Why is Acorbat v9 bundled with Sun JRE v5 update 11 ?

Why is Acorbat v9 bundled with Sun JRE v5 update 11 ?
V5 update 16 is the latest in that family and v5 update 11 has several vulnerablities that
can be exploited. So why is that version bundled with a NEW product like Acrobat
Professional v9 and how can the vulnerabilities be mitigtaed.
This is NOT good for a entterprise environemnt that has to comply with Information
Assurance (IA) compliance.
Dave

From: <[email protected]><br /><br />| This is a USER TO USER forum, not Adobe support, so you will need to contact Adobe or<br />| Sun to find out why one product is bundled with the other<br /><br />| In the US - Adobe General support 800-833-6687<br />| In the US - Adobe Install Problems 800-642-3623<br /><br />| I don't have any #'s for Sun<br /><br />Done.  I called them and the technician was surprised at the information that was provided <br />and Adobe issued me a Case Number.<br /><br />BTW:  Anyone can verify this vulnerability concept by opening a Command Prompt and <br />entering...<br /><br />"C:\Program Files\Adobe\Acrobat 9.0\Designer 8.2\jre\bin\java.exe" -version<br /><br />And then reading the Secunia bulletin.<br />http://secunia.com/advisories/31010/<br /><br />-- <br />Dave

Similar Messages

  • Discoverer 4i not working with Sun JRE plugin

    Hi All,
    Recently i replaced jinitiator with Sun JRE plugin, after the deployment of the plugins the discoverer is not launching from the form based responsibility.
    Its displaying on window as
    Applet oracle.disco.DiscoApplet notinited
    But i see the document 290807.1 for deployment of Sun JRE its no where mentioned that 4i will not Support Sun JRE plugins.
    Any inputs are appreciated
    Thanks in advance.

    Hi,
    You can upgrade to Discoverer 10g (10.1.2.3).
    Note: 313418.1 - Using Discoverer 10.1.2 with Oracle E-Business Suite 11i
    https://metalink2.oracle.com/metalink/plsql/ml2_documents.showDocument?p_database_id=NOT&p_id=313418.1
    Note: 459344.1 - What JRE Client Works With Discoverer 10.1.2 and e-Business Suite 11.5.10.2?
    https://metalink2.oracle.com/metalink/plsql/ml2_documents.showDocument?p_database_id=NOT&p_id=459344.1
    Note: 367389.1 - Recommended Patch for Discoverer 10g (10.1.2.1 / 10.1.2.0.2) Plus Known Issues
    https://metalink2.oracle.com/metalink/plsql/ml2_documents.showDocument?p_database_id=NOT&p_id=367389.1
    If you are not planning to use Oracle AS 10g features (like Discoverer Connection Management, Discoverer Portlet Provider, and Oracle Single Sign On, ..etc), you can choose to install Oracle Business Intelligence Server 10g Release 2. Oracle Business Intelligence Server 10g Release 2 is available on a separate standalone CD and includes Discoverer Server 10g, Discoverer Plus 10g, and Discoverer Viewer 10g.
    Regards,
    Hussein

  • Oracle Forms loading slower with Sun JRE in Oracle E-Business Suite 11i

    Hi,
    After Deploying Sun JRE (Native Plug-in) for Windows Clients in Oracle E-Business Suite 11i (Note 290807.1) we find that Oracle Forms are loading slower than using Jinitiator.
    Also the PDF reports are opening in a minimized fashion. Meaning the PDF reports are opening correctly in new browser window (as expected) but is minimized.
    Customer is not willing to go live with Sun JRE due to these issues.
    Plz advice is there is any additional configuration I need to do.
    Rgds,
    Thiru

    When the JRE was installed/configured on the workstations was the jar cache placed on a LAN drive instead of the local drive? We have experienced poor performance with both the JRE and Jinitiator when the Workstation Sysadmins configured the jar cache to be located on a LAN drive. Also is the size of the jar cache on the workstation sufficient to hold all of your required jar files. It could be downloading the jar files all the time.
    Overall our performance with the JRE is comparible to the Jinitiator.
    Sorry I have not experienced the problem that you are having with you pdf reports so I can't provide any comments on it.

