1. There is no such thing as a "pending" ban or Steam admin. Anyone threatening your account is a scammer trying to scare you. Read more.

Java Vulnerabilities.

Discussion in 'Discussion Archive' started by DataStorm, Jan 11, 2013.

  1. DataStorm

    DataStorm Retired Staff

    Messages:
    3,437
    More information:
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0422 (bug report)
    http://blog.fireeye.com/research/2013/01/happy-new-year-from-new-java-zero-day.html (article)
    http://krebsonsecurity.com/2013/01/zero-day-java-exploit-debuts-in-crimeware/ (article)
    http://labs.alienvault.com/labs/index.php/2013/new-year-new-java-zeroday/ (article)
    https://threatpost.com/en_us/blogs/nasty-new-java-zero-day-found-exploit-kits-already-have-it-011013 (article)

    /edit:
    To uninstall it, you can go to your Control Panel, and then the "Programs and Features" or "Uninstall a program" under header "Programs". Search for Sun Java, and uninstall the newest first.

    If you want to KEEP java, only keep 1 version. Java has the incredible annoying feature that ALL versions installed keep being installed. Updates install a new version next to it. This means in fact that updating with Java isn't really updating, its installing the latest version next to it. As that leads to vulnerabilities for Java applets can choose what version they run under if there are multiple...

    Personal note: I don't think Java will ever be any safe, no version ever has been secure, and the update cycle is too slow to address issues, and by the time the new version is there so many new ones have introduced.

    PS: Java is NOT the same as JavaScript. As I cannot explain it in a few words, I found a nice article for this. Please read: http://www.htmlgoodies.com/beyond/javascript/article.php/3470971/Java-vs-JavaScript.htm