Windows 8 and 8.1 Forums


Critical Java zero-day bug is being “massively exploited"

  1. #31


    Orbiting the Moon
    Posts : 2,975
    Windows 10 x64


    Quote Originally Posted by Blosam View Post
    I went to the sight to see if I had Java and it said it only did deck computer not lap top. Interesting. I wonder why?Is this a true check up or is Java pressing to be a paid program in order to be a safe sight???? Or are we paying for a fix ???
    You'd better go and look in the computer itself not the site (they might automatically install it for you! depending what site that is).

    Go to Control Panel -> Program and Features and scroll through the list of installed programs. Java should be there if installed. Also in Control Panel, there should be a "Java Settings" icon or something where settings can be changed.

    If that is missing then you don't have Java.

      My System SpecsSystem Spec

  2. #32


    Harrisonburg, Va.
    Posts : 10,488
    Windows 8.1.1 Pro with Media Center


    Quote Originally Posted by Hopachi View Post
    Quote Originally Posted by Blosam View Post
    I went to the sight to see if I had Java and it said it only did deck computer not lap top. Interesting. I wonder why?Is this a true check up or is Java pressing to be a paid program in order to be a safe sight???? Or are we paying for a fix ???
    You'd better go and look in the computer itself not the site (they might automatically install it for you! depending what site that is).

    Go to Control Panel -> Program and Features and scroll through the list of installed programs. Java should be there if installed. Also in Control Panel, there should be a "Java Settings" icon or something where settings can be changed.

    If that is missing then you don't have Java.
    I use the JAVA site to test mine . It does not automatically install it.

    How do I test whether Java is working on my computer

    Click image for larger version

    Control Panel shot--

    Click image for larger version
      My System SpecsSystem Spec

  3. #33


    Posts : 2,156
    Win7 Ult on DIY; Win8 Pro on MBP/Parallels; Win7 Ult on MBP/Boot Camp; Win7 Ult/Win8 Pro on HP


    Sorry, I haven't read all of what is above. Still, I have some comments on the Java security issue raised by Homeland Security. Please understand that I am in no way a Java expert, but I have spend a little time trying to piece things together. Please help if you can clarify/correct anything I have said.

    First, I am running the latest version of Chrome on Win8--which does not have the Java plugin. I don't think you have a Java problem if you are not running the plugin in your browser. I am not sure which versions of Chrome don't have the plugin. For most surfing, site access tasks, etc., not having the plugin is of no consequence to me. Note that you often can simply disable (or uninstall) the plugin in at least some of the popular browsers. For Chrome, type in the browser address bar "chrome://plugins" and look for the plugin.

    Next, apparently there is no Java problem in regard to the metro area of Win8. Per several reads. Per Oracle/Java specifically: "Microsoft Windows 8 does not support plug-ins in the Start screen and therefore Java will not run in the Start screen. You will have to switch to the Desktop screen to run Java." This quote does not confirm that a Java problem can occur only from the Win8 desktop, but that's true.

    Edited to add info: Third, FWIW, there is no Java control panel in Win8 unless Java is installed by the individual (or, less likely, by the OEM)--i.e., Java is not installed when Win8 is installed. Some reads talk about controlling Java via this often non-existent panel. If installed,Java, of course, should appear in Control Panel > Programs and Features. If installed, then it may not be enabled. See this link to see if you have Java installed, but not enabled. If not enabled, then the Java plugin will not run--which is what you may want to happen (i.e., not run, that is). The last link implies, for Win8, the the Java control panel may be hard to find if installed. Go figure.

    Fourth, IE 10 is not subject to the Java problem (also applies apparently to IE 9--many can upgrade to IE 9). But, this read says one should still do "the" Java update for IE 9 and IE 10, but I am not sure why and didn't care enough to try to figure out why. Earlier versions of IE are subject to the problem until patched. But, note that Homeland Security says there still is a problem even given patching.

    Next, doing Java working/not working test looks like a really bad idea since you have to have the plugin to do it. See snip.

