Is Java Runtime Environment a risk?

Do you have a question? Post it now! No Registration Necessary.  Now with pictures!

Threaded View
I want to run a program on my PC which requires the installation of Java
Runtime Environment (the mind-mapping software Freemind). Does having JRE on
my PC create any security risk. It may seem a naive question, but I am aware
that programs (eg Internet Explorer, MSN messenger) can be exploited by
hackers.



Re: Is Java Runtime Environment a risk?


Quoted text here. Click to load it

One of my program helpers had a look at Freemind for a few days. He
already had the relevant JRE installed. He also installed it of one of
my PCs. No problems at all. If you have applied all the security
updates you won't have a problem with JRE.

Steve

--
Neural Planner Software Ltd          http://npsl1.com
EasyNN-plus. Build Neural Networks.  http://www.easynn.com
SwingNN.     Forecast the Future.    http://www.swingnn.com

Re: Is Java Runtime Environment a risk?

says...
Quoted text here. Click to load it

JRE can be used by applications to do many things - it gets patched a
lot, but most of us have it and work with the issues it presents.

--
- Igitur qui desiderat pacem, praeparet bellum.
- Calling an illegal alien an "undocumented worker" is like calling a
  drug dealer an "unlicensed pharmacist"
spam999free@rrohio.com (remove 999 for proper email address)

Re: Is Java Runtime Environment a risk?

Quoted text here. Click to load it
Many thanks.



Re: Is Java Runtime Environment a risk?

Quoted text here. Click to load it
Many thanks.



Re: Is Java Runtime Environment a risk?


Quoted text here. Click to load it

Always use the latest version and do not forget to uninstall (All)
previous versions before you install the latest version.
http://java.sun.com/javase/downloads/index.jsp

And scroll down to Java Runtime Environment (JRE) 6 Update 6.
I prefer to download the offline installation and install after
downloading  (jre-6u6-windows-i586-p.exe).

--
Fred W. (NL)

Re: Is Java Runtime Environment a risk?

Mag wrote:
Quoted text here. Click to load it

Not a risk unless you have javascript enabled in your browser(s). I use
Firefox because with the NoScript add-on I can selectively (and
permanently or temporarily) activate javascript by website, and even for
embedded objects such as videos.

Heed FredW's advice!

HTH

--
wolf k.

Re: Is Java Runtime Environment a risk?


Quoted text here. Click to load it

Er, do you know the difference between Java and JavaScript?

J
--
Replies to: Nherr1professor2doktor31109(at)Oyahoo(dot)Tcom

Re: Is Java Runtime Environment a risk?

Quoted text here. Click to load it
That's the reason I asked. I am aware that there is an issue with Javascript
(which I why I also use Firefox/Noscript) but I was not sure whether Java
Runtime Environment was related in terms of risk (it appears that it is not)
or whether JRE was exploited by hackers (it also appears that it is not).



Re: Is Java Runtime Environment a risk?

"Mag" wrote:

Quoted text here. Click to load it

Running any type of code in a browser (and the browser code itself) is
a risk because all software contains bugs, some of which can be
exploited. If you keep up to date with security patches for all
software that is internet-active then the risk is much reduced.

Restricting the use of JavaScript (and VBscript if using IE) will also
help reduce the risk from Java applets because many such applets are
scripted.

Quoted text here. Click to load it

It most certainly is the target of exploits, and some have been very
successful.



Re: Is Java Runtime Environment a risk?

Quoted text here. Click to load it
Does that mean that a PC which has JRE installed can be exploited in a way
that a PC without JRE cannot?



Re: Is Java Runtime Environment a risk?

"Mag" wrote:

Quoted text here. Click to load it


Yes. If there is no JRE available to the browser then any exploit
requiring it will fail. However, many attacks containing JRE exploits
also contain others aimed at different browser vulnerabilities; hence
the importance of keeping your system up to date.



Re: Is Java Runtime Environment a risk?

me@tadyatam.invalid wrote:
Quoted text here. Click to load it


AIUI, javascript is a scripting language based on Java. AFAIK, it does
not invoke Java that you have installed on your system. However, the
other day a Java applet from some website I have forgotten would not
start until I had enabled javascript. So ?????

So what's up, doc?

TIA.

--
wolf k.

Re: Is Java Runtime Environment a risk?

"Wolf Kirchmeir" wrote:

Quoted text here. Click to load it

JavaScript (invented by Netscape) is syntactically similar to Java
(invented by Sun Microsystems) but the two languages are different.
The name causes confusion, but it's likely that Netscape called it
JavaScript because it can invoke the Java Virtual Machine (JVM) and
access methods and properties in Java .class files; thus it can run
Java code.

Quoted text here. Click to load it

Normally it does not, but it can do very easily.

Quoted text here. Click to load it

See above and see my first reply to Mag.



Re: Is Java Runtime Environment a risk?

Ant wrote:
Quoted text here. Click to load it

Yes I did, thanks, it clears things up.

--
wolf k.

Re: Is Java Runtime Environment a risk?


| I want to run a program on my PC which requires the installation of Java
| Runtime Environment (the mind-mapping software Freemind). Does having JRE on
| my PC create any security risk. It may seem a naive question, but I am aware
| that programs (eg Internet Explorer, MSN messenger) can be exploited by
| hackers.


Relatively no, if you use the latest version, JRE v6 update 5.

If you are using any version of Sun Java that is prior to JRE Version 6.0,
then you are strongly urged to remove any/all versions.
There are numerous vulnerabilities in them and they are actively being exploited.

It is highly suggested that you update to the latest version which is Sun Java
JRE/JSE
Version 6.0 update 5 (jre 6u5)

Simple check, look under...
C:\Program Files\Java

The only folder under that folder should be the latest version.

Such as...
C:\Program Files\Java\jre1.6.0_05

http://java.sun.com/javase/downloads/index.jsp
http://www.java.com/en/download/manual.jsp

FYI:
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102557-1
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102622-1
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102648-1
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102729-1
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102732-1
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102760-1




--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp



Re: Is Java Runtime Environment a risk?

Quoted text here. Click to load it

Java Runtime Environment (JRE) 6 Update 6 is now available.
Build number: 1.6.0_06-b02
Download:
http://java.sun.com/javase/downloads/index.jsp
http://java.com/en/download/index.jsp
Release Notes:
http://java.sun.com/javase/6/webnotes/ReleaseNotes.html

Quoted text here. Click to load it



Re: Is Java Runtime Environment a risk?

David
Many thanks.



Re: Is Java Runtime Environment a risk?



| Java Runtime Environment (JRE) 6 Update 6 is now available.
| Build number: 1.6.0_06-b02
| Download:
| http://java.sun.com/javase/downloads/index.jsp
| http://java.com/en/download/index.jsp
| Release Notes:
| http://java.sun.com/javase/6/webnotes/ReleaseNotes.html

Thanx Jen.



--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp



Re: Is Java Runtime Environment a risk?

Quoted text here. Click to load it

YW, David :)

-jen



Site Timeline