Mozilla requiring click to run jre 6 or  7 currently

https://blog.mozilla.org/security/2013/01/11/protecting-users-against-java-vulnerability/
"Mozilla is aware of a security vulnerability in the current version of Java (Java 7 Update 10) that is being actively exploited and affects any browser using the Java plugin."
"There is no patch currently available for this issue from Oracle. To protect Firefox users we have enabled Click To Play for recent versions of Java on all platforms (Java 7u9, 7u10, 6u37, 6u38). Firefox users with older versions of Java are already protected by existing plugin blocking or Click To Play defenses."
Well I don't see why they are requiring click to play with the jre 6 but they are. Thing is there are a lot of ways to
call IE such as via MS Office as discussed here:
http://www.kb.cert.org/vuls/id/625617
So next month will be the last month that jre 6 users will get free updates and then we have to get jre updates
from oracle support, right? Unfortunately the jre 7 is just not maturing properly. We need the jre 6 to continue!

Note that oracle has released the jre 7u11 to patch the version 7 problems:
http://www.oracle.com/technetwork/java/javase/downloads/index.html
BTW I don't think the vendor took very long to fix this particular bug, it's just that there is a succession of them that has unfortunately greatly weakened the credibility of the 7 lineage. If only we could get some control over some aspects of this! Running forms as applets in browsers has too many points of failure. The browser can at any time suddenly decide to block or partly block launching applets, like mozilla click blocking 6u38 just because maybe the version 7 bug was more widespread as they said here:
https://blog.mozilla.org/security/2013/01/11/protecting-users-against-java-vulnerability/
"Why are you blocking the jre 6u38? I thought only 7 was vulnerable to these problems."
"We are being extra cautious to ensure all users are protected in the event the scope of the vulnerability is larger than the initial reports have indicated. We are erring on the side of caution."
Most browsers now autoupdate on their own so there is no telling what they may decide to do at any time. Mozilla has consistently for months refused to recognize the jre 6 lineage as valid and tries to get the users to upgrade to 7 which doesn't work with our forms due to the vendor having changed the vendor name in the jre.
As you can see here Mozilla will not recognize 6u38 as a valid version of java and it has not even hit the end of life yet:
https://www.mozilla.org/en-US/plugincheck/
After february 2013 I fear firefox will totally block the jre 6 even if we keep getting up updated via oracle support. I don't know any browser that will accept more than one jre plugin at a time so it's not possible to run jre 6 requiring applets and jre 7 requiring applets. One would wish the vendor was working with the browser providers and solving some of these problems!
Edited by: lake on Jan 14, 2013 8:51 AM

Similar Messages

  • Trying to download a FIrefox and when I click on run it asks what program I want to use to open with so I cant finish install

    I've been using FF for years and lately have been having issues with internet access. Worked through the troubleshooting suggestions and got it working, but last night FF couldn't connect to internet after something updated and my Norton anti virus was gone too and I couldn't fix it. The last resort was to delete my ff and download new, so I did. When I clicked on run I got a pop up asking what program I wanted to open it with and of course nothing worked. By then it was 1:30 am so I quit. Today I'm having the same issue and I'm at the end of my rope trying to figure out what to do. I'm so disgusted and can't stand it.

    # Go to the following page and scroll down to the language you're interested in.
    #* http://www.mozilla.org/firefox/all/
    # Next to that language, right-click the arrow icon for Windows, choose Save Target As and save the file somewhere handy, like the desktop.
    # Run the installer you downloaded.

