Secunia CSI7
Advisories
Research
Forums
Create Profile
Our Commitment
PSI
PSI API
CSI
OSI
xSI
Vulnerabilities
Programs
Open Discussions
My Threads
Create Thread
Statistics
About

Forum Thread: sun java jre 1.6.x/6.x

You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.

This thread was submitted in the following forum:
Programs

Relating to this vendor:
Sun Microsystems
And, this specific program:
Oracle Java JRE 1.6.x / 6.x

This thread has been marked as resolved.
amyab4 sun java jre 1.6.x/6.x
Member 28th Jun, 2010 14:43
Ranking: 0
Posts: 2
User Since: 28th Jun, 2010
System Score: N/A
Location: US
My scans continue to tell me that I have unpatched security threats even after I have applied the solution numerous times......this has been going on for about 2 weeks

any suggestions?

Post "RE: sun java jre 1.6.x/6.x" has been selected as an answer.
Gert1904 RE: sun java jre 1.6.x/6.x
Member 28th Jun, 2010 15:07
Score: 1
Posts: 16
User Since: 28th Feb 2009
System Score: N/A
Location: Utrecht, NL
What is the location of the problematic file (s)?
Was this reply relevant?
+0
-0
mogs RE: sun java jre 1.6.x/6.x
Expert Contributor 28th Jun, 2010 15:51
Score: 2265
Posts: 6,266
User Since: 22nd Apr 2009
System Score: 100%
Location: UK
http://secunia.com/community/forum/thread/show/418...

Hello.
The thread above is worth reading.
Regards

--
Was this reply relevant?
+2
-1
Gert1904 RE: sun java jre 1.6.x/6.x
Member 28th Jun, 2010 18:31
Score: 1
Posts: 16
User Since: 28th Feb 2009
System Score: N/A
Location: Utrecht, NL
I have had this problem several times, e.g. on Google Chrome, and on Sun JRE. Mostly due to an installation procedure not cleaning up properly.

For example:

- a file with name (xxx)e in the same folder as a file with name (xxx)f. Apparenltly (f) is the the latest version, and (e) should be removed.
- all kinds of files in "my local settings" which should not be there at all, after installation.

Was this reply relevant?
+0
-0
Oriolus99 RE: sun java jre 1.6.x/6.x
Member 29th Jun, 2010 12:14
Score: 0
Posts: 6
User Since: 11th Nov 2009
System Score: N/A
Location: N/A
I have the same problem for several times too.
Where did your (xxx)e and (xxx)f files reside?
Did removing either or both files solve your problem?
Was this reply relevant?
+0
-0
Maurice Joyce RE: sun java jre 1.6.x/6.x
Handling Contributor 29th Jun, 2010 12:38
Score: 11744
Posts: 9,000
User Since: 4th Jan 2009
System Score: N/A
Location: UK
They do not.
Java is very simple to fix.
JAVA PROBLEMS
=============

Before trying the manual update solution have U tried the Auto Update feature supplied in PSI Version 1.9.0.0? If it did not work have U raised the problems on this thread?


http://secunia.com/community/forum/thread/show/444...

PART 1

STANDARD MANUAL UPDATING OF JAVA
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Can be used with Windows XP,Vista & Windows 7 - 32 & 64 Bit Systems.

If U have but do not use a 64 Bit Browser there is no requirement for Java 64 to be installed.If already installed it can safely be removed via Control Panel>Add/Remove.

JAVA now use an Uninstaller as part of the install process. This makes updating very easy using this method.

1. [b]32 Bit Systems.


A.Go to Start>Control Panel>click on the JAVA icon>select the Update tab>click the Update Now button.
OR
B. Click this link:
http://www.java.com/en/download/manual.jsp (select 32 Bit)


1A. [64 Bit Systems.[/b] Click on this link:
http://www.java.com/en/download/manual.jsp (select 64 Bit)

Both 32 & 64 Bit downloads are available. Download/install them one at a time.

Notes:

U can use the 32 Bit browser to install the 64 Bit version.

To test your JAVA 32 Bit is working correctly use this test link:
http://java.com/en/download/help/testvm.xml

As normal,reboot,carry out a full PSI scan & all should be in order.

Secunia monitors both JAVA 32 & 64 Bit versions.

