Java Security Risks

Hi,

Jacee and Corinne like to remind us to make sure our Java is updated if we really feel we can't do without it. I came across this interesting article by Ed Bott, and one particular paragraph stood out for me:

As the Mac community discovered, a user can go to a perfectly legitimate site, be infected with absolutely no warning, and have untrusted code running on the box. That infection typically includes a component that can download additional malware later, also without warning.

And also:

In the second quarter of 2011, Kaspersky Labs researchers listed two “Highly Critical” Java vulnerabilities in their top 10 list (six of the remaining eight entries on the list involved Adobe Flash Player)

https://www.zdnet.com/blog/bott/how-...e_skin;content

So, whilst we are diligent about Windows Updates, and anti-malware updates, its as important not forget about those other vulnerabilities too: Java and Adobe. Have a read of the article, its a real eye-opener.

Regards,
Golden

Definitely a good read. I agree with Jacee and Corinne, I also recommend people uninstall Java unless it is necessary for an application they are running. Software/Shareware often contains an installer for Java bundled with it, when the program is uninstalled Java sometimes sticks around and can remain unpatched.

As an example: the latest version of OpenOffice is bundled with JavaRE6u22. The lastest update for java is JavaRE6u31.

I'm not familiar with LibreOffice, but the system requirements state:

For certain features of the software - but not most - Java is required. Java is notably required for Base.

System Requirements » LibreOffice

DavidW7ncus said:

Does LibreOffice also bundle Java?

Apparently not - its up to you to download and install Java for those componenets that require it.

http://review.techworld.com/applicat...ice-35-review/

I use this Java instead of the version usually used. Never had any trouble. Java.pdf

Roderunner said:

I use this Java instead of the version usually used. Never had any trouble. Java.pdf

You mean NitroPDF instead of AdobePDF - not Java. Agree, NitroPDF is a good optional PDF reader.

Golden said:

Roderunner said:

I use this Java instead of the version usually used. Never had any trouble. Java.pdf

You mean NitroPDF instead of AdobePDF - not Java. Agree, NitroPDF is a good optional PDF reader.

My pdf is about an alternative Java.

Ahh. My mistake, the link opened up in my NitroPDF and for some reason I though your attachement was the link to Nitro

The only reason I have Java on my PC is that I run OpenOffice, and it's required. It is disabled in my browser and as soon as I find an alternative to OO that doesn't require it, it's definitely off my sys. I haven't checked it out yet, but maybe LibreOffice, not sure if that requires Java or not....as soon as I get some time (when school ends...)