Java Run-Time vulnerabilities

[jdh]

Sun JRE Vulnerabilities

http://isc.sans.org/diary.html?storyid=2928&rss

You can update JRE from the Java control in the Windows Control Panel.

Do not attempt to install or update to any version of JRE 6 in Windows 98 or ME!

There is a patched version of JRE 5 for Windows 98.

DH

P.S. Sun recommends uninstalling old versions of JRE before installing new. e.g. if you have 1.5 (5) and want to update to 1.6 (6), then uninstall 1.5 first.

Installing 1.6 (6) will NOT remove 1.5 (5). Leaving unpatched old version therefore can leave one exposed to currently known and exploited vulnerabilities. i.e. according to the intended design of Java, a Java applet (e.g. an exploit) is permitted to request an earlier (vulnerable) version of the JRE.