Secunia CSI7
Advisories
Research
Forums
Create Profile
Our Commitment
PSI
PSI API
CSI
OSI
xSI
Vulnerabilities
Programs
Open Discussions
My Threads
Create Thread
Statistics
About

Forum Thread: Sun Java JRE 1.6.x / 6.x Insecure Program

You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.

This thread was submitted in the following forum:
OSI

This thread has been marked as locked.
Snowbird Sun Java JRE 1.6.x / 6.x Insecure Program
Member 7th Nov, 2009 19:33
Ranking: 0
Posts: 8
User Since: 5th Feb, 2009
System Score: 98%
Location: CA
After scanning it tells me that there are security threats. I have this threat twice now and each time I click on the Solution button it tells me An error occured whilst attemting to open the desired URL.
Any suggestions would be appreciated.
Thanks Snowbird.

--
Toshiba Satellite L305-S5921.
Windows Vista.

michaelsalis RE: Sun Java JRE 1.6.x / 6.x Insecure Program
Member 7th Nov, 2009 21:25
Score: 57
Posts: 141
User Since: 18th Feb 2009
System Score: 98%
Location: UK
There has been updated in he past few days so you can download the update and it should then be secure.

In Vista goto Control Panel>Programs>Java the control panel will open then you can go to update.

I don't seem to have problems with updating Java but if you do come back here an somebody will help if you need it.

Michael

--
Michael
Toshiba Satelite A660
Intel i7
Windows 7 Ultimate
IE9

Toshiba Equium Laptop
Intel Centrino Duo
Windows Vista Ultimate SP2
IE9
Was this reply relevant?
+0
-0
mogs RE: Sun Java JRE 1.6.x / 6.x Insecure Program
Expert Contributor 7th Nov, 2009 21:30
Score: 2265
Posts: 6,266
User Since: 22nd Apr 2009
System Score: 100%
Location: UK
on 7th Nov, 2009 19:33, Snowbird wrote:
After scanning it tells me that there are security threats. I have this threat twice now and each time I click on the Solution button it tells me An error occured whilst attemting to open the desired URL.
Any suggestions would be appreciated.
Thanks Snowbird.

Hello. There are quite a few threads concerning Java updating,etc., on the forum, worth reading.Particularly, you should look for those written by Maurice Joyce who has repeatedly given advice concerning.Just browse thro' the items for the last few days.
The link that I use.....http://www.java.com/en/download/manual.jsp
where you can update and test that Java is working.


--
Was this reply relevant?
+0
-0
Maurice Joyce RE: Sun Java JRE 1.6.x / 6.x Insecure Program
Handling Contributor 7th Nov, 2009 22:08
Score: 11711
Posts: 8,954
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Just updated my post if U want to use it:

CLEARING OUT OLD JAVA DROSS
===========================

JAVA now use an Uninstaller as part of the install process.

It works very well but ONLY removes the previous version.

To ensure U have no previous dross from very old versions on your PC & to make updating easier for the future I would recommend:

1.Install or double check U have the latest JAVA version (Currently Version 6 Update 17)from here:
http://www.java.com/en/

Once the update is complete go to Control Panel>JAVA icon>Update Tab and take the tick out of box marked "Check for updates auto ....." (This will prevent a an unnecessary file from starting each time U switch on your PC - PSI is already doing this job for U)


2. Now remove all the old dross from older versions.

The tool will do the job by deleting useless files from previous installs except for the version U have just installed

http://raproducts.org/

*This link takes U to the site - select the Windows Binary (zip) option.
*This will lead U to Sourceforge.net to download it.
*Save the download to desktop.
*Activate the desktop zip icon which exposes the JAVARA EXE file. Click it
*Select RUN when asked.
*Select your language.
*The tool will now appear on the desktop - select REMOVE OLDER VERSIONS
*Once complete select ADDITIONAL TASKS - tick all boxes & activate.
*Right click on the desktop JAVARA zip file & delete it.

3. If U wish to test your JAVA is working correctly use this test link: http://java.com/en/download/help/testvm.xml

++++++++++++++++++++++++++++++++++++++++++++++++++ ++++++++++++++++++++++++++++++++++++++++++++++++++ ++++++++++++++++++++++++++++++++++++++++++++++++

FUTURE UPDATING OF JAVA.
ŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻ

Now U have cleared the dross future updating is easy & should not include the procedure outlined above. All U will need to do is:

1. Go to Start>Control Panel>click on the JAVA icon>select the Update tab>click the Update Now button.

2. Once the update is complete go to Control Panel>JAVA icon>Update Tab and take the tick out of box marked "Check for updates auto ....." (This will prevent a an unnecessary file from starting each time U switch on your PC - PSI is already doing this job for U)

3. If U prefer not to have the JAVA icon in the System Tray when in use, open the Advanced Tab>look for Miscellaneous>click the + sign & then remove the tick from clearly marked box.

4. If U wish to test your JAVA is working correctly use this test link: http://java.com/en/download/help/testvm.xml


By using this recommended method the previous version will be automatically uninstalled & U are guaranteed to get the correct version for your OS.







--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+0
-0
Snowbird RE: Sun Java JRE 1.6.x / 6.x Insecure Program
Member 8th Nov, 2009 00:05
Score: 0
Posts: 8
User Since: 5th Feb 2009
System Score: 98%
Location: CA
Many thanks for your help. Problem solved.

