Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: More Java woes

24 Jan 2013   #1
Borg 386

Win 7 32 Home Premium, Win 7 64 Pro, Win 8.1, Win 10
 
 
More Java woes

Oracle's Java patch contains new holes, researchers warn
Quote:
Researchers from Security Explorations, a Poland-based vulnerability research firm, claim to have found two new vulnerabilities in Java 7 Update 11 that can be exploited to bypass the software's security sandbox and execute arbitrary code on computers.

Oracle released Java 7 Update 11 last Sunday as an emergency security update in order to block a zero-day exploit used by cybercriminals to infect computers with malware.

Security Explorations successfully confirmed that a complete Java security sandbox bypass can be still be achieved under Java 7 Update 11 (JRE version 1.7.0_11-b21) by exploiting two new vulnerabilities discovered by the company's researchers, Adam Gowdiak, the company's founder, said Friday in a message sent to the Full Disclosure mailing list. The vulnerabilities were reported to Oracle on Friday, together with working proof-of-concept exploit code, he said.
http://www.pcworld.com/article/20257...ml#tk.nl_secur

Malware impersonates Java patch

Quote:
Trend Micro has spotted a piece of malicious software that masquerades as the latest patch for Java, a typically opportunistic move by hackers.

Oracle released two emergency patches on Sunday for its Java programming language and application platform, which is installed on millions of computers worldwide.

The latest version of Java is Update 11. Trend Micro wrote on its blog that it was alerted to a fake "Java Update 11" present on at least one website. If a user installs the bogus update, a malicious backdoor program is downloaded.
Malware impersonates Java patch | PCWorld


My System SpecsSystem Spec
.
24 Jan 2013   #2
Solarstarshines

Windows 10 Home Premium 64bit sp1
 
 

I remember we used to get prompted for Java updates but that is if you installed Java

Funny I never used it on Win7 because guess what it is Great without it
My System SpecsSystem Spec
25 Jan 2013   #3
ICIT2LOL

Desk1 7 Home Prem / Desk2 10 Pro / Main lap Asus ROG 10 Pro 2 laptop Toshiba 7 Pro Asus P2520 7 & 10
 
 

Quote   Quote: Originally Posted by Solarstarshines View Post
I remember we used to get prompted for Java updates but that is if you installed Java

Funny I never used it on Win7 because guess what it is Great without it
+1 Solar I have not had it on any of mt machines for four months now since the sad and sorry mess started getting worse and guess what - they have run as smooth as.
My System SpecsSystem Spec
.

25 Jan 2013   #4
x BlueRobot

 

What happens to users like me who have to have Java installed? I guess we have to install 'patch' after 'patch', to find that another security exploit has been found; may I ask who is writing the code for Java now?
My System SpecsSystem Spec
25 Jan 2013   #5
ICIT2LOL

Desk1 7 Home Prem / Desk2 10 Pro / Main lap Asus ROG 10 Pro 2 laptop Toshiba 7 Pro Asus P2520 7 & 10
 
 

Quote   Quote: Originally Posted by x BlueRobot View Post
What happens to users like me who have to have Java installed? I guess we have to install 'patch' after 'patch', to find that another security exploit has been found; may I ask who is writing the code for Java now?
Hiyya mate don't know if this is of any help

How to Protect Yourself From Java Security Problems if You Can’t Uninstall It - How-To Geek
My System SpecsSystem Spec
25 Jan 2013   #6
lehnerus2000

W7 Ultimate SP1, LM19.1 MATE, W10 Home 1703, W10 Pro 1703 VM, #All 64 bit
 
 
Use a VM?

Quote   Quote: Originally Posted by x BlueRobot View Post
What happens to users like me who have to have Java installed? I guess we have to install 'patch' after 'patch', to find that another security exploit has been found; may I ask who is writing the code for Java now?
You could do this:
  1. Use VM software.
  2. Create a Windows VM.
  3. Install Java on that.
I only use Java on a single Windows VM.