  • How to make sure Office 365 (2013) Pro Plus click to run updates after it is installed on a computer

    We are getting ready to move from Office 2010 MSI to Office 365 (2013) click to run ProPlus.  Everything is ready to uninstall and install the new product. 
    My question is if the Updates Enabled="TRUE" is not in the configuration.xml file will machines with the click to run office 365 pull updates from the cloud?  I had been told that the Enabled=TRUE is not needed in the configuration file as
    it is a default setting.  We want our machines to pull down updates from the cloud in place of providing a manual update location on our network.
    Our configuration.xml file looks like this:
    <Configuration>
        <Add SourcePath="\\Server\Share" OfficeClientEdition="32" ForceDowngrade="TRUE" >
        <Product ID="O365ProPlusRetail">
          <Language ID="en-us" />
        </Product>
        </Add>
      <Display Level="NONE" AcceptEULA="TRUE" />
      <Logging Name="OfficeSetup.txt" Path="C:\temp" />
      <Property Name="AUTOACTIVATE" Value="0" FORCEAPPSHUTDOWN="TRUE" />
    </Configuration>
    Thanks,
    Brit

    I am trying more to control the process via GPO with a start-up script and have created a batch file which executes the below command. It works and installs which ever version you define in your .xml file, the only issue i am facing is that re-runs the setup
    at each reboot which isn't ideal. I am currently working on below script which could check the version of the office upon boot-up and only run if the specific version is not available. I have pasted the script right at the bottom of the page and if anyone
    could shed some light in making it to read the version value 
    "\\server\c2r\Office365 update\setup.exe" /configure "\\server\c2r\Office365 update\Customconfign.xml" (this is the batch-file used as a startup script)
    PLEASE NOTE: There are three <Add SourcePath in my Cutomconfig.xml and not all three are required I use the one i need by taking the <!-- and --> from the beginning and the end  of each line  
    <Configuration>
    <!-- <Add SourcePath="\\Server\Share\" OfficeClientEdition="32" > --> Can only be used to download latest version of ofice365 (specify sourcepath)
     <Add OfficeClientEdition="32" Version="15.0.4675.1002" > Use to download a office version direct from microsoft servers
    <!-- <Add SourcePath="\\server\c2r\Office365update" OfficeClientEdition="32" > --> to deploy software from internal network resource
        <Product ID="O365ProPlusRetail">
          <Language ID="en-us" />
        </Product>
      </Add>
    <Updates Enabled="TRUE" UpdatePath="\\server\c2r\Office365 update" />
      <Display Level="FALSE" AcceptEULA="TRUE" />
      <Logging Path="\\server\c2r\Office365 update\Install Logs" />
    <Property Name="FORCEAPPSHUTDOWN" Value="TRUE"/>  force closes any running office application
      <!--  <Property Name="AUTOACTIVATE" Value="1" />  -->
    </Configuration>
    this is what i am working on and wondered if any one would be able to rectify an issue with it as it doesn't seems to work
    setlocal
    REM *********************************************************************
    REM Environment customization begins here. Modify variables below.
    REM *********************************************************************
    REM Set DeployServer to a network-accessible location containing the Office source files.
    set DeployServer=\\server\c2r\Office365 update\
    REM Set ConfigFile to the configuration file to be used for deployment (required)
    set ConfigFile=\\server\c2r\Office365 update\Customconfignonskype.xml
    REM Set LogLocation to a central directory to collect script log files (install log files are set in XML file).
    set LogLocation=%AppData%\Local\Temp
    REM *********************************************************************
    REM Deployment code begins here. Do not modify anything below this line (check quotes are quotes though).
    REM *********************************************************************
    REM Operating system is X64. Check for Office365 version in emulated propertyBag registry key
    :ARP64
    Reg query HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\15.0\ClickToRun\propertyBag /v Version=%15.0.4711.1002%
    if NOT %errorlevel%==1 (goto DeployOffice) (goto End)
    REM If 1 returned, the product was not found. Run setup here.
    :DeployOffice
    echo %date% %time% Setup started. >> %LogLocation%\%computername%.txt
    start /wait %DeployServer%\setup.exe /configure %ConfigFile%
    echo %date% %time% Setup ended with error code %errorlevel%. >> %LogLocation%\%computername%.txt
    REM If 0 or other was returned, the product was found or another error occurred. Do nothing.
    :End
    Endlocal

  • Not able to find the source requirement of MRP RUN-(for planned order)