--
Toshiba Satellite L305-S5921.
Windows Vista.
Was this reply relevant?
+0
-0
taffy078 RE: Sun Java JRE 1.6.x / 6.x Insecure Program
Contributor 8th Nov, 2009 09:27
Score: 408
Posts: 1,335
User Since: 26th Feb 2009
System Score: 100%
Location: UK
This didn't cause me any problems this time!

Why not? Because as soon as the scan told me I had an insecure program, instead of clicking on the "auto-update" icon as I would have done, I searched for and found this thread.

Lo & behold, Maurice Joyce has again come up with the solution!

Your step-by-step instructions were a delight to follow, for a PC-thicky such as me. I even remembered to copy and paste them onto Word for when IEhad to be closed.

What in the past has taken me hours and hours took me 15 minutes. Thank you once again Maurice!

And now on to the dreaded Adobe Shockwave Player resolution!

--
taffy078, West Yorkshire, UK

Desktop: Compaq Presario (OEM) 32 bit / AMD Athlon / 2 GB RAM
XP Home - SP3/ IE8/ Norton IS - Secunia PSI v2.0.0.3003

Laptop: Win 7 / IE11 / PSI v2.0.0.3003
Was this reply relevant?
+0
-0
Maurice Joyce RE: Sun Java JRE 1.6.x / 6.x Insecure Program
Handling Contributor 8th Nov, 2009 10:29
Score: 11711
Posts: 8,954
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Here U are:

UPDATING SHOCKWAVE
==================

1. Uninstall Shockwave for your OS from the clearly marked link here:
http://www.adobe.com/shockwave/download/alternates...

2. Reboot to clear out any left over ocx files.

3. Rescan using PSI. Are there any outstanding files that are insecure? These should be cleared out before proceeding to serial 4.

Note 1: At this stage,if PSI finds any elements of Shockwave in the C:\i386 folder or on any drive other than C that is an OEM reinstallation partition (normally D drive) or a drive U use solely to backup your work U can safely create an ignore rule.

Note 2: The path on the C Drive to any remaining insecurity is important. Does it point to the Shockwave Player or another Adobe product that has a Flash element? If it points to Shockwave right click on the file(s) & delete them. If it points elsewhere reinstalling Shockwave will not necessarily clear the problem.

4. Reinstall Shockwave from here:
http://get.adobe.com/shockwave/

5. If you wish to test your new Shockwave Player the link is here:

http://www.adobe.com/shockwave/welcome/


--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+0
-0
taffy078 RE: Sun Java JRE 1.6.x / 6.x Insecure Program
Contributor 8th Nov, 2009 10:33
Score: 408
Posts: 1,335
User Since: 26th Feb 2009
System Score: 100%
Location: UK
and again . . . thanks Maurice. I'll crack on. I have another thread about shockwave and NPAPI. Another challenge for you!
PS Just noticed the time of your post!

--
taffy078, West Yorkshire, UK

Desktop: Compaq Presario (OEM) 32 bit / AMD Athlon / 2 GB RAM
XP Home - SP3/ IE8/ Norton IS - Secunia PSI v2.0.0.3003

Laptop: Win 7 / IE11 / PSI v2.0.0.3003
Was this reply relevant?
+0
-0
joesoap RE: Sun Java JRE 1.6.x / 6.x Insecure Program
Member 9th Nov, 2009 13:41
Score: 3
Posts: 39
User Since: 1st Aug 2009
System Score: 100%
Location: UK
Last edited on 9th Nov, 2009 14:21
on 7th Nov, 2009 19:33, Snowbird wrote:
After scanning it tells me that there are security threats. I have this threat twice now and each time I click on the Solution button it tells me An error occured whilst attemting to open the desired URL.
Any suggestions would be appreciated.
Thanks Snowbird.

Hi, I too am having Java trouble, not for the first time. Last time I went direct to Java, but it,s not working this time, nor does control panel update, it just says I have latest version.Secunia seems to have this problem every so often.I am stumped now apart from re-downloading latest version again.Unless there,s anyone who has a better idea?Sorted it.Changed auto update to daily, preset to next time slot and waited. it updated ok,100% now, going to reset auto back to weekly instead of monthly, but shouldn,t need it at all with secunia as that does it ?
Was this reply relevant?
+0
-0
wr RE: Sun Java JRE 1.6.x / 6.x Insecure Program
Contributor 9th Nov, 2009 19:38
Score: 308
Posts: 736
User Since: 30th Mar 2008
System Score: 100%
Location: US
Copied from Maurice Joyces' post in this thread:"2. Once the update is complete go to Control Panel>JAVA icon>Update Tab and take the tick out of box marked "Check for updates auto ....." (This will prevent a an unnecessary file from starting each time U switch on your PC - PSI is already doing this job for U)"
You're correct, PSI is doing this for you.

Regards, wr

--
HP Pavilion Slimline s3020n
Windows Vista Home Premium SP2 32 bit
AMD 64 Athlon X2
Firefox 24.4.0 ESR
The weakest link of a computer system is always sitting in front of the monitor.
Was this reply relevant?
+0
-0

This thread has been marked as locked.


 Products Solutions Customers Partner Resources Company
 
 Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)
 Industry
Compliance
Technology
Integration
 Customers
Testimonials
 VARS
MSSP
Technology Partners
References
 Reports
Webinars
Events
 About us
Careers
Memberships
Newsroom


 
© 2002-2014 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability