# MA-346.042013: MyCERT Alert - Multiple Updates from Oracle for Java SE

**Date:** 19 Apr 2013  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-346.042013  
**Advisory ID:** MA-346.042013

---

**1.0 Introduction**
Oracle has released a Critical Patch Update (CPU) for Java SE. Customers are strongly recommended to apply CPU fixes as soon as possible.
A Critical Patch Update is a collection of patches for multiple security vulnerabilities. The Critical Patch Update for Java SE also includes non-security fixes. Critical Patch Updates are cumulative and each advisory describes only the security fixes added since the previous Critical Patch Update and Security Alert. Thus, prior Critical Patch Update and Security Alert advisories should be reviewed for information regarding earlier accumulated security fixes.
**2.0 Impact**
An unpatched system  could allow  a remote, unauthenticated attacker execute arbitrary code, cause a denial of service, or gain unauthorized access to your files or system.
**3.0 Affected Products**
The affected systems that needs the Critical Patch Update (CPU)are:
- JDK and JRE 7 Update 17 and earlier
- JDK and JRE 6 Update 43 and earlier
- JDK and JRE 5.0 Update 41 and earlier
- JavaFX 2.2.7 and earlier
**4.0 Recommendation**
System Administrators or Developers who are running the above affected systems, must apply the Critical Patch Update immediately.
System Administrators or Developers can download the latest release from
- <http://www.oracle.com/technetwork/java/javase/downloads/index.html>
Users running Java SE with a browser can download the latest release from
- <http://java.com>
Users on the Windows and Mac OS X platforms can also use automatic updates to get the latest release.
The latest JavaFX release is included with the latest update of JDK and JRE 7. For JDK and JRE 6 users, the latest Java FX release is available from
- <http://www.oracle.com/technetwork/java/javafx/>
MyCERT generally advise users to keep themselves updated with the latest security announcements by the vendor. In case the public receives any suspicious .JAR or .CLASS file, and requires our further analysis, please reach us through the following channels:
E-mail : [[email protected]](/cdn-cgi/l/email-protection#bcd1c5dfd9cec8fcd1c5dfd9cec892d3cedb92d1c5) or [[email protected]](/cdn-cgi/l/email-protection#debda7bcbbace7e7e79ebda7bcbbacadbbbdabacb7aaa7f0b3a7)
Phone : 1-300-88-2999 (monitored during business hours)
Fax : +603 89453442
Handphone : +60 19 2665850 (24x7 call incident reporting)
SMS : CYBER999 REPORT   to 15888
Business Hours : Mon - Fri 08:30 -17:30 MYT
Web: <https://www.mycert.org.my>
**5.0 References**
- <http://www.oracle.com/technetwork/java/javafx/>
- <http://java.com>
- <https://www.us-cert.gov/ncas/alerts/TA13-107A>