#Do i need java for mozilla firefox for mac#
#Do i need java for mozilla firefox update#
#Do i need java for mozilla firefox windows 7#
#Do i need java for mozilla firefox windows#

cygdrive/c/Program Files/Java/jre1.6.0_18/bin/npdeploytk.dll cygdrive/c/Program Files/Java/jre1.6.0_18/bin/new_plugin/npdeploytk.dll cygdrive/c/Program Files/Java/jre1.6.0_13/bin/npdeploytk.dll cygdrive/c/Program Files/Java/jre1.6.0_13/bin/new_plugin/npdeploytk.dll cygdrive/c/Program Files/Java/jdk1.6.0_17/jre/bin/npdeploytk.dll cygdrive/c/Program Files/Java/jdk1.6.0_14/jre/bin/npdeploytk.dll Locate: warning: database `/var/locatedb' is more than 8 days old (actual age is 10.5 days) Since I have Cygwin I will use it's 'locate' command to find the files: Your comment and a few others prompted me to check my own situation: > directory and replace it with the npdeployJava1.dll version from the bin > this situation, delete the vulnerable npdeploytk.dll from the new_plugin > such as Mozilla Firefox or Google Chrome, may still be vulnerable. > than the 1.6.0_20 version of the plugin.

#Do i need java for mozilla firefox update#

> This note seems to say a problem is caused by the Java update process, rather > anyhow: Oracle says it's fixed, US-Cert says it's fixed, and the report. > That said, I don't see any evidence that the current version should be blocked > Java 6U20 installed Java Deployment Toolkit 6.0.200.2, which is newer than Please note that the Java Development Toolkit can be installed in multiple browsers, therefore workarounds need to be applied to all browsers with the Java Development Toolkit. To correct this situation, delete the vulnerable npdeploytk.dll from the new_plugin directory and replace it with the npdeployJava1.dll version from the bin directory. If the new_plugin directory contains npdeploytk.dll version 6.0.190.4 or earlier, then browsers that use plug-ins, such as Mozilla Firefox or Google Chrome, may still be vulnerable. In some cases, the plugin that resides in the in ew_plugin directory may not be updated to the fixed 6.0.200.2 version of npdeployJava1.dll. Note: The installer for Java 1.6.0_20 may not correctly update all instances of the Java Deployment Toolkit plugin. I don't see any evidence that the 1.6.0_20 version is problematic. This note seems to say a problem is caused by the Java update process, rather than the 1.6.0_20 version of the plugin. I see no need to disable Java Deployment Toolkit 6.0.200.2, manually or otherwise. That said, I don't see any evidence that the current version should be blocked anyhow: Oracle says it's fixed, US-Cert says it's fixed, and the report in may be just be a warning about the incomplete Java update process, not the updated plugin. Java 6U20 installed Java Deployment Toolkit 6.0.200.2, which is newer than 6.0.200.0.

#Do i need java for mozilla firefox for mac#

If so that's probably cross-platform (except for mac which doesn't have the deployment kit). Note that comments in the PoC also claim the deployment kit can be used to downgrade users (silently!) to a vulnerable version of the JVM. If this can be confirmed for WinXP this needs to be blocked ASAP as the exploit is fully developed and will easily be copied.

#Do i need java for mozilla firefox windows#

The advisory itself says Windows XP so this needs to be tested there (qawanted).

#Do i need java for mozilla firefox windows 7#

I tried the PoC on Windows 7 and it didn't seem to do anything, but maybe UAC defeated it. It's not clear whether it affects Linux (Tavis Ormandy, the reporter, didn't think so but others have said yes). I suggest softblocking (severity=1) so those who need it can re-enable it (Firefox 3.5 and later, FF3.0 is EOL). This is not java itself, it's hard to say how much legitimate use it has. New exploit released for all versions of the Java Deployment Toolkit.