    Sixth, The Java Runtime Environment should be a problem only if the plugin is installed. But, if you can disable the Java Runtime Environment, then plugin will not run. It's easier to disable the plugin. Some

    Last, maybe, Homeland Security identifies the problem being with "Java 7 Update 10 and earlier ...." But, the problem is with the plugin. The reference to "Java 7 Update 10 and earlier" pertains, I think, to the Java Runtime Environment as shown in this link I posted above. Homeland doesn't think that Java7 Update 11 has solved the problem.
    Attached Thumbnails Attached Thumbnails Java.PNG  
    Last edited by znod; 16 Jan 2013 at 07:10.
      My System SpecsSystem Spec

  4. #34


    Posts : 529
    Windows 8.1 Pro


    good point i run win 8 so i don't worry to much unless for some reason i go to the desktop lol
      My System SpecsSystem Spec

  5. #35


    Posts : 2,156
    Win7 Ult on DIY; Win8 Pro on MBP/Parallels; Win7 Ult on MBP/Boot Camp; Win7 Ult/Win8 Pro on HP


    Yep, and who would want to do that anyway.
      My System SpecsSystem Spec

  6. #36


    Sofia
    Posts : 135
    XP, Win7, Win8_Eval


    Security firm Kaspersky claims that Java was involved in 50 percent of all PC cyber attacks in 2012.
    That's to much for a product which isn't an OS.
    If Java VM is started with all access rights the computer seems open to be exploited.

    I wonder how the Java sandbox concept is so vulnerable - on first impression it should be bulletproof.
      My System SpecsSystem Spec

  7. #37


    Orbiting the Moon
    Posts : 2,975
    Windows 10 x64


    Quote Originally Posted by TonyB View Post
    good point i run win 8 so i don't worry to much unless for some reason i go to the desktop lol
    Quote Originally Posted by znod View Post
    Yep, and who would want to do that anyway.
    How?

    You guys must be always in Command Prompt / Terminal or Power Shell or you have ARM -Surface or Phones.... but on desktops we always have to go to the desktop even if it means only peaking to it.

    It's inevitable.
      My System SpecsSystem Spec

  8. #38


    Posts : 376
    W8.1, W7


    Quote Originally Posted by znod View Post
    Yep, and who would want to do that anyway.
    lol ...and Microsoft's fantasy coming true (the whole world using the Store app only).

    Whatever the current Java security situation may be, am using one browser without (for general browsing) & one with (used exclusively for the 3 or 4 sites using Java for logon\id that I need to visit).
      My System SpecsSystem Spec

  9. #39


    Orbiting the Moon
    Posts : 2,975
    Windows 10 x64


    Quote Originally Posted by 4wd View Post
    Quote Originally Posted by znod View Post
    Yep, and who would want to do that anyway.
    lol ...and Microsoft's fantasy coming true (the whole world using the Store app only).
    Yeah! Well said.
      My System SpecsSystem Spec

  10. #40


    January 13, Krebs on Security – (International) Oracle ships critical security update for Java. Oracle released an update for Java to fix the recent critical vulnerability that allowed malware to exploit computers running the program. The update also increases the default security settings for running Java applications from ‘medium’ to ‘high.’ Source: Oracle Ships Critical Security Update for Java — Krebs on Security
      My System SpecsSystem Spec

Page 4 of 6 FirstFirst ... 23456 LastLast
Critical Java zero-day bug is being “massively exploited"
Related Threads
Hi all, So I'm kind of stuck.. I currently have the problem where I am in an endless cycle of "loading files" -> "Windows Boot Manager" (see: How To Boot Into Safe Mode On Windows 8 (The Easy Way)). I have tried to load all of the options -- and none successfully load. I also end up at...
Hi there works fine on W7 but on W8 RP can't get the BBC stuff I want (crazy since it's actually on Brussels Cable TV anyway although not in the form I want to watch it). The open proxy is fine -- bypasses all the IP control stuff. Sky GO works through the same proxy so I'm surprised BBC...
So got windows 8 Dev installed so far so good, I thought I would like the left screen bump to go to last app or program used feature till I installed some games and tried to play them suddenly my left side of my screen is no good if needing to scroll to the side say in a game like Starcraft II,...
Hi guys. I've recently needed to disable Windows 8 Start Menu due to the reason for laziness and that I wouldn't go unpinning each program one by one, after I installed the Office suite and K-Lite Codec Pack, the start menu was flooded by all the programs! Any ideas? Thanks
Eight Forums Android App Eight Forums IOS App Follow us on Facebook