Java deployment toolkit is vulnerable. Java plugin for Firefox


The Java Console extension is not just an add-on, Java adds to the web-browser Firefox new opportunities. Users who open the Plugins menu tab Firefox Add-ons (by opening Tools > Add-ons) will notice there is at least one plugin there Java Deployment Toolkit. There is no option to remove it or remove plugins directly in Firefox.

Plugins automatically installed in Firefox how this happens and how to stop it is outlined in the article. Basically this means that the plugin will be added to the web browser if the installation places it in the directory Firefox when running a scan to look for plugins.

Uninstalling the Java Deployment Toolkit.
Let's start by describing What Java Deployment Toolkit does:
Java Deployment Toolkit decides which versions and platforms Java users installed on their computers. Java Deployment Toolkit supplies Java applet based on application deployment with a simple interface JavaScript. This greatly increases the ease of detection environment Java users, and ease of platform deployment Java.
We are starting the removal process by entering in the address bar Firefox: configuration. The filter is set to plugin.expose_full_path - set it to true. This will display the full path of each plugin in the Plugins window that we open afterwards. Double click the entry to set it to true.

Now open the plugins in the same way. On the screen you will see lists and names of all plugins that are installed in the web browser Firefox, in this case it is npdeployJava1.dll associated with Java Deployment Toolkit 6.0.200.2 and npdeploytk.dll associated with Java Deployment Toolkit 6.0.190.4.

Java Deployment Toolkit files are located on the hard drive in C:\Program Files (x86)\ Mozilla Firefox\Plugins\npdeployJava1.dll and C:\Program Files (x86)\Java\jre6\Bin\new_plugin\npdeploytk.dll. Users of 32-bit versions of Windows need to remove the (x86) part of the URL so that it ends up looking like C:\Program Files\Mozilla Firefox\Plugins\npdeployJava1.dll and C:\Program Files\Java\jre6\Bin\new_plugin \npdeploytk.dll.
Now is the time to close the web browser Firefox and open the plugin in Windows Explorer. Plugins can simply be removed from folders, which will also remove them from running as plugins in the web browser Firefox. Careful users, before they start removing plugins from the directory, can create backup copy files.

FF has blocked Flashplayer and Java. I have updated both to latest versions BUT Java Deployment Toolkit 8.0.510.16 11.51.2.16 is still blocked and cannot be activated (or apparently updated). The option "ask to activate" is selected but does not do anything. "You cannot UNINSTALL this program because: Why I am not able to run the Java Uninstall tool and the Java verification applet? The Java Uninstall Tool and the Java verification applet uses the Java DT to do Java version detection on the user system. If Java DT is blocked by browser (like Firefox) than these applets will not run. In order to run these applets the user will have to permit Java DT to run in browsers." https://www.java.com/en/download/faq/deployment_toolkit.xml

So, there is a Catch 22. It needs to run itself to uninstall but it can"t. How can this be resolved?

As an additional comment - flash and Java run in MS IE - which is considered less secure. Mozilla are forcing people to use an inferior product. Best Regards, Chris

FF has blocked Flashplayer and Java. I have updated both to latest versions BUT Java Deployment Toolkit 8.0.510.16 11.51.2.16 is still blocked and cannot be activated (or apparently updated). The option "ask to activate" is selected but does not do anything. "You cannot UNINSTALL this program because: Why I am not able to run the Java Uninstall tool and the Java verification applet? The Java Uninstall Tool and the Java verification applet uses the Java DT to do Java version detection on the user system. If Java "DT is blocked by browser (like Firefox) than these applets will not run. In order to run these applets the user will have to permit Java DT to run in browsers." https://www.java.com/en/download/faq/deployment_toolkit.xml So, there is a Catch 22. It needs to run itself to uninstall but it can"t. How can this be resolved? As an additional comment - flash and Java run in MS IE - which is considered less secure. Mozilla are forcing people to use an inferior product. Best Regards, Chris

Chosen solution

Read this answer in context 1

Helpful Reply

FF has blocked Flashplayer and Java. I have updated both to latest versions BUT Java Deployment Toolkit 8.0.510.16 11.51.2.16 is still blocked and cannot be activated (or apparently updated). The option "ask to activate" is selected but does not do anything. "You cannot UNINSTALL this program because: Why I am not able to run the Java Uninstall tool and the Java verification applet? The Java Uninstall Tool and the Java verification applet uses the Java DT to do Java version detection on the user system. If Java "DT is blocked by browser (like Firefox) than these applets will not run. In order to run these applets the user will have to permit Java DT to run in browsers." https://www.java.com/en/download/faq/deployment_toolkit.xml So, there is a Catch 22. It needs to run itself to uninstall but it can"t. How can this be resolved? As an additional comment - flash and Java run in MS IE - which is considered less secure. Mozilla are forcing people to use an inferior product. Best Regards, Chris
  1. At the beginning, please close all Firefox windows to exit Firefox completely.
  2. Uninstall Java completely via the control panel > uninstall programs. Maybe you should also clean temporary files on your computer.
  3. Start Firefox as usual. Click the menu button, and choose Add-ons. Now click on the "Plugin" section.
  • Java still there? Bad news, follow steps 1 and 2.
  • Java not there? Good news, just follow step 2.

