Oracle says your old Java executable might install malware

java installer binary planting exploit oracle sign headquarters hq header
Ken Wolter/123rf
Delete your old Java installers: they could be compromised.

If your downloads folder is a mess of installers and documents from ages past, you might occasionally check it before downloading a piece of software like Java. Oracle put out a statement Friday saying that those old installers might be compromised by files you’ve downloaded since, and that the only safe thing to do is delete the installer and download a fresh copy of Java.

The old installers are vulnerable to an exploit called binary planting, PC World is reporting. Older Java installers check the current directory and load up a number of DLL files, meaning any user who is tricked into downloading a malicious DLL could wind up giving attackers near total access to their computer.

“If successfully exploited, it results in a complete compromise of the unsuspecting user’s system,” wrote Eric P. Maurice, Oracle’s software security assurance director, who further explained that actually taking advantage of the security hole would be difficult.

“To be successfully exploited, this vulnerability requires that an unsuspecting user be tricked into visiting a malicious website, and downloading files to the user’s system before installing Java 6, 7, or 8,” he said. It’s an unlikely sequence, but not impossible — especially considering the way files tend to cluster in the downloads file and overwhelm users.

Oracle has issued a patched installer that addresses the issue, but the firm can’t retroactively patch installers already on your computer. Oracle outlined the specific versions that were vulnerable: “Java SE users who have downloaded any old version of Java SE prior to 6u113, 7u97, or 8u73 for later installation should discard these old downloads and replace them with 6u113, 7u97, or 8u73 or later,” the notice from Oracle states.

But if you really want to protect yourself from these exploits, keep your downloads folder tidy. If you don’t recognize a file there, delete it, otherwise store it somewhere else. If that’s too much effort, consider dragging executables to their own folder before running them.

Product Review

The ZenFone 6 has a flippable camera and is unlike any other flagship phone

Asus is embracing the 2019 trend of not following any trends at all and instead going in its own direction. The ZenFone 6 has a motorized flip-around camera, a 5,000mAh battery, and an almost stock version of Android installed.
Mobile

Your smartphone knows all your secrets. Put it on lockdown with these tips

Having your smartphone hacked can feel like someone robbed your house. It's a massive invasion of privacy and a violation of your personal space. We've put together a checklist of precautions that will help you avoid this terrible fate.
Mobile

Need a do-over? Here's how to factory reset an iPhone, from XS on down

Resetting an iPhone can alleviate all sorts of software woes, and wipe away personal data should you sell your device or give it to someone else. Here's how to factory reset an iPhone from within iOS or iTunes.
Home Theater

How to update the Kodi media center on all of your devices

Keeping Kodi updated with the latest version is important for accessing new features and improved security. But it's not always an automatic process. We'll walk you through the right way to update Kodi on all of your devices.
Computing

Make your games sound amazing with one of these sets of awesome gaming speakers

If you want to take your gaming sound to the next level, you need to find the best gaming speakers for your set up. Whether you're on a tight budget, want some fancy RGB lighting, or just need the best speaker set money can buy, these great…
Computing

I bought a four-year-old MacBook Pro instead of a new one. Here’s why

The new MacBook Pros have a ton of advantages over the older options, but when it came to buying a replacement machine for myself, I found myself returning to 2015 rather than picking up Apple's latest and greatest.
Computing

Why OLED gaming monitors may be further from reality than we thought

Earlier this year, Dell showed us the promise of an exciting new future for gaming monitors with the reveal of the Alienware 55-inch OLED gaming display. We loved it. But according to new reports, it may never see the light of day.
Deals

Walmart cuts $300 off Dell Inspiron 5680 gaming desktop for gamers on a budget

If you're stashing money but want an upgradeable rig that will go a long way, then this solid deal on the Dell Inspiron Gaming Desktop 5680 with Intel Core i5-8400 is for you. It is now available for only $700 at Walmart.
Computing

Genius uses 19th-century tech to prove Google copied its song lyrics

Song lyrics website Genius says that it proved that Google has been copying its lyrics and posting them on its own search results page. And Genius says it was able to do it by using a decidedly old-school form communications tech.
Deals

Check out Walmart’s steep discounts on Dell and LG gaming monitors

If you're a gamer looking for high-quality computer displays, you definitely need to take advantage of this deals from Dell and LG. These gaming monitors will fit your budget and your GPU.
Computing

A Surface Pen with an OLED touchscreen would actually be awesome

Microsoft patented another Surface Pen hardware feature, this time registering a patent for an OLED touch bar strip on the Surface accessory. This could enable dynamic setting change functionality in the next generation of Surface Pens.
Deals

Save $220 on a 2019 MacBook Pro with the latest Intel processor on Amazon

Interested customers can now grab a 2019 MacBook Pro with the latest Intel Core processor at a $220 discount on Amazon. This discounted MacBook Pro also features 512GB of SSD storage, a 15-inch Retina display, and a Touch bar.
Deals

You can grab the 2017 12-inch MacBook for $300 off right now, but act quickly

Despite the growing market for Windows ultrabooks, a MacBook is still what you need if you love the sleek interface of MacOS. The 2017 MacBook is on sale right now, too, but stock is limited, so act quickly before it's gone.
Computing

Apple's Mac Mini and MacBook Air are both great, but which is better?

Torn between the portability of a laptop and the power of a desktop? You aren't the only one. Apple offers great examples of both, with great unique and shared features for each. If we pit the Mac Mini vs. MacBook Air, which do you think…