security problem with java!

[kostis]

I just learn today that java has a "bomb" and some personal data can be open to others. this is a very serious threat cause ministry of internal (hope i say it right) of USA from the 10 of January told the users to turn it off! the problem was found on Java7. Java7 has a Java applet that it can steal e-banking and credit card information. so check your java version and if you had Java 7 it better to turn it off. the updates that Oracle gave it doesn't close the problem.

[duhoki]

Re: security problem with java!

Thank you for making forum member aware of this problem. This have been known for some days now, and still java dont have a fix. The norwegian autority and banks, wanted everybody to not use java future on theire computers until it is fixed. So it is really a high risk problem and i belive java will get it fixed soon, not that they want to, but because they have to:D

[kostis]

Re: security problem with java!

for people that having trouble turn it java7 off.
go to Control Panel and find Java Control Panel
open it and the go to Security and disable it.

or try this for internet browsers
hxxp://java.com/en/download/help/disable_browser.xml

[thecrazybandit]

Re: security problem with java!

I have just checked i am running java 7 update 10 just checked java site and it shows update 11 is this a fix or is this update the one with the security problem

[Satphoenix]

Re: security problem with java!

Another solution is to allow only the javasripts from pages you trust.
Use the "noscript-addon function" in the browsers (firefox or chrome).

[kostis]

Re: security problem with java!

[QUOTE=thecrazybandit;261146]I have just checked i am running java 7 update 10 just checked java site and it shows update 11 is this a fix or is this update the one with the security problem[/QUOTE]

as i been told on a Greek forum specialize for pc problems java 7 has this problem and all the updates that oracle is making are trying to solve the problem but none of them so fur can eliminate the danger. every update they make reduce the problem but its still not safe to use. so the safer you can do is follow the post how to close java until its fixed. i had java7 on a pc and i uninstall it and install java 6.

[joseram2000]

Re: security problem with java!

depends on the settings that allow, in order to access data from your computer, such as the webcam, the access can access the information from the PC

[odysseas1991]

Re: security problem with java!

Last night java wanted to update on my computer and I refused as I was doing other tasks, but does anyone know if last nights update has fixed the problem?

[kostis]

Re: security problem with java!

[QUOTE=odysseas1991;261789]Last night java wanted to update on my computer and I refused as I was doing other tasks, but does anyone know if last nights update has fixed the problem?[/QUOTE]

i was on java7 and after learning this problem i uninstall it and install java6, last nigth java try to update again to java7 but i cant really be sure that they fix it and i prefer not to let them test the new update on me and after some time to be found that it still got security problem. Since im working with java6 a few days now without having any problem i dont see why should i update now. i will wait untill they make an anouncement.

[nml52]

Re: security problem with java!

Below is an email I received from Norton.

You may have recently seen some of the extensive news coverage, including statements from the United States Department of Homeland Security, regarding a vulnerability in Java. Java is both a language and a platform to run websites and programs used by many computer users, both on the PC and Mac operating systems. This vulnerability leaves millions of computers open to malware attacks and can lure online traffic to virus-infected websites.
Rest assured, because you have a Norton security software product installed on your computer, you’re protected against the Java bug (CVE-2013-0422), as long as you have not disabled the automatic updates feature.
We also recommend that you apply Oracle’s recently released security patch and make sure you are running the most updated version of Java.

Thank you for being a valued Norton customer.

Sincerely,
The Norton Team

Hope this helps nml

[kostis]

Re: security problem with java!

[QUOTE=nml;261800]Below is an email I received from Norton.

You may have recently seen some of the extensive news coverage, including statements from the United States Department of Homeland Security, regarding a vulnerability in Java. Java is both a language and a platform to run websites and programs used by many computer users, both on the PC and Mac operating systems. This vulnerability leaves millions of computers open to malware attacks and can lure online traffic to virus-infected websites.
Rest assured, because you have a Norton security software product installed on your computer, you’re protected against the Java bug (CVE-2013-0422), as long as you have not disabled the automatic updates feature.
We also recommend that you apply Oracle’s recently released security patch and make sure you are running the most updated version of Java.

Thank you for being a valued Norton customer.

Sincerely,
The Norton Team

Hope this helps nml[/QUOTE]


Yes it does help a lot. May i ask when did you received that email?

[nml52]

Re: security problem with java!

Good, I received it on Friday the 18th.

nml


If my post was useful, please, use "Thanks" button

[thecrazybandit]

Re: security problem with java!

Just had a java update is it safe to install now or should i wait

[Mobley3]

Re: security problem with java!

I still have mine disabled, think I will wait for a few more days until some confirmation,

Regards Mobley3

[bonilla]

Re: security problem with java!

Earlier this week, Oracle released an update for Java. Java 7 Update 11 addressed two vulnerabilities, and also noted that default security levels in Update 11 were increased to High.
However, despite the Java security flaw being repaired CERT still recommend disabling it.
CERT updated its Vulnerability Note. It now reads "unless it is absolutely necessary to run Java in web browsers, disable it as described below, even after updating to 7u11. This will help mitigate other Java vulnerabilities that may be discovered in the future."

In JRE 7 Update 10 and 11, if you wish to disable Java, you can open up the Java Control Panel and disable it under the Security tab.