  • There is a copy/paste problem with SUN JRE in the application.

    Hi All,
    The application is desinged and developed in Lotus Notes and contains a Rich Text field , its a web based application and loads with SUN JRE for the applet to gets load in the application. Whenever i tries to do copy/paste from Microsoft word document to rich text field in the application i get a text which is parsed with html tags which doesn't come while i loads MS JVM on the browser.
    I tried with SUN JRE 1.5 and 1.6 version , i got the parsingproblem ie text mixed with html and xml tags.
    Any help is appreciated!!.
    Thanks
    Muktesh.

    Hi,
    When we right-click a word that is marked with red or blue underline, it will pop up the suggested corrections context menu. It can give you other options, such as adding the word to your custom dictionary depending on the Microsoft Office program that you
    are using.
    If you want to copy such words, you can use Ctrl + C and Ctrl + V to achieve the goal. Or, we can right-click the word and then select
    Ignore All or Add to Dictionary, and then you can copy the word by right-clicking it. 
    Regards,
    Steve Fan
    TechNet Community Support
    It's recommended to download and install
    Configuration Analyzer Tool (OffCAT), which is developed by Microsoft Support teams. Once the tool is installed, you can run it at any time to scan for hundreds of known issues in Office
    programs.

  • Tellp() problems with Sun Complier 6 Update 1

    Hi,
    I am a sysadm and I am a newbie to programming. I am using Sun Complier 6 Update 1 on solaris 7
    tellp() returns a negative in the following sample program. I have complied the same on AIX and it returns the expected value. Can anybody please let me know if I need to do modifications to this program to get the right value or is there a patch for the complier if it is a known problem.
    # include <fstream>
    using namespace std;
    int main () {
    long pos;
    ofstream outfile;
    outfile.open ("test.txt");
    outfile.write("APPLE",1048576);
    pos=outfile.tellp();
    printf("%i",pos);
    outfile.close();
    return 0;
    Thanks
    Sam Kanas

    The expression outfile.write("APPLE", 1048576) says to write 1048576 bytes starting at the address of the literal string "APPLE", which is located at an unpredictable location in the program address space. Writing stops when 1048576 bytes are written, or some sort of error occurs.
    You certainly cannot depend on 1048576 consecutive bytes being available starting at the address of "APPLE", so this program does not have predictable behavior. You can depend only on being able to write "APPLE" followed by the null byte. I'm surprised you did not get a memory fault due to accessing memory at an invalid address.
    If you explain what you actually want to do, perhaps I can suggest a way to accomplish it using valid and portable C++ code.

  • Why does the JDK come with a JRE and JDK?

    I was wondering why when I download the JDK does it install a JRE and JDK. The JDK (I believe) includes all the JRE files as well as the compiler files. I can just as easily get rid of the JRE and as far as I know it wouldn't make a difference so why both?

    I thought it was a 2-for-1 deal ;-)
    Seriously, it doesn't make sense for me either. What
    would make more sense
    is for the JDK installation to install that separate
    JRE, but to use that JRE instead of
    installing a second one inside its folders.That would make much more sense, but I am guessing there is some intracacies that I'm not aware of or speed reason or something of the sort that would explain this. The first thing that comes to mind is knowing people might be copying the jre, someone might accidentally pull the jre out so they still wanted the sdk to work with the built in one. This is a pretty big stretch i know but there must be a reason somewhere.

  • Problem with SUN ONE STUDIO Update 4

    Hi,
    I created a simple entity bean with finder methods and business methods.
    But when I am trying to test the entity bean by generating the New EJB Client, and at the time executing the EJB client test client the following error as occured.
    [b][b]Deploying... EAR Unable to deploy theC:/developer/JavaProject/test/test.earApplication
    Deployment Error -- Error while running ejbc -- Fatal Error from EJB Compiler -- -- Error while processing CMP beans.
    Please help me
    Thank you

    Hi ,
    To know the reasons for deployment failure , you
    could run your application using the Sun One verifier tool. Right click your application node and select Sun one verifier under the tools category.
    Please post the results of the verifier tool in case you are not able to resolve the problem.
    -Amol

  • Sigsegv accessing va_arg with Sun Studio 12 Update 1 on OpenSolaris 2009.06

    $ uname -a
    SunOS ultra 5.11 snv_111b i86pc i386 i86pc Solaris
    $ cc -V
    cc: Sun C 5.10 SunOS_i386 2009/06/03
    usage: cc [ options] files. Use 'cc -flags' for details
    $ cat testva.c
    #include <stdarg.h>
    #include <stdio.h>
    #include <stdlib.h>
    #include <string.h>
    static void local_vformatter(char *buf, size_t len,
    const char *format, va_list ap)
    char *str;
    ssize_t bigval;
    str = va_arg(ap, char *);
    printf("arg %s\n", str);
    str = va_arg(ap, char *);
    printf("arg %s\n", str);
    bigval = va_arg(ap, /* ssize_t */ unsigned long);
    printf("arg %lld\n", bigval);
    str = va_arg(ap, char *);
    printf("arg %s\n", str);
    static void local_snprintf(char *buf, size_t len,
    const char *format, ...)
    va_list ap;
    va_start(ap, format);
    local_vformatter(buf, len, format, ap);
    va_end(ap);
    int main(void)
    char buf[800];
    char key, val;
    ssize_t len;
    key = "KEY1";
    val = "VAL1";
    len = strlen(key);
    local_snprintf(buf, sizeof buf, "%sKey %s (%ld) Value %s\n",
    "->",
    key,
    len,
    val);
    /* printf(buf); */
    $ cc -m64 -O0 -g testva.c
    $ ./a.out
    arg ->
    arg KEY1
    arg 4
    Segmentation Fault (core dumped)
    $ dbx ./a.out core
    Reading a.out
    core file header read successfully
    Reading ld.so.1
    Reading libc.so.1
    program terminated by signal SEGV (no mapping at the fault address)
    Current function is local_vformatter
    21 str = va_arg(ap, char *);
    (dbx) where
    =>[1] local_vformatter(buf = 0xfffffd7fffdff510 "°õßÿ^?ýÿÿ^H÷ßÿ^?ýÿÿ", len = 800U, format = 0x4011d0 "%sKey %s (%ld) Value %s\n", ap = 0xfffffd7fffdff4a8), line 21 in "testva.c"
    [2] local_snprintf(buf = 0xfffffd7fffdff510 "°õßÿ^?ýÿÿ^H÷ßÿ^?ýÿÿ", len = 800U, format = 0x4011d0 "%sKey %s (%ld) Value %s\n", ... = 0x4010c8, ...), line 31 in "testva.c"
    [3] main(), line 49 in "testva.c"
    (dbx) regs
    current frame: [1]
    r15     0x0000000000000000
    r14     0x00000000004011f0
    r13     0x0000000000000004
    r12     0x00000000004011f8
    r11     0x0000000000000246
    r10     0x0000000000000000
    r9     0xfffffd7fff35afa0
    r8     0x00000000ffdff4e8
    rdi     0xfffffd7fffdff4e0
    rsi     0x00000000ffdff4e0
    rbp     0xfffffd7fffdff3c0
    rbx     0xfffffd7fffdff4a8
    rdx     0x00000000ffdff4e0
    rcx     0xfffffd7fff2c463a
    rax     0xfffffd7fffdff4a8
    trapno     0x000000000000000e
    err     0x0000000000000004
    rip     0x0000000000400f65:local_vformatter+0x249 movq (%rsi),%rsi
    cs     0x0000000000000053
    eflags     0x0000000000010212
    rsp     0xfffffd7fffdff2f0
    ss     0x000000000000004b
    fs     0x0000000000000000
    gs     0x0000000000000000
    es     0x0000000000000000
    ds     0x0000000000000000
    fsbase     0xfffffd7fff1a2a00
    gsbase     0x0000000000000000
    (dbx)
    It looked to me that the top 32 bits of rsi got whacked somehow.
    AFAICT, it only occurs with "-O0". Omit -O0, or use -O1, -O2, etc. and it works.
    The simple code above is based on the same issue in critical Apache Portable Runtime code (apr_snprintf() et al) that renders APR useless for httpd and probably many other apps.

    Your code won't compile as shown. I suspect that the source code has been munged by the forum display formatter, because it was not enclosed in "code" brackets.
    Here is what I think your example looked like: #include <stdarg.h>
    #include <stdio.h>
    #include <stdlib.h>
    #include <string.h>
    static void local_vformatter(char* buf, size_t len,
    const char *format, va_list ap)
        char *str;
        ssize_t bigval;
        str = va_arg(ap, char*);
        printf("arg %s\n", str);
        str = va_arg(ap, char*);
        printf("arg %s\n", str);
        bigval = va_arg(ap, /*ssize_t*/ unsigned long);
        printf("arg %lld\n", bigval);
        str = va_arg(ap, char*);
        printf("arg %s\n", str);
    static void local_snprintf(char* buf, size_t len,
    const char *format, ...)
        va_list ap;
        va_start(ap, format);
        local_vformatter(buf, len, format, ap);
        va_end(ap);
    int main()
        char buf[800];
        char *key, *val;
        ssize_t len;
        key = "KEY1";
        val = "VAL1";
        len = strlen(key);
        local_snprintf(buf, sizeof buf, "%sKey %s (%ld) Value %s\n",
        "->", key, len, val);
        printf(buf);
    } I was able to reproduce your problem only with -O0, as you found.
    The short answer is, don't use -O0. It serves no useful purpose, except for compiler testing.
    Either use no -O option, best for debugging, or use -O2 or above to get optimization.
    If you would like to see a fix for this problem, please file a bug report at
    [http://bugs.sun.com]

  • I am using Firefox 4 Beta 10 with Sun Java 6 update 18.

    When I open a page with the applet the Firefox window simply freezes unlit the applet loads. I tested this by creating a new profile and voila, it doesn't hang there. How do I know what is the exact problem with the default profile of Firefox.

    Apple support article to enable Java 6.
    Java 6 Enable

  • Acrobat v9 and the bundling of an OLDER SUN JRE that is vulnerable to exploitation!

    C:\Program Files\Adobe\Acrobat 9.0\Designer 8.2\jre\bin\java.exe
    "This installation of Sun Java JRE 1.5.x / 5.x is insecure and potentially exposes your
    system to security threats!
    The detected version installed on your system is 5.0.110.3, however, the latest secure
    version released by the vendor, fixing one or more vulnerabilities, is 5.0.160.2.
    Update Instructions:
    Update to 5.0 Update 16 or later."
    Reference:
    http://secunia.com/advisories/31010/
    OK. How can I mitigate this vulnerability ?
    Dave
    http://www.claymania.com/removal-trojan-adware.html
    Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp

    From: <[email protected]><br /><br />| C:\Program Files\Adobe\Acrobat 9.0\Designer 8.2\jre\bin\java.exe<br /><br />| "This installation of Sun Java JRE 1.5.x / 5.x is insecure and potentially exposes your<br />| system to security threats!<br /><br />| The detected version installed on your system is 5.0.110.3, however, the latest secure<br />| version released by the vendor, fixing one or more vulnerabilities, is 5.0.160.2.<br /><br />| Update Instructions:<br />| Update to 5.0 Update 16 or later."<br /><br />| Reference:<br />| http://secunia.com/advisories/31010/<br /><br />| OK.  How can I mitigate this vulnerability ?<br /><br />BTW:<br /><br />I have Sun JRE v6 update 7.<br /><br />Can Can Adobe Designer be re-directed to use this version and NOT use a bundled version ?<br /><br /><br />-- <br />Dave<br />http://www.claymania.com/removal-trojan-adware.html<br />Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp

  • Having problem with "windows on top" in jre 6 update 12

    I'm having issue with the jre 6 update 12 with our Swing application. It works fine with update 11. The issue is that my JFrame is somehow getting set to be "always on top" once I've opened an closed a modal dialog from that JFrame. Here is the steps:
    1) Open a JFrame (note the "alwaysOnTop" is not set to true).
    2) Click on a button which will open a modal dialog.
    3) While the dialog is open click on the underlying JFrame (nothing happens as modal dialog is blocking it).
    4) Now close the dialog and suddenly the parent JFrame is now set to be always on top. This won't happen if I didn't click on the parent JFrame while the dialog was open.
    Has anyone else encountered this issue with jre 6 update 12? I'm really puzzled as to why this is happening. There is nothing in the release note to suggest there has been any change in this area in this release. Any help would be much appreciated?

    This is a duplicate of http://forum.java.sun.com/thread.jspa?threadID=5199159, which is (more appropriately) posted in the Web Start forum. Post any replies there.
    Please do not duplicate your posts.

  • JFilchooser error on Webstart application with latest JRE download

    Recently we have observed that with the latest versions of JRE downloads the JFilechooser does not pop up and on some machines and on some machines it throws out a 3184 error message on windows vista machines.
    We are seeing this error occuring only on Vista .Everything works fine on XP though.
    We have a java web start application which runs on the client machine and it has functionalities where it opens the jfilechooser.
    Unfortunately with the latest update of JRE this is giving very big problems for us and im not sure how to fix this problem.
    Can someone help us with this problem and provide a solution.
    My class definition looks like this
    FileAndDirectorySelection extends JPanel implements ActionListener {
    JFileChooser fc;
         fc = new JFileChooser(".");
                   fc.setCurrentDirectory(exportDefaultDirectory);
    Not sure how to fix this problem but any help would be greatly appreciated.
    Thanks
    Chetan

    BIBeans version 10.1.2.0.1 is certified only with Sun JRE:
    1.3.1_11
    1.4.1_04
    1.4.2_03

  • Arabic Characters Alef & Lam Appear Incorrect at Runtime using Sun JRE/JPI

    Hi,
    We implemented Sun JRE for Oracle EBS 11i in Production on 7th Jan 2009.
    We went with Sun JRE 1.6.0_07 as we faced new Broswer Minimizing Problem in IE with 1.6.0_10 and 1.6.0_11.
    Now we have some issue related to Arabic Characters Alef and Lam - Doc Id 731703.1.
    The solution is to use 1.6.0_11 but we can't. I would like to know if there is any work around without using 1.6.0_11.
    Thanks
    Thiru

    Hi,
    We have the problem with 1.6.0_11 also.
    I checked in TEST instance. Strangly the problem is only while using Arabic Forms thru Arabic Login.
    If we login thru English Login and access the same Form in Enlgish and then type in Arabic there is no problem. I got these details from our Arabic Consultants.
    I am trying the revert back to jinitiator.
    Rgds,
    Thiru