Possibly better:
  • Install a Linux OS (physical or virtual)
  • Install VM software (like VMware Player)
  • Create a Windows VM
  • Install Java on that
  • Create a Live Linux CD/DVD of that Linux install
  • Run that disc when you are forced to use Java
Note
You can:
  • Run Live CDs/DVDs on a PC without HDDs (I've done it).
  • Create Live Linux CDs/DVDs from a Linux OS VM (I've done that too).
My System SpecsSystem Spec
26 Jan 2013   #7
x BlueRobot

 

Thanks for the suggestions, I've disabled Java for browsers, if a website requires Java then I can just re-enable the Java Plug-In for that particular website. I also have multiple browsers installed: Opera, IE10 and Google Chrome.

I will check if I have any CD/DVDs, if not may consider following that option too.
My System SpecsSystem Spec
26 Jan 2013   #8
lehnerus2000

W7 Ultimate SP1, LM19.1 MATE, W10 Home 1703, W10 Pro 1703 VM, #All 64 bit
 
 
It's a little tricky

Quote   Quote: Originally Posted by x BlueRobot View Post
Thanks for the suggestions, I've disabled Java for browsers, if a website requires Java then I can just re-enable the Java Plug-In for that particular website. I also have multiple browsers installed: Opera, IE10 and Google Chrome.

I will check if I have any CD/DVDs, if not may consider following that option too.
It is a little tricky though (I'm not very skilled at using Linux).
I'd recommend creating ISO files (do not directly create discs) as I had some minor problems.

I created a Live Linux Mint 14 MATE ISO last week.
I followed the Ubuntu instructions (I couldn't find any for LM 14).

I wanted to create a Live DVD that had GParted and Wireshark installed.
It took seven attempts for me to get an ISO file that worked basically the way I wanted.

It ended up being a Live DVD of my installation (i.e. I need to use my user name and password to use it) as opposed to the standard Live install DVD (no user name or password required).

If you use Ubuntu, there is a GUI program (Remastersys?) that you can use to create a Live CD.
My System SpecsSystem Spec
27 Jan 2013   #9
x BlueRobot

 

It would have to be an .ISO anyway, I haven't got a CD-ROM drive for my notebook

The family computer (desktop) and my step-brother's laptop has a CD-ROM drive, and I'm not sure if my Dad is running Java anyway, I know the other two are. Thanks again for the information :)
My System SpecsSystem Spec
27 Jan 2013   #10
ICIT2LOL

Desk1 7 Home Prem / Desk2 10 Pro / Main lap Asus ROG 10 Pro 2 laptop Toshiba 7 Pro Asus P2520 7 & 10
 
 

Pardon me for butting in - then do I have to have Java running if I dual boot 7 with Ubuntu? Plus the stick method is faster to install than the DVD method?
My System SpecsSystem Spec
Reply

 More Java woes




Thread Tools




Similar help and support threads
Thread Forum
Java Error : java.lang.RuntimeException when Updating Vuze
Hello to everyone! I am currently experiencing this Java problem that I only encounter when updating my Vuze Bittorrent Client. I am just updating it to newer version but every time I try, the error pops up. The complete error is: "An error occurred: java.lang.RuntimeException:...
Software
Java Void(0) Woes.
I have encountered this issue on my own listed W-7 home Premium Dell, and on an acquaintances similarly equipped 2010 vintage HP lap top.I have searched the threads found here and elsewhere, but both computers cheerfully ignore any repair efforts. Two sites that are guaranteed to have issues are...
Software
Exploit:Java/CVE-2008-5353.B;Trojan:Java/Selace.A and B
Help! I ran the Windows Safety Scanner. It detected four issues, but apparently, the scanner cannot clean three: Exploit:Java/CVE-2008-5353.B Trojan:Java/Selace.A Trojan:Java/Selace.B There is no concrete information on how to get rid of these unwanted visitors and prevent them from...
System Security


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 16:05.
Twitter Facebook