have forgotten to include the rest of your message.

--
kenpmason
Was this reply relevant?
+0
-0
rosenberg RE: About Sun Java JRE 1.6x./6x.
Member 13th Oct, 2009 20:07
Score: 0
Posts: 4
User Since: 24th Mar 2009
System Score: N/A
Location: N/A
updates
Was this reply relevant?
+0
-0
kenbec RE: About Sun Java JRE 1.6x./6x.
Member 14th Oct, 2009 02:09
Score: 0
Posts: 4
User Since: 2nd Oct 2008
System Score: 100%
Location: AU
Definitely a man of few words :-)
Was this reply relevant?
+0
-0
kenpmason RE: About Sun Java JRE 1.6x./6x.
Member 15th Oct, 2009 02:17
Score: 0
Posts: 11
User Since: 5th Dec 2008
System Score: 100%
Location: CA
The purpose of communications is to communicate, not talk to yourself. It's a 2-way conversation. What kind of conversation are YOU having with this forum?

--
kenpmason
Was this reply relevant?
+0
-0
Anthony Wells RE: About Sun Java JRE 1.6x./6x.
Expert Contributor 15th Oct, 2009 19:26
Score: 2437
Posts: 3,327
User Since: 19th Dec 2007
System Score: N/A
Location: N/A

@kenpmason

If you follow Maurice Joyce's script (above) , you will see that he suggests loading the latest version first and then running JavaRa , you suggest the opposite . Are you sure you are correct ?

Anthony

--


It always seems impossible until its done.
Nelson Mandela
Was this reply relevant?
+0
-0
kenpmason RE: About Sun Java JRE 1.6x./6x.
Member 16th Oct, 2009 04:52
Score: 0
Posts: 11
User Since: 5th Dec 2008
System Score: 100%
Location: CA
Anthony, I'm really not sure, but I prefer my sequence, since it gets rid of all the old versions first, then gets around to the new one. People can try whichever order they think makes the most sense. (Sun created this mess, really they should sort it out! Dream away....)

--
kenpmason
Was this reply relevant?
+0
-0
Maurice Joyce RE: About Sun Java JRE 1.6x./6x.
Handling Contributor 17th Oct, 2009 17:37
Score: 11726
Posts: 8,970
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Last edited on 17th Oct, 2009 17:56
It is correct to normally remove dross first. The key to JavaRA is it leaves the last version installed intact. If that is an insecure one U have gained little.

Sun have now sorted out their update procedure which works.

Using JavaRA should now be a one off to remove all previous dross.

Once that is done & U only have Java 6 Update 16 this procedure will work next time:

Future Updates Of JAVA.

Once all the old JAVA dross is removed future updating is easy.

Go to Start>Control Panel>click on the JAVA icon>select the Update tab>click the Update Now button.

Once the update is complete take the tick out of box marked "Check for updates auto ....." (This will prevent a useless file called JUSCHED from being place in your start up menu.

Run PSI & all aspects should register as secure.




--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+0
-0
kenpmason RE: About Sun Java JRE 1.6x./6x.
Member 17th Oct, 2009 18:04
Score: 0
Posts: 11
User Since: 5th Dec 2008
System Score: 100%
Location: CA
Thanks so much, Maurice. You've clarified the Java mess quite nicely. I didn't know that Sun has finally fixed its update mess, and that JavaRa leaves only the latest version intact. It's nice to see such well-informed advice. I think this should close this thread!

--
kenpmason
Was this reply relevant?
+0
-0

This thread has been marked as locked.


 Products Solutions Customers Partner Resources Company
 
 Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)
 Industry
Compliance
Technology
Integration
 Customers
Testimonials
 VARS
MSSP
Technology Partners
References
 Reports
Webinars
Events
 About us
Careers
Memberships
Newsroom


 
© 2002-2014 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability