Java is unsafe! Which part and which version

I too have some apps that include an old versions of Java. In my case, version 6 update 19.

But I do not think that the files are referenced in the registry in such a way as to allow a program to pass a Java file to the OS shell... in other words: If a browser tries to run a Java file, the operating system will not know to pass that file on to the old version of Java that comes with these apps.

Malware writers usually attempt to use Java's flaws to get the malware running in such a way that it can do things that it normally could not do. In theory, malware could be started via other means (you run something from a USB/CD/DVD/download) and the malware could scan the hard drive for versions of Java that it can exploit - thus allowing the malware the ability to do things that it normally could not do.

I doubt that there are any forum members that are willing to state which parts of Java are safe.
(Probably not the answer that you wanted to hear.)

andrew129260 said:

Guess what? Unfortunately all java is unsafe and has multiple attack points and exploits. Simply do not use it.

(Unless you absolutely have too)

Why is inherently unsafe? Is it because java bypasses the normal windows security layers?

A Guy said:

You can, at least, remove older versions of Java to reduce your exposure.

Why should I uninstall older versions of Java from my system?

Java Uninstall Tool

A Guy

I'm not sure if you were talking to the OP or to benedictus or both...
...but, I do not think that the Java Uninstall Tool (JUT) will help the OP.

You can have several old versions of Java installed by other apps (which is what the OP is talking about) and those versions will not be detected by the JUT. That JUT only looks in the registry for one key. If that key is not there, it gives up. See the end of this video for that key.



I ran the JUT using
IE10 with 64bit tabs and 64bit Java
and
IE10 with 32bit tabs and 32bit Java
Neither found the old Java shown in the screenshot.
I'm guessing that the OP will have the same results.

The particular thing that has been specified to have flaws always were the browsers plugins, which are able, under the right circumstances, to run arbitrary code on your computer. Disabling them removes the vulnerability altogether. I'm not aware of any other parts of them to have the same flaw, since everything else runs on your machine and isn't exposed to the web.

Another different history are the programs themselves written in Java. They can be themselves a problem because of their own behavior, but not related to Java itself (the same can happen with any program, written in ANY language). Some programs as you see use their own "private" Java runtime in their own folders, which is merely a convenience. That doesn't means a potential security exploit in your computer (again, the flawed component is the browser plugin) because of the presence of those, but rather you must think if you really trust the program using them, as you would do with any program.

Just remember to have an updated antivirus, a working, properly configured firewall and most important common sense, and you can live reasonably safe.

UsernameIssues said:

~~~
I doubt that there are any forum members that are willing to state which parts of Java are safe.
(Probably not the answer that you wanted to hear.)

Alejandro85 said:

The particular thing that has been specified to have flaws always were the browsers plugins, which are able, under the right circumstances, to run arbitrary code on your computer. Disabling them removes the vulnerability altogether. I'm not aware of any other parts of them to have the same flaw, since everything else runs on your machine and isn't exposed to the web.

Another different history are the programs themselves written in Java. They can be themselves a problem because of their own behavior, but not related to Java itself (the same can happen with any program, written in ANY language). Some programs as you see use their own "private" Java runtime in their own folders, which is merely a convenience. That doesn't means a potential security exploit in your computer (again, the flawed component is the browser plugin) because of the presence of those, but rather you must think if you really trust the program using them, as you would do with any program.

Just remember to have an updated antivirus, a working, properly configured firewall and most important common sense, and you can live reasonably safe.

I stand corrected.

Actually, I'm not standing at the moment