  • Error in  bibean applet with latest  JRE

    We have bi bean application developed using Applet It works fine with
    JRE 1.5 or earlier JRE version but when I access same thing in PC that has JRE 1.5.0_09 it gives XML error
    <Line 5, Column 21>: XML-20123: (Fatal Error) '>' Missing from end tag.
    <Line 5, Column 21>: XML-20100: (Fatal Error) Expected 'EOF'.
    java.lang.NullPointerException
         at oracle.dss.persistence.persistencemanager.server.PersistenceManagerSupport.loadFactoryFromXML(PersistenceManagerSupport.java:359)
         at oracle.dss.persistence.persistencemanager.server.PersistenceManagerSupport.<init>(PersistenceManagerSupport.java:157)
         at oracle.dss.persistence.persistencemanager.server.PersistenceManagerImpl.<init>(PersistenceManagerImpl.java:88)
         at oracle.dss.persistence.persistencemanager.server.InitPersistenceManagerFactory.getInitialContext(InitPersistenceManagerFactory.java:36)
         at javax.naming.spi.NamingManager.getInitialContext(Unknown Source)
         at javax.naming.InitialContext.getDefaultInitCtx(Unknown Source)
         at javax.naming.InitialContext.init(Unknown Source)
         at javax.naming.InitialContext.<init>(Unknown Source)
         at javax.naming.directory.InitialDirContext.<init>(Unknown Source)
         at oracle.dss.persistence.persistencemanager.server.InitialPersistenceManager.<init>(InitialPersistenceManager.java:105)
         at oracle.dss.connection.server.drivers.persistence.PersistenceConnectionDriverImpl.connect(PersistenceConnectionDriverImpl.java:150)
         at oracle.dss.connection.server.ConnectionImpl.connect(ConnectionImpl.java:285)
         at oracle.dss.connection.client.Connection.connect(Connection.java:425)
         at oracle.dss.connection.client.Connection.connect(Connection.java:342)
         at oracle.dss.metadataManager.client.MetadataManager.setConnectionObjects(MetadataManager.java:4235)
         at oracle.dss.metadataManager.client.MetadataManager.attach(MetadataManager.java:924)
         at oracle.dss.metadataManager.client.MetadataManager.attach(MetadataManager.java:840)
         at oracle.dss.datautil.client.XMLManagerFactory.createQueryManager(XMLManagerFactory.java:196)
         at oracle.dss.datautil.client.ManagerFactoryImpl.lookupQueryManager(ManagerFactoryImpl.java:178)
         at oracle.dss.datautil.client.ManagerFactoryImpl.lookupMetadataManager(ManagerFactoryImpl.java:221)
         at oracle.dss.datautil.client.ManagerFactoryImpl.lookupManager(ManagerFactoryImpl.java:128)
         at edsl.olap.BIView.getMetadataManager(BIView.java:436)
         at edsl.olap.BIView.openView(BIView.java:565)
         at edsl.olap.BIView.jbInit(BIView.java:123)
         at edsl.olap.BIView.init(BIView.java:112)
         at sun.applet.AppletPanel.run(Unknown Source)
         at java.lang.Thread.run(Unknown Source)

    BIBeans version 10.1.2.0.1 is certified only with Sun JRE:
    1.3.1_11
    1.4.1_04
    1.4.2_03

  • Provisioning User IDs in Remedy Help Desk with Sun IdM 7.0.

    Hi,
    Our team is in the process of defining a approach to provision user IDs in Remedy Help Desk system using Sun IdM version 7.0.
    What we wanted to know is whether it is possible to use the Remedy resource adapter bundled with Sun IdM 7.0 to provision user IDs. We think that this resource adapter is used to provision help desk tickets into the help desk system and not user IDs. Is the understanding correct?
    If user IDs cannot be provisioned using the resource adapter, we are planning the following approach to provision user IDs into Remedy:
    1. Understand the table schema of the Remedy database.
    2. Configure the Database Table resource adapter to provision into the Remedy user tables.
    We are looking for inputs from people who have come across a similar design issues with Remedy Help Desk and could validate our design approach. We will highly appreciate any inputs on this.
    Thank You.
    Regards,
    Vallabh Vengulekar.

    "We think that this resource adapter is used to provision help desk tickets into the help desk system and not user IDs"
    hi as per ur post...where did u find this information..I am looking for this information of how to manage Remedy tickets through IDM.
    If you can help me it wil be great...looking for your inputs...
    thanks in advance.

Maybe you are looking for