OPTIONAL EXTRA'S AFTER UPDATING WHICH ARE NOT COMPLETED BY THE AUTO UPDATE FEATURE
+++++++++++++++++++++++

1. Go to Control Panel>JAVA icon>Update Tab and take the tick out of box marked "Check for updates auto ....." (This will prevent a Java updater notification from starting each time U switch on your PC - PSI is already doing this job for U)

2. If U prefer not to have the JAVA icon in the System Tray when in use, open the Advanced Tab>look for Miscellaneous>click the + sign & then remove the tick from clearly marked box.

3. U may also wish to speed up your browser by clearing out the JAVA cache & permanently lowering the quota allocation. If U are unsure how to do this post back for more information.



++++++++++++++++++++++++++++++++++++++++++++++++++ ++++++++++++++++++++++++++++++++++++++++++++++++++ ++++++++++++++++++++++++++++++++++


PART 2

CLEARING OUT OLD JAVA DROSS (32 Bit)
~~~~~~~~~~~~~~~~~~~~~~~~~~~
If U have completed Part 1 & still have a problem it is because the new JAVA uninstaller only removes the previous version. U could still have very old JAVA dross on your system. Try this:

1.Install or double check U have the latest JAVA version (Currently Version 6 Update 20)from here:

http://www.java.com/en/download/manual.jsp (select 32 Bit)

http://www.java.com/en/download/manual.jsp (select 64 Bit)


2.This tool will remove all the old dross except for the version U have just installed. Click here:

http://raproducts.org/

*This link takes U to the site - select the Windows Binary (zip) option.
*This will lead U to Sourceforge.net to download it.
*Save the download to desktop.
*Activate the desktop zip icon which exposes the JAVARA EXE file. Click it
*Select RUN when asked.
*Select your language.
*The tool will now appear on the desktop - select REMOVE OLDER VERSIONS
*Once complete select ADDITIONAL TASKS - tick all boxes & activate.
*Right click on the desktop JAVARA zip file & delete it.

3.To test your JAVA is working correctly use this test link: http://java.com/en/download/help/testvm.xml

If this post has solved your problem could you please select the ACCEPT option. This will lock the thread and stop you & I from receiving unnecessary update emails.

Revision 4

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+1
-0
Oriolus99 RE: sun java jre 1.6.x/6.x
Member 29th Jun, 2010 13:10
Score: 0
Posts: 6
User Since: 11th Nov 2009
System Score: N/A
Location: N/A
Although the 'patch didn't seem to work (see above my and other's calls for help,
this instruction:

1. 32 Bit Systems.

A.Go to Start>Control Panel>click on the JAVA icon>select the Update tab>click the Update Now button.
OR
[b]B. Click this link:
http://www.java.com/en/download/manual.jsp (select 32 Bit)
(I chose for this option)

resulted in a positive message:

Verified Java Version
Congratulations!
You have the recommended Java installed (Version 6 Update 20).

I don't understand why the previous patch I carried out informed me about the failure of it. And, what's more, PSI still reports JRE should be patched...
Was this reply relevant?
+0
-0
amyab4 RE: sun java jre 1.6.x/6.x
Member 29th Jun, 2010 14:03
Score: 0
Posts: 2
User Since: 28th Jun 2010
System Score: N/A
Location: US
Your advice seems like it makes the most sense to me, however, they are all a bit confusing.

I use Firefox as my browser. Could that be the problem? Do I need to open an Internet Explorer page to do this update as I have done before with Windows updates?
Was this reply relevant?
+0
-0
Oriolus99 RE: sun java jre 1.6.x/6.x
Member 29th Jun, 2010 15:03
Score: 0
Posts: 6
User Since: 11th Nov 2009
System Score: N/A
Location: N/A
It was not meant as an advice; it was rather a confused 'patcher' who asks for help. Sorry, to have confused you even more!
Was this reply relevant?
+0
-0
Gert1904 RE: sun java jre 1.6.x/6.x
Member 29th Jun, 2010 15:59
Score: 1
Posts: 16
User Since: 28th Feb 2009
System Score: N/A
Location: Utrecht, NL
I -think- it were these two files:

C:\WINDOWS\system32\Macromed\Flash\Flash10g.ocx
C:\WINDOWS\system32\Macromed\Flash\Flash10h.ocx

I removed the first file (and some clearly associated files in the same folder) manually.

This is obviously a Macromedia problem.
Was this reply relevant?
+0
-0
Maurice Joyce RE: sun java jre 1.6.x/6.x
Handling Contributor 29th Jun, 2010 16:49
Score: 11744
Posts: 9,000
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Correct - it is Adobe. Solution to that one is here:

UPDATING ADOBE FLASH
====================
Works with Windows XP,Vista & Windows 7 - 32 & 64 Bit systems.

If U have PSI version 1.9.0.0 installed have U tried the auto update feature?

OR

To successfully install Adobe Flash go here:
http://www.filehippo.com/download_flashplayer_ie/

& then here if U have any Gecko based browsers.

http://www.filehippo.com/download_flashplayer_fire...

The latest version is:10.1.53.64

1. Download & SAVEit to desktop.
2. The installer will appear on the desk top. Before agreeing to install check these programmes are closed:
a. All Browsers.
b. PSI.
c. Windows Messenger.
d. Incredimail.
e. Adobe Free Reader.

3. The new install will then remove all old files during the update process.
4. Complete a PSI rescan & all should be in order.
5. Delete the Flash installer from the desktop.

POSSIBLE PROBLEMS.
++++++++++++++++++

If U failed to complete 2. above U may well find PSI still shows a vulnerability on the rescan.

SOLUTION

1. Double check all items listed in 2. above are closed.
2. Navigate to:
32 Bit Systems - C:\Windows\system32\Macromedia\Flash
64 Bit Systems - C:\Windows\sysWOW64\Macromedia\Flash

In these locations U may well find these entries:
FLASH10D or E.OCX - Right click & delete it/them.
FLASH10H.OCX - The latest version which should be retained.


SOLUTION 2

1. Check the path to the vulnerability.

If PSI has found elements of Flash in the C:\i386 folder or on any drive other than C that is an OEM reinstallation partition (normally D drive) or a drive U use solely to backup your work U can safely create an ignore rule. It may also be in the Recycle Bin.

OPTIONAL EXTRA'S
++++++++++++++++

Security. (Fairly important if U care to check what Adobe attempt to store on a PC)
Adobe also have a very bad habit of changing your Flash settings each time they plug vulnerabilities. To change the security settings to your liking & regain control of your PC click here:

http://www.macromedia.com/support/documentation/en...

Click each tab U see & change the settings to your security requirements.

Bloat ware.(Very important if U dislike totally useless programmes installed on your PC)
If you used the Adobe site, rather than FileHippo to update you will also find they try or have installed an unnecessary Download Manager.

It is bloat ware by a third party Company called NOS. If found I would uninstall it via Add/Remove.


Revision 11.

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+1
-0
Maurice Joyce RE: sun java jre 1.6.x/6.x
Handling Contributor 29th Jun, 2010 16:53
Score: 11744
Posts: 9,000
User Since: 4th Jan 2009
System Score: N/A
Location: UK
@Orielus99

In your case go to Control Panel>Add/Remove.

Uninstall ALL versions of JAVA(TM),JRE,JSE or JDK U find EXCEPT for Java(TM) 6 Update 20.

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+3
-0
Oriolus99 RE: sun java jre 1.6.x/6.x
Member 30th Jun, 2010 01:23
Score: 0
Posts: 6
User Since: 11th Nov 2009
System Score: N/A
Location: N/A
I run and can only find PSI version:
Current version: 1.5.0.2
Latest release: 28th May. 2010
File size: 734,168 bytes
Total users: 2,602,666
New users (24h): 2,264

Nothing about version 1.9...
Was this reply relevant?
+0
-0
Oriolus99 RE: sun java jre 1.6.x/6.x
Member 30th Jun, 2010 01:27
Score: 0
Posts: 6
User Since: 11th Nov 2009
System Score: N/A
Location: N/A
Last edited on 30th Jun, 2010 01:28
I uninstalled Java 6 Update 1. That worked!
Thanks a lot!
Was this reply relevant?
+0
-0
josief.g RE: sun java jre 1.6.x/6.x
Member 30th Jun, 2010 03:45
Score: 0
Posts: 1
User Since: 16th Jan 2008
System Score: N/A
Location: N/A
I also am having a problem with this topic. It started about a week ago, I did all the right things to update it - restarting/rescanning.

And now again today 30.6.10. I started this morning about 7.00am, having several tries at it, & now again this afternoon to no avail.

josief.gray@xtra.co.nz
Was this reply relevant?
+0
-0

This thread has been marked as locked.


 Products Solutions Customers Partner Resources Company
 
 Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)
 Industry
Compliance
Technology
Integration
 Customers
Testimonials
 VARS
MSSP
Technology Partners
References
 Reports
Webinars
Events
 About us
Careers
Memberships
Newsroom


 
© 2002-2014 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability - Disclaimer