|
Posted by eli on June 12, 2006, 12:01 am
If you were Registered and logged in, you could reply and use other advanced thread options Shenan wrote:
"If you are using any version of Sun Java that is prior to JRE Version 5.0,
> then you are strongly urged to remove any/all versions that are prior to
> JRE/JSE
> Version 5.0."
Thanks for your response, Shenan, but the JRE Version I'm using is:
JRE version 1.5.0_05 Java HotSpot(TM) Client VM
It isn't the latest version available; I believe that would be Update 7
rather than Update 5 which is what I now have installed But I dont think its
earlier than the 5.0 youre referring to. I had the Update 6 to JRE 1.5
installed a few months ago, but it kept crashing my IE so I went back to the
5.0 Update, as advised by one of these newsgroups. This was a few months
back...
Not sure if this is the cause of the problem, since its not as early as the
version you are warning me about here.
-Eli
******************************************
> eli wrote:
>> Twice in the past two days, I have been notified by my Zone Allarm
>> Security Suite Version 6.1 that the: "MS05-002!exploit" was
>> detected in the IE TIF and repaired. .
>>
>> Prior to the appearance of this On-Access Zone Alarm alert, the Sun
>> Java Console in IE 6
>> popped open for no particular reason. [I have JRE 1.5.0.05
>> installed].
>> When I clicked on the link given by Zone Alarm, I was led to this
>> Microsoft site:
>>
>>
>> http://www.microsoft.com/technet/security/bulletin/ms05-002.mspx
>>
>> At that site, I'm told that:
>>
>> "Non-Affected Software:
>>
>> Microsoft Windows XP Service Pack 2"
>>
>> Yet I have windows XP SP2 as my OS.
>>
>>
>> Why am I getting these repeated virus/exploits on this supposedly
>> non-affected system?
>>
>> How might I prevent them in the future?
>>
>> Thanks in advance:
>>
>> -Eli
>>
>> *************************************
>>
>> Windows XP Professional Edition SP2 with critical Windows
>> Updates installed
>>
>> AntiVirus: Zone Alarm Security Suite : 6.1.744.001
>> Operating System: Windows XP Professional Edition SP2 with critical
>> updates installed
>
> I will quote David Lipman.. And then let someone else dive deeper into
> your troubles..
>
> -----
> If you are using any version of Sun Java that is prior to JRE Version 5.0,
> then you are strongly urged to remove any/all versions that are prior to
> JRE/JSE
> Version 5.0. There are vulnerabilities in them and they are actively
> being exploited.
> This is most likely why you got infected with malware.
>
> Therefore, it is highly suggested that if there are any prior versions of
> Sun Java
> to Version 5 on the PC that they be removed and Sun Java JRE/JSE Version
> 5.0 Update 7
> be installed ASAP.
>
> Simple check, look under...
> C:\Program Files\Java
>
> The only folder under that folder should be the latest version...
>
> C:\Program Files\Java\jre1.5.0_07
>
>
> http://www.java.com/en/download/manual.jsp
> -----
>
> In other words - I suggest that you update your Java stuff to the latest
> release ASAP..
>
> --
> Shenan Stanley
> MS-MVP
> --
> How To Ask Questions The Smart Way
> http://www.catb.org/~esr/faqs/smart-questions.html
>
|