    Dear All,
    Actullay In MRP run system is generating 10000 qty in planned order but in MD61 there is only 3000 qty and no sales order requirement also exists for the same. And when i rerun the MRP by choosing option 3 in planning mode, then also it is generating the planned order for 10000 qty only but Iam not able find out the base requirement for that. Kindly suggest me the solutions.
    Regards,
    Krishna

    Hi
    In MD04 at bottom, you can see a button for pegged requirement, click there you will come to know the list of requirement. It is not only because of Planned independent requirement you maintain in Md61, it could be due to lot size in Material master, or if you have fixed vendor in sourcelist then it could be because of Minimum order quantity with the vendor, or it could be safty stock or reorder point maintained in Material master
    Regards
    Antony

  • How to permanently disable click-to-run "feature" on all plug-ins

    How can I permanently disable the click-to-run "feature" for all plug-ins *including* ones that are unsafe, exploitable, etc.?
    I know that this is "unsafe", "inadvisable", a "security risk", etc. however this question has been asked many times and I have not yet found an answer. My reason for wanting to do so is not important and there is no point in questioning it; this is a simple question with what should be a simple answer, and does not require the bickering and arguing that always ensues when someone asks this extraordinarily basic question.
    I want to permanently disable any and all forms of click-to-run for any and all plugins, so that all plugins run without having to be clicked first and show absolutely no warnings whatsoever of any kind. If I don't want to run a plug-in I will disable it.
    How can I do this very simply thing?

    Some outdated plugins (e.g. Flash plugins) are blocked via click-to-play and can be enabled when required.<br />
    It is best to update such a plugin to the latest version to be protected against security vulnerabilities.
    You would have to disable blocklisting to circumvent this and that is not recommended.

  • Office 2013 Click-to-Run

    All,
    We are having issues with some customers that have the Office 2013 Home and Business Click-to-Run version of office installed.  Users are randomly having their installation corrupted. This interestingly enough didn't start happening until SP1 was released
    for Office 2013. I am aware that click-to-run installations of office don't update via Windows Updates direct but through another method. Is anyone else seeing this happen?  Any thoughts would be appreciated.
    Some of the symptoms are as follows:
    1.  None of the Office apps open.  You double-click but nothing happens nor are there any processes running.
    2.  If you open an office document direct you might get a message something to the effect of There was a Problem sending the command to the program.  None of the documented fixes appear to correct the issue for this type of error.
    3.  A system restore point fixes it but it breaks again within a day or two.
    4.  The only fix at this point is to uninstall (Using FixIt KB2739501) and reinstall which of course pulls down the latest build with SP1.

    Hi,
    You can probably fix the issue by updating the video driver to the latest.
    Please refer to this thread below, many users had the same issue and solved it by updating the video driver:
    http://social.technet.microsoft.com/Forums/en-US/34401d63-6c3b-47e6-ab20-9ed9b70d890b/outlook-2013-sp1-unusable-since-sp1-update-?forum=officesetupdep
    Thanks,
    Melon Chen
    Forum Support
    Come back and mark the replies as answers if they help and unmark them if they provide no help.
    If you have any feedback on our support, please click
    here

  • Office 2013 Home and Business - Click to Run wipes out the Office files from the Programs folder

    We are having an issue with a number of clients running Office 2013 H&B in a domain environment, after a click to run update.
    It appears the update is ran in the background and after a reboot, the program files short of a few .DLL's are completely missing. Office still shows as installed through the control panel.
    We have to use the office removal tool and reinstall program completely.  System restore does not fix the issue.
    These are Dell Latitude and the version of Office shipped with the machines as an OEM version. There was nothing pushed from the Dell update utility for Office.
    They are running Avast AV and it is not affecting all users presently.
    I've been on hold and getting transferred around Microsoft's support lines all day as Microsoft support can't seem to figure out which department should troubleshoot the issue.
    Any assistance would be greatly appreciated.

