Tuesday, December 09, 2008

Sun updates JAVA.

There is one background application that is available on every PC and runs with all the different types of browsers and a lot of games, that application is JAVA.  The United States Computer Emergency Readiness Team (US-CERT) just sent out an alert about JAVA.


JAVA is a product of Sun Microsystems and is freely distributed to everyone that has a computer or browser and flaws have been identified.  The worst case scenario is that a baddie could execute arbitrary code remotely.


Sun has released 13 notices that reflect their commitment to correct issues surrounding the vulnerabilities and has provided updates for the most commonly used versions of the Sun Java Runtime Environment. (JRE)


Where possible, let your computer select, upload and update your JAVA.  You can find out the version of JAVA that you have installed by viewing the list of software packages from the control panel / add remove software.


If you have identified the version of JAVA that you have you can visit www.java.com and download the update for that version.  One more item that Sun talks about is the vulnerabilities still available for earlier versions of JAVA.  The earlier versions can be removed via the control panel / add remove programs.


If you want to disable JAVA in your browser, there are instructions available from the US-CERT web site navigate to http://www.us-cert.gov/cas/alerts/SA08-340A.html and scroll down to the Disable statement, click on the link and follow the instructions for the type of browser that you have.

As always, safe surfing,

Darrell Mishler

0 comments: