has a sun java ever update ever been used as an attack on a computer? I got a notice for update 19 or 17 after a strange attempt when visiting a website that said I have virus problems. I didnt allow their downloads but the java seemed legit after i checked my updater and it was there and downloaded the java update. any thoughts...?
Hi, genxie.
Java SE Runtime Environment 6u19 was released on Tuesday, 30Mar10 and addressed a critical vulnerability. If you have any old Java updates prior to JRE 6u11, it is strongly advised that you go to Add/Remove programs and uninstall those versions as the "update mechanism" did not remove those vulnerable versions. Thus, even when people were diligent in updating to the most recent version, the vulnerable versions were left behind, leaving the computer vulnerable to Vundo/Virtumonde. Sun Microsystems finally got the update process right at JRE 6u11. Let's hope Oracle continues getting it right.
Quote