Jump to content

PSI tells me that IE6 and IE7 are insecure


Recommended Posts

:blink: Just downloaded new version of PSI Secunia and it has given me a headache or two. Mainly I cant get into the forums to post as it wont allow me to use my user name and tried to change it - it accepted a new user name but no password on profile but is on log in :rolleyes: and still cant get in.

All suggestions that are legal acceptable :D

I have fixed the 9 programs that were problems and 2 of those I have had to put ignore on as cant fix them myself.

1 Java Web 5 - directs me to Java Website as this is end of life program but cant find what to do - too much choice and none identified as web 5 replacement - do find Java bit like that.

2. MSXML6.x version 6.10.1200.0 says it has to be patch but cant find one anywhere on MS - has a patch for 1202 but not mine - baffled as find MS bit mystifying for my senior moments too :censored:

Finally says both the Internet Explorers 6 and 7 - which I haven't got anyway only got 6 but did once download it and it made my computer sick as a dog so rolled back to 6 - anyway says both are insecure and no solution to fix them!!!!!

Forgot to ask if I should try to download IE8 and if it is okay as 7 wasn't with HP or Dell computers. Both went choppo with it on board.

Or just stick to IE6 which I dont use much unless it gets called up by a link as have IE options on my Firefox for those mainly UK newspapers who wont use FF.

Link to comment
Share on other sites

1: is it Java Web Start? If so, can you find it in Add/Remove Programs? Then just uninstall it. If you have JRE 6 Update 14 installed, then you don't need that old Java Web Start.

2: MSXML6 can be updated via Microsoft Update. (The latest MSXML6 version is 6.20.1099.0; see also http://www.microsoft.com/technet/security/...n/ms08-069.mspx)

3: Internet Explorer should also find updates at the Microsoft Update site. If you don't use it, don't worry about it.

Link to comment
Share on other sites

1: is it Java Web Start? If so, can you find it in Add/Remove Programs? Then just uninstall it. If you have JRE 6 Update 14 installed, then you don't need that old Java Web Start.

2: MSXML6 can be updated via Microsoft Update. (The latest MSXML6 version is 6.20.1099.0; see also http://www.microsoft.com/technet/security/...n/ms08-069.mspx)

3: Internet Explorer should also find updates at the Microsoft Update site. If you don't use it, don't worry about it.

pat - I do have the latest Java update 14 installed yesterday when mucking around found it and installed it.

I have also deleted the old Web start now - thanks for that.

Also today it is now saying that Sun Java 1.5.X/5.X is out of date but I cant find that anywhere on the computer - looked in the program file Secunia directed me too cant find it - so have put it on ignore rule.

Now all I have to do is update with M$ as above and cross everything as I tried to find it but failed :( If this works will be home and hosed so to speak. Good little program this Secunia - got introduced to it on this forum.

Best one for people like me always tell others. Forum that is!

BTW you user name in upside down - on purpose?

:ph34r:

Link to comment
Share on other sites

Regarding Java RTE 1.5.x - there may be some remains that were incompletely uninstalled at some time. Try JavaRa to find and remove these remains.

Regarding my upside-down name - I tried some Yoga sometime last week, then forgot to turn back downside-up B)

:pardon:

Trying javara :drinks:

Link to comment
Share on other sites

OK tried Javara - it reported removing heaps of stuff.

Unfortunately not the one that Secunia is on about.

Good little tool that as java software seems to be a bit of a pest when it comes to removing very invasive :( - so will put the one that is nagging onto ignore and hope for the best.

:D

Link to comment
Share on other sites

I think we should try to remove that remaining JRE 1.5 item; does Secunia tell you what it found?

When you open Windows Explorer, then go to C:\Program Files\Java - do you see anything else than what I have here

post-1524-1246950345_thumb.png

This has been a nuisance for a very long time, but it is over now. From JRE 6 Update 10, there is no longer a need to uninstall the old version - it will overwrite the previous version. (But not a version from before JRE6u10.)

That is why I think you should get rid of that JRE 1.5 remains - once and for all.

Link to comment
Share on other sites

Only have this inside my java file - no sign of JRE 1.5

Cant seem to upload a print screen!

But it has only JE6 in side it

Bin, Read me, copyright, welcome, lib, third part license and a firefox icon which is marked welcome

Link to comment
Share on other sites

Can you run Secunia again, and see if it points you to where that "outdated" Java item is? I remember that Java sometimes copies certain items to the Windows system folders.

It points to C:\i386\java.exe

Had a good look in this file but cant find the above.

Link to comment
Share on other sites

Ok followed that alright and found the following which were not there before.

1. Java ™ 2 Platform standard edition Binary Version 5.0.60.5

created 11.3.08 48kb

2. J2SE Runtime environments 5.0 update 6 Type Windows installer package.

Nothing else. Not a lot of J actually.

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

 Share

×
×
  • Create New...

Important Information

We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue. Privacy Policy