    I am doing some research. And I  might involve someone who is more familiar with this kind of issue to deal with this problem.
    Cheers,
    Tony Chen
    Forum Support
    Come back and mark the replies as answers if they help and unmark them if they provide no help.
    If you have any feedback on our support, please contact
    [email protected]

  • I can't download firefox. When I click on run, I get a window saying that the author is unknown. When I click on run in the new window, another window says the file is corrupt. What can I do about this?

    I want to have firefox as my default browser. As this is a new laptop, I hasve to download firefox. As per the instructions, I click on "run" to complete the download, but instead of completing the download, a window appears which says that the author is unknown. If I ignore the window and click on run, I get another window which says the file is corrupt and I can't finish the download and have firefox as my browser.
    I have windows 7 and explorer is the default browser and I want to change to firefox, but so far am being prevented from doing so. How can I successfully download firefox?

    It is possible that your anti-virus software is corrupting the downloaded files or otherwise interfering with downloading files by Firefox.
    Try to disable the real-time (live) scanning of files in your anti-virus software temporarily to see if that makes downloading work.
    See also:
    * http://kb.mozillazine.org/Unable_to_save_or_download_files

  • Is autoconfig required to be run for apps password change

    Is autoconfig required to be run for apps password change -- We are only changing APPS and APPLSYS passwords.
    How to Change Applications Passwords using Applications Schema Password Change Utility (FNDCPASS or AFPASSWD) [ID 437260.1] -- does not mention anything about autoconfig.
    Please clarify.
    Thanks

    It's mentioned in the document twice
    1. For APPLSYSPUB/GUEST as you mentioned
    2. Under "Verify the new password" which cover the apps/applsys passwords
    If you search the doc for "AutoConfig" you will find it there.
    Thanks,
    Hussein

  • Open Purchase Orders not considered as requirement for MRP Run

    Hi ,
    We are facing a issue of Open Purchase orders not appeared in Stock requirements list and also it is not considered as requirement for MRP Run against reservation.
    As aresult for a reservation demand of 10 units we are ending with Open POs 10 units and a additional planned order 10 units.
    Material Type : ERSA
    MRP Type : PD (or VB)
    Lot size : EX (  HB if MRP Type is VB)
    Could you please throw some light to correct our settings to MRP to consider Open POs?
    Saravanan

    Can you check to see if there is a re-order point set up for this materia? That could be causing the problem too.

  • Project on demand/click to run not working in Project Online

    Do I need to do anything special to allow the click to run functionality in Project Online to work? Or does it not work for Project Online?
    We have a Project Online trial, but when the users who do not have Project Pro on their desktops, try to select Edit the project in Project Pro, they get an error saying that Project Pro needs to be installed first.
    I would have expected click to run to download it.
    I feel I may be missing something basic here.
    Any advice please?
    Ryan

    Project Online in itself is not sufficient.  You need Project Online with Project Pro for 0365, or another Office 0365 sku that includes Project Pro.
    Assuming you have either of these, then the admin has to assign the Project Pro licence to the user (admin | users and groups)
    Check out the following screen shot
    Ben Howard [MVP] | web |
    blog | book

  • This copy of Microsoft Office 2013 cannot be used on a computer running Terminal Services" error message when you try to open the Click-to-Run version of an Office 2013 program or suite on a terminal server

    Hi All,
    I have Citrix VDI (Virtual Desktop Infrastructure) Implemented
    in my company and installed few Applications on App Server lets say.... MS Office 2013, filzialla, putty, etc...
    I assigned these apps to the users through CITRIX STUDIO, when I try to use these apps. on VDI everything is working fine only when i tried to open Word, Excel or Powerpoing, outlook it throws error as 
    ""This copy of Microsoft Office 2013 cannot be used on a computer running Terminal Services" error message when you try to open the Click-to-Run version of an Office 2013 program or suite on
    a terminal server"" and apps gets closed.
    Please help me on this ASAP.
    Thanks & Regards,
    Sachin Shinde

    Hi,
    As mentioned in ths article below, run for Office 365 products on to a Remote Desktop Session Host server is not supported. You can install Office products for Office 365 to a virtual desktop, but the virtual desktop must be assigned to a single user.
    http://technet.microsoft.com/en-us/library/jj219423(v=office.15).aspx
    Regards,
    Melon Chen
    TechNet Community Support

  • Upgrade Click to Run Version Older than 15.0.4569.1507

    We currently have an Office 365 installation older than 15.0.4569.1507 on all our SOEs
    These SOEs are managed by Windows Intune & we want to manage the Office updates ourselves.
    We've created an Intune package that we know executes correctly with the configuration.xml file
    We have downloaded that latest version  15.0.4641.1002 (Aug2014) and have placed the download in a network share.
    My configuration.xml file looks like this
    <Configuration>
    <Add SourcePath="\\Domain.com\Distribution\Intune\Updates\O365" OfficeClientEdition="32">     
    <Product ID="O365ProPlusRetail">      
    <Language ID="en-us" />     
    </Product>    
    </Add>    
    <Updates Enabled="TRUE" UpdatePath="\\Domain.com\Distribution\Intune\Updates\O365" />    
    <Display Level="None" AcceptEULA="TRUE" />    
    <Logging Level="Standard" Path="C:\" />
    <!--  <Property Name="AUTOACTIVATE" Value="1" />  -->
    </Configuration>
    So, when I deploy the setup.exe /configure configure.xml It does not update Office.
    The exe has successfully run as I can see the log file
    Even the C:\Program Files\Microsoft Office 15\ClientX64
    folder does not contain the
    officeclicktorun.exe
    Not sure if I have to update first to version
    15.0.4569.1507 first or what.
    Any help will be appreciated

    So finally here is what I've done.
    I created a folder that contained:
    •A registry file that edits the key propertybag> baseurlto     
    my DFS (Currently all our SOEs have it set to the CDN)
    (I've called it UpdateO.reg)
    •My configuration.xml & setup.exe
    •included the office installation files in it’s original folder structure WITHOUT the stream* dat    
    files
    I then create a batch file
    @echo off
    regedit.exe /S UpdateO.reg
    setup.exe /CONFIGURE configuration.xml
    :end
    exit
    So effectively, the computer updates the Click to Run engine via the cab files located in
    Office\Data\15.0.4641.1003
    The default Office Task Schedule ‘Office Automatic Updates’ then automatically updates Office from my DFS (I have monitored via Wireshark& Resource monitor
    and confirm it works)
    If you'd like you can trigger the install in the batch file using the command
    C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe RUNMODE RERUNMODE modetorun updatedetection modeargs reschedulemode tasktrigger scheduledtask updateuitype background

  • Office365(Click to Run) Deployment with MDT Offline Media

    Hi,
    I have a scenario where i have to deploy Office365 using click to run with MDT offline media. Now the problem is with configuration.xml file in which we specify the source path of office files. 
    Here in this scenario as i have to deploy client machines with offline media, so in this case what will be the path in the config.xml file? 
    For testing purpose, after downloading the office source files, placed the setup.exe,config.xml file and office source folder in a same folder. Here is the config.xml file that i am using
    <Configuration>
    <Add SourcePath=" " OfficeClientEdition="32" >
        <Product ID="O365ProPlusRetail">
          <Language ID="en-us" />
        </Product>
      </Add> 
    </Configuration>
    In source path, i leave it blank,so that it will use the office source files which was saved in the same folder. 
    Then in MDT server, created a new application for Office365.In command line used the command :- setup.exe /config configuration.xml
    Created a new task sequence for OS deployment and added the step install application for installation of Office365.
    After creating a selection profile for the deployment, created a offline media for deployment of client machine.
    Now while i am running the offline media on the bare-metal machine, after OS installation the deployment got stuck at step install Office 365. Got error message pop up, according to which internet connection needed during installation process so that the
    click to run set-up will download the office source files, It means this will not use the previously downloaded file which was saved in the same folder. 
    So this is what my problem is.. How can i customize the configuration.xml file so that i can install office 365 with offline media. 
    Regards
    Pallavi

