Have you uninstalled Java yet? Here are 14 new reasons...
Summary: All of these vulnerabilities may be remotely exploitable without authentication, i.e., may be exploited over a network without the need for a username and password.
If you still haven't uninstalled Java to reduce the attack surface on your computer, here are 14 new reasons from Oracle Sun.
A new version of the Java SE has been released to patch 14 documented security vulnerabilities, some serious enough to let hackers remotely install malware on vulnerable machines.
"All of these vulnerabilities may be remotely exploitable without authentication, i.e., may be exploited over a network without the need for a username and password," Oracle warned in an advisory.
[ SEE: Microsoft reports 'unprecedented wave' of Java malware exploits ]
"Due to the threat posed by a successful attack, Oracle strongly recommends that customers apply CPU fixes as soon as possible."Security vendors are reporting an "unprecedented wave" of Java malware exploits. Exploits for known Java vulnerabilities have been fitted into the most widely distributed exploit kits, allowing Java to surpass Adobe Flash Player and Adobe Reader as the most commonly exploited Windows third-party desktop software.
[ SEE: Ten little things to secure your online presence ]
As I explained here, it's hardly likely that you will miss Java on your machine. If you do run into the random banking app that requires Java, you can always reinstall it but I haven't had Java on my machine for more than a year and I never miss it.Here are the official uninstallation instructions from Oracle Sun.
Kick off your day with ZDNet's daily email newsletter. It's the freshest tech news and opinion, served hot. Get it.
Talkback
RE: Have you uninstalled Java yet? Here are 14 new reasons...
Sorry, but no
This is like saying to kill the patient and preserve the liver in a jar of formaldehyde to preserve it before cancer sets in.
Perhaps you forget that the biggest Linux distro - Android - is attacked all the time from Google's own marketplace, not to mention that Koobface Linux variants are already rampant on Facebook, and those are ALL programmed in Java.
RE: Sorry, but no
RE: Have you uninstalled Java yet? Here are 14 new reasons...
RE: Have you uninstalled Java yet? Here are 14 new reasons...
1) Because the Java implementation on Windows is particularly weak
2) Because Windows is the biggest and therefore the most attacked platform on the planet
The vulns in Java are Java vulns, not OS/Platform vulns.
RE: Have you uninstalled Java yet? Here are 14 new reasons...
"The vulns in Java are Java vulns, not OS/Platform vulns.
Like I said, and I quote, "most Java exploits target Windows". Java exploits imply Java vulnerabilities and most Java exploits target the Windows platform. In reality, though, Java is merely used by the miscreants to get their foot in the door. Once inside, Windows binaries are used to finish the job.
RE: Have you uninstalled Java yet? Here are 14 new reasons...
RE: Have you uninstalled Java yet? Here are 14 new reasons...
RE: Have you uninstalled Java yet? Here are 14 new reasons...
agree. on linux you are safe from java exploits!
RE: Have you uninstalled Java yet? Here are 14 new reasons...
Using a non Oracle JVM and you're much safer from exploits
RE: Have you uninstalled Java yet? Here are 14 new reasons...
RE: Have you uninstalled Java yet? Here are 14 new reasons...
Nothing could be further from the truth.
RE: Have you uninstalled Java yet? Here are 14 new reasons...
RE: Have you uninstalled Java yet? Here are 14 new reasons...
RE: Have you uninstalled Java yet? Here are 14 new reasons...
Apparently a lot of people take Java Developers seriously
Nice nitpick about terminology
But his point is sound: since he's programming in Java, he can't just remove it from his PC, or he wouldn't be able to test it.
Kind of like if you were, say, an iOS app developer, but didn't own an iPod/iPad to test the app on. It would just be an exercise in futility.
Fine, just uninstall the browser plugin
I think these exploits are run in the browser, so if your browser cannot execute Java then you're probably OK.
RE: Have you uninstalled Java yet? Here are 14 new reasons...
Ignorant people are too dumb to understand technology
Maybe we should uninstall Windows, Linux, iOS, Android and any software in the world .... because they have bugs and vulnerabilities.