# MA-570.022016: MyCERT Advisory - Oracle Releases Security Updates for Java

**Date:** 09 Feb 2016  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-570.022016  
**Advisory ID:** MA-570.022016

---

####
**1.0 Introduction**
Oracle has released security updates to address a vulnerability in Java SE versions 6, 7, and 8 for Windows. Users and administrators are encouraged to review the Oracle security alert and apply the necessary update.
**2.0 Impact**
Exploitation of some of these vulnerabilities may allow a remote attacker to take control of an affected system.
**3.0 Affected Products**
The affected products of Oracle Java SE is as listed in the Table 1:
|  | --- | --- | **Product** | **Affected Versions** | Java SE | JDK and JRE 6 Update 111 on Windows only | Java SE | JDK and JRE 7 Update 95 on Windows only | Java SE | JDK and JRE 8 Update 71, 72 on Windows only |
Table 1: Oracle Java SE Affected Product
Note: The Java SE Advanced Enterprise installers are not affected.
**4.0 Recommendation**
MyCERT highly recommended users of these applications to upgrade to the latest version of the affected products:
- To access the documentation for those patches, please refer Patch Availability Table via below URL link: <http://www.oracle.com/technetwork/topics/security/alert-cve-2016-0603-2874360.html#PatchTable>
- Developers can download the latest release from: [http://www.oracle.com/technetwork/java/javase/downloads/index.html.](http://www.oracle.com/technetwork/java/javase/downloads/index.html)
- Users running Java SE with a browser can download the latest release from <http://java.com>. Users on the Windows and Mac OS X platforms can also use automatic updates to get the latest release.
- Oracle Security Alert for CVE-2016-0603, please refer My Oracle Support Note 2101338.1. : <https://support.oracle.com/rs?type=doc&id=2101338.1>
Generally, MyCERT advises the users of this software to be updated with the latest security announcements by the vendor and follow best practice security policies to determine which updates should be applied.
For further enquiries, please contact MyCERT through the following channels:
E-mail : [[email protected]](/cdn-cgi/l/email-protection#2e4d574c4b5c1717176e4d574c4b5c5d4b4d5b5c475a57004357) or [[email protected]](/cdn-cgi/l/email-protection#214c5842445355614c58424453550f4e53460f4c58) 
Phone : 1-300-88-2999 (monitored during business hours)
Fax : +603 89453442 
Handphone : +60 19 2665850 (24x7 call incident reporting)
SMS : CYBER999 REPORT EMAIL COMPLAINT to 15888
Business Hours : Mon - Fri 09:00 AM - 18:00 PM MYT
Web : [https://www.mycert.org.my](https://www.mycert.org.my/)
Twitter : <http://www.twitter.com/mycert>
Facebook: <http://www.facebook.com/mycert.org.my>
Cyber999 Mobile Apps:  [IOS Users](https://itunes.apple.com/my/app/cyber999-mobile-application/id888552400?mt=8&ign-mpt=uo%3D4) or [Android Users](https://play.google.com/store/apps/details?id=my.cyber999.mobile)
**5.0 References**
- Adobe Releases Security Updates for Java:
<https://www.us-cert.gov/ncas/current-activity/2016/02/08/Oracle-Releases-Security-Updates-Java>
- Oracle Security Alert for CVE-2016-0603:
<http://www.oracle.com/technetwork/topics/security/alert-cve-2016-0603-2874360.html>
- Security Alert CVE-2016-0603 Released:
<https://blogs.oracle.com/security/entry/security_alert_cve_2016_0603>