    <Add SourcePath=" "
    ....In source path, i leave it blank,so that it will use the office source files which was saved in the same folder. 
    As per
    https://technet.microsoft.com/en-us/library/jj219426.aspx#BKMK_AddElement
    SourcePath indicates the installation source path from which to install Office when you run the Office Deployment Tool in
    configure mode. If you don’t specify SourcePath in
    configure mode, Setup will look in the current folder for the Office source files. If the Office source files aren’t found in the current folder, Setup will look on Office 365 for them
    So, for the /configure mode, you should remove the Sourcepath element completely - do not specify as <space>
    Don
    (Please take a moment to "Vote as Helpful" and/or "Mark as Answer", where applicable.
    This helps the community, keeps the forums tidy, and recognises useful contributions. Thanks!)

  • How to configure Click-to-Run version of Outlook 2013 to run side-by-side with Outlook 2007 or Outlook 2010

    Hi, I am administering a cutover from Office Pro 2010 to Office Pro 2013 via our Office 365 E3 licenses. Before I start migrating mailboxes from our Exchange 2003 server to Exchange Online, I want to have our staff install Office Pro 2013 including Outlook
    2013 so they can have time to review it before we switch to the Exchange Online server in a couple of days. I know Outlook 2013 is not compatible with our Exchange 2003 server but I was hoping to be able to setup Outlook 2013 to connect to my Office 365 email
    address while keeping my msi installed version of Outlook 2010 for my Exchange 2003 email address.
    I am trying to test the capability of Outlook 2013 running side-by-side with my Outlook 2010 program. I have the "Click-to-Run" version installed on my Windows 7 64-bit machine however when I try to open Outlook 2013, I get an error message: "Another
    version of Outlook is currently running. Close it and try again."
    In reading in TechNet and other sources, it clearly states that both programs can run simultaneously which is what I need to do
    but obviously something is not configured correctly.
    Can you please help me get this configuration running or let me know if it is in fact not possible?
    Thanks!
    Frank

    Yes, it should be able to install side by side.
    The versions of Office that you install must be the same edition. For example, both installations of Office are the 32-bit edition.
    When you get the error
    "Another version of Outlook is currently running. Close it and try again.", go to task manager and end all existing
    outlook process.
    If the issue persists, do a repair for your Office suites in Control panel>Program and features>Office>Change>Repair
    Thanks,
    Tyor Wang
    Forum Support
    Come back and mark the replies as answers if they help and unmark them
    if they provide no help.
    If you have any feedback on our support, please click
    here

Maybe you are looking for

  • Install new GPU and PSU and am stuck at BIOS splash

    I purchased an HP a bit over two years ago (Summer of 2012). The computer is an h8-1240t. I had selected the i7 3770 CPU, 300W PSU, 8gb RAM, and a GeForce GT 530.  I am replacing my card with a MSI GTX 970 GAMING 4G card as well as a new 500W Corsair

  • How to synchonize the field of Sales group in VN01  from R/3

    Dear  Sir, I would like to synchonize the field of Sales group in T-code VN01 in SAP  R/3 to CRM. I can't see the field of Sales group in R/3 , what should I do ?? Please kindly advise. Thank you and best regards, Vimol

  • How do I convert a selected nomber of pages from a pdf file?

    How do I convert only selected pages of a pdf file?

  • BUDGET CHECK ON FEW GLS

    Dear SAP EXPERT PLEASE give sujjession for bellow It is observed few branches are booking exp in few GLs wehre budget check is not there. Would request you to apply budget check on follow GLs as  per their internal order. COMM         INSU     LEGL  

  • Dreamweaver CS4 (Student Copy) Installation

    Hi, I purchased a copy of DW CS4 on eBay! Tried a 'try-out' read before install error immediate - "not a valid 32bit application". Searched forum & found exact error as coming from a pirated copy. Tried Vista OS disc (not yet installed) as a check te