Is Java Runtime Environment a risk?

[Mag]

I want to run a program on my PC which requires the installation of Java
Runtime Environment (the mind-mapping software Freemind). Does having JRE on
my PC create any security risk. It may seem a naive question, but I am aware
that programs (eg Internet Explorer, MSN messenger) can be exploited by
hackers.

 

[Stephen Wolstenholme]

I want to run a program on my PC which requires the installation of Java
Runtime Environment (the mind-mapping software Freemind). Does having JRE on
my PC create any security risk. It may seem a naive question, but I am aware
that programs (eg Internet Explorer, MSN messenger) can be exploited by
hackers.

One of my program helpers had a look at Freemind for a few days. He
already had the relevant JRE installed. He also installed it of one of
my PCs. No problems at all. If you have applied all the security
updates you won't have a problem with JRE.

Steve

 

[Mag]

One of my program helpers had a look at Freemind for a few days. He

already had the relevant JRE installed. He also installed it of one of
my PCs. No problems at all. If you have applied all the security
updates you won't have a problem with JRE.

Many thanks.

 

[Mag]

JRE can be used by applications to do many things - it gets patched a

lot, but most of us have it and work with the issues it presents.

Many thanks.

 

[FredW]

I want to run a program on my PC which requires the installation of Java
Runtime Environment (the mind-mapping software Freemind). Does having JRE on
my PC create any security risk. It may seem a naive question, but I am aware
that programs (eg Internet Explorer, MSN messenger) can be exploited by
hackers.

Always use the latest version and do not forget to uninstall (All)
previous versions before you install the latest version.
http://java.sun.com/javase/downloads/index.jsp

And scroll down to Java Runtime Environment (JRE) 6 Update 6.
I prefer to download the offline installation and install after
downloading (jre-6u6-windows-i586-p.exe).

 

[me]

Not a risk unless you have javascript enabled in your
browser(s). I use Firefox because with the NoScript add-on
I can selectively (and permanently or temporarily) activate
javascript by website, and even for embedded objects such
as videos.

Heed FredW's advice!

HTH

Er, do you know the difference between Java and JavaScript?

J

 

[Mag]

Not a risk unless you have javascript enabled in your

Er, do you know the difference between Java and JavaScript?

That's the reason I asked. I am aware that there is an issue with Javascript
(which I why I also use Firefox/Noscript) but I was not sure whether Java
Runtime Environment was related in terms of risk (it appears that it is not)
or whether JRE was exploited by hackers (it also appears that it is not).

 

[Mag]

It most certainly is the target of exploits, and some have been very

successful.

Does that mean that a PC which has JRE installed can be exploited in a way
that a PC without JRE cannot?

 

[David H. Lipman]

From: "Mag" <[email protected]>

| I want to run a program on my PC which requires the installation of Java
| Runtime Environment (the mind-mapping software Freemind). Does having JRE on
| my PC create any security risk. It may seem a naive question, but I am aware
| that programs (eg Internet Explorer, MSN messenger) can be exploited by
| hackers.


Relatively no, if you use the latest version, JRE v6 update 5.

If you are using any version of Sun Java that is prior to JRE Version 6.0,
then you are strongly urged to remove any/all versions.
There are numerous vulnerabilities in them and they are actively being exploited.

It is highly suggested that you update to the latest version which is Sun Java JRE/JSE
Version 6.0 update 5 (jre 6u5)

Simple check, look under...
C:\Program Files\Java

The only folder under that folder should be the latest version.

Such as...
C:\Program Files\Java\jre1.6.0_05

http://java.sun.com/javase/downloads/index.jsp
http://www.java.com/en/download/manual.jsp

FYI:
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102557-1
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102622-1
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102648-1
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102729-1
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102732-1
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102760-1

 

[Mag]

David
Many thanks.

 

[jen]

From: "Mag" <[email protected]>
| I want to run a program on my PC which requires the installation of
Java
| Runtime Environment (the mind-mapping software Freemind). Does
having JRE on
| my PC create any security risk. It may seem a naive question, but I
am aware
| that programs (eg Internet Explorer, MSN messenger) can be exploited
by
| hackers.
Relatively no, if you use the latest version, JRE v6 update 5.
If you are using any version of Sun Java that is prior to JRE Version
6.0,
then you are strongly urged to remove any/all versions.
There are numerous vulnerabilities in them and they are actively being
exploited.
It is highly suggested that you update to the latest version which is
Sun Java JRE/JSE
Version 6.0 update 5 (jre 6u5)

Java Runtime Environment (JRE) 6 Update 6 is now available.
Build number: 1.6.0_06-b02
Download:
http://java.sun.com/javase/downloads/index.jsp
http://java.com/en/download/index.jsp
Release Notes:
http://java.sun.com/javase/6/webnotes/ReleaseNotes.html

 

[David H. Lipman]

From: "jen" <[email protected]>


| Java Runtime Environment (JRE) 6 Update 6 is now available.
| Build number: 1.6.0_06-b02
| Download:
| http://java.sun.com/javase/downloads/index.jsp
| http://java.com/en/download/index.jsp
| Release Notes:
| http://java.sun.com/javase/6/webnotes/ReleaseNotes.html

Thanx Jen.

 

[jen]

From: "jen" <[email protected]>
| Java Runtime Environment (JRE) 6 Update 6 is now available.
| Build number: 1.6.0_06-b02
| Download:
| http://java.sun.com/javase/downloads/index.jsp
| http://java.com/en/download/index.jsp
| Release Notes:
| http://java.sun.com/javase/6/webnotes/ReleaseNotes.html
Thanx Jen.

YW, David

-jen