Three critical flaws found in Java

Vikingod · Nov 30, 2005, 03:17 PM

Sun's Java Runtime Environment contains serious security flaws that could allow remote attackers to execute applications on a system, the company warned.

The bugs, patched in a new release yesterday, affect Windows, Unix and Linux platforms. The Java Software Development Kit (SDK) is also affected.

Sun outlined three separate vulnerabilities, each of which could independently allow a specially crafted Java applet, for example embedded in a Web page, to escalate its privileges. That could allow the applet to read and write local files and execute applications accessible to the user running the applet, with the user's privileges.
__________
Read More / Source: ComputerWorld

BWX · Nov 30, 2005, 03:35 PM

WTH?

It also updates itself when you tell it not too. I did not update it, yet it is updated?

EDIT- if it was released yesterday, and I try to update it, it says no update available.... why isn't it updating? You need to download the entire thing again?

niceguyrichy · Nov 30, 2005, 03:39 PM

I've had issues with java in the past where it got to the point that I couldn't have it installed on the hdd at all.

and yeah, it does seem to connect to the net and do whatever the hell it wants without asking permission first.
that always sets alarm bells ringing.

Vikingod · Nov 30, 2005, 03:49 PM

Check your starting programs. I know when it is installed, it sets some services as a starting program that checks for updates. I had to use regsupreme pro to disable the service. i dont know if mine still updates automatically though.

Matth · Nov 30, 2005, 04:26 PM

I went to their site, and couldn't find any new release, unless they mean a release of an update to previous versions

BWX · Nov 30, 2005, 04:34 PM

Quote:

Originally Posted by Matth

I went to their site, and couldn't find any new release, unless they mean a release of an update to previous versions

I am thinking that's all this is.

JRosenfeld · Nov 30, 2005, 05:19 PM

1.5.0_05 is the current version (has been since September). Check for updates says it is up to date.
The vulnerabilities reported are for earlier versions, as stated in the article.

MitchRapp · Nov 30, 2005, 05:41 PM

that's weird... I was surfing for extensions last week and came up to an official firefox site that had plugins and they had 1.5.0_06 .... installed it.... works.... what is it?

BWX · Nov 30, 2005, 05:50 PM

Quote:

Originally Posted by pepiman

that's weird... I was surfing for extensions last week and came up to an official firefox site that had plugins and they had 1.5.0_06 .... installed it.... works.... what is it?

Hmm, dunno, this is my version...

MitchRapp · Dec 5, 2005, 06:24 AM

btw do u guys get that annoying error and a red X for some java stuff (like yahoo fantasy sports statstracker ..... )

what the hell am I doing wrong

BWX · Dec 5, 2005, 07:13 AM

I reinstalled my OS because of an ATI driver that had a bug that wouldn't allow JAVA to work.. but if you have updated drivers and an ATI card it isn't that..

BWX · Dec 5, 2005, 07:49 AM

-or this--

Java Runtime Vendor: Sun Microsystems Inc.
Java Runtime Version 1.5.0_06
(compare to my above screenshot)

New version is out.. Maybe check for an update..
http://www.java.com/en/download/installed.jsp

Nov 30, 2005, 03:17 PM	#1
Vikingod Int'l Fish Liaison Join Date: Jul 2004 Location: By the light of lamp I sit and type... Posts: 16,187 Rep Power: 109 System Specs	Three critical flaws found in Java Sun's Java Runtime Environment contains serious security flaws that could allow remote attackers to execute applications on a system, the company warned. The bugs, patched in a new release yesterday, affect Windows, Unix and Linux platforms. The Java Software Development Kit (SDK) is also affected. Sun outlined three separate vulnerabilities, each of which could independently allow a specially crafted Java applet, for example embedded in a Web page, to escalate its privileges. That could allow the applet to read and write local files and execute applications accessible to the user running the applet, with the user's privileges. __________ Read More / Source: ComputerWorld __________________ *How You Can Help DriverHeaven By Using Digg*

Nov 30, 2005, 03:35 PM	#2
BWX unplugged Join Date: Nov 2002 Location: USNY Posts: 19,665 Rep Power: 109 System Specs	WTH? It also updates itself when you tell it not too. I did not update it, yet it is updated? EDIT- if it was released yesterday, and I try to update it, it says no update available.... why isn't it updating? You need to download the entire thing again? __________________

Nov 30, 2005, 03:49 PM	Thread Starter #4
Vikingod Int'l Fish Liaison Join Date: Jul 2004 Location: By the light of lamp I sit and type... Posts: 16,187 Rep Power: 109 System Specs	Check your starting programs. I know when it is installed, it sets some services as a starting program that checks for updates. I had to use regsupreme pro to disable the service. i dont know if mine still updates automatically though. __________________ *How You Can Help DriverHeaven By Using Digg*

Dec 5, 2005, 07:13 AM	#11
BWX unplugged Join Date: Nov 2002 Location: USNY Posts: 19,665 Rep Power: 109 System Specs	I reinstalled my OS because of an ATI driver that had a bug that wouldn't allow JAVA to work.. but if you have updated drivers and an ATI card it isn't that.. __________________

Dec 5, 2005, 07:49 AM	#12
BWX unplugged Join Date: Nov 2002 Location: USNY Posts: 19,665 Rep Power: 109 System Specs	-or this-- Java Runtime Vendor: Sun Microsystems Inc. Java Runtime Version 1.5.0_06 (compare to my above screenshot) New version is out.. Maybe check for an update.. http://www.java.com/en/download/installed.jsp __________________

Nov 30, 2005, 04:26 PM	#5
Matth Flash Banner Hater Join Date: Jun 2002 Location: UK Posts: 3,410 Rep Power: 91 System Specs	I went to their site, and couldn't find any new release, unless they mean a release of an update to previous versions

Nov 30, 2005, 05:19 PM	#7
JRosenfeld HardwareHeaven Lover Join Date: Sep 2004 Posts: 104 Rep Power: 0 System Specs	1.5.0_05 is the current version (has been since September). Check for updates says it is up to date. The vulnerabilities reported are for earlier versions, as stated in the article.

Nov 30, 2005, 05:41 PM	#8
MitchRapp a.k.a. pepiman Join Date: Dec 2004 Location: Montreal Posts: 998 Rep Power: 49 System Specs	that's weird... I was surfing for extensions last week and came up to an official firefox site that had plugins and they had 1.5.0_06 .... installed it.... works.... what is it?

Dec 5, 2005, 06:24 AM	#10
MitchRapp a.k.a. pepiman Join Date: Dec 2004 Location: Montreal Posts: 998 Rep Power: 49 System Specs	btw do u guys get that annoying error and a red X for some java stuff (like yahoo fantasy sports statstracker ..... ) what the hell am I doing wrong