If you can"t use an uninstaller program to remove a plugin, you can remove it manually:

  1. Start Firefox.
  2. Type about:plugins into the Location bar and press Enter to display the About Plugins page.
  3. Each entry in the About Plugins page will have "File:" and "Path:", showing the name and location of the plugin file. Use Windows Explorer to navigate to the folder shown for the plugin you want to remove.
  4. Delete the content of the folder.
  5. Restart Firefox.

The plugin will be removed.

  1. Start Firefox.
  2. Type about:support into Location bar.
  3. Click on Show Folder.
  4. Close Firefox.
  5. Delete the file pluginreg.dat.
  6. Restart Firefox.

Now install Java all over again, with Firefox closed from this site: https://www.java.com/de/download/windows_xpi.jsp

Please note: Your O/S Windows XP isn't supported by Oracle anymore. So keep in mind that maybe the add-on itself is incompatible.

If there are any further question, please report back. Thanks.

""ChrisJez [[#question-1072566|said]]""

FF has blocked Flashplayer and Java. I have updated both to latest versions BUT Java Deployment Toolkit 8.0.510.16 11.51.2.16 is still blocked and cannot be activated (or apparently updated). The option "ask to activate" is selected but does not do anything. "You cannot UNINSTALL this program because: Why I am not able to run the Java Uninstall tool and the Java verification applet? The Java Uninstall Tool and the Java verification applet uses the Java DT to do Java version detection on the user system. If Java "DT is blocked by browser (like Firefox) than these applets will not run. In order to run these applets the user will have to permit Java DT to run in browsers." https://www.java.com/en/download/faq/deployment_toolkit.xml So, there is a Catch 22. It needs to run itself to uninstall but it can"t. How can this be resolved? As an additional comment - flash and Java run in MS IE - which is considered less secure. Mozilla are forcing people to use an inferior product. Best Regards, Chris
Hi Chris, #At the beginning, please close all Firefox windows to exit Firefox completely. #Uninstall Java completely via the control panel > uninstall programs. Maybe you should also clean temporary files on your computer. #Start Firefox as usual. Click the menu button, and choose Add-ons. Now click on the "Plugin" section. *Java still there? Bad news, follow steps 1 and 2. *Java not there? Good news, just follow step 2. """Step 1:""" If you can"t use an uninstaller program to remove a plugin, you can remove it manually: #Start Firefox. #Type """about:plugins" "" into the Location bar and press Enter to display the About Plugins page. #Each entry in the About Plugins page will have "File:" and "Path:", showing the name and location of the plugin file. Use Windows Explorer to navigate to the folder shown for the plugin you want to remove. #Delete the content of the folder. #Restart Firefox. The plugin will be removed. """Step 2:""" #Start Firefox. #Type """about :support""" into Location bar. #Click on """Show Folder""". #Close Firefox. #Delete the file """pluginreg.dat""". #Restart Firefox. Now install Java all over again, with Firefox closed from this site: https://www.java.com/de/download/windows_xpi.jsp """Please note: Your O/S Windows XP isn"t supported by Oracle anymore. So keep in mind that maybe the add-on itself is incompatible.""" If there are any further question, please report back. Thanks. Regards, Tobias

Modified July 16, 2015 at 6:58:22 AM PDT by Tobias

Question owner

Hi Tobias, Many thanks for your fast reply. Good news and bad news. I uninstalled Java and this removed both java RTE and DT from add-ons. Yay, straight to step 2, did the edit, closed FF then restarted and reinstalled Java. Go to webpage - Plugin is disabled; Click manage plug-ins - Java Deployment Tools highlighted. It has reappeared. Back to the square labeled one.

I also know Java is unsupported for XP. I have 8.1 on another PC but like many other users I do not find it comfortable. Best,

Hi Tobias, Many thanks for your fast reply. Good news and bad news. I uninstalled Java and this removed both java RTE and DT from add-ons. Yay, straight to step 2, did the edit, closed FF then restarted and reinstalled Java. Go to webpage - Plugin is disabled; Click manage plug-ins - Java Deployment Tools highlighted. It has reappeared. Back to the square labeled one. I also know Java is unsupported for XP. I have 8.1 on another PC but like many other users I do not find it comfortable. Best,

Helpful Reply

Okay, I think Firefox having issues to detect the current version of Java. But, if you"ve really installed the latest version of Java on your system you can unconcerned proceed with these steps:

CAUTION: These steps deactivate the Firefox blocklist for vulnerable plugins and extensions. Furthermore, vulnerable add-ons will NOT be blocked anymore. Use at your own risk!

  1. Type about:config into Location bar.
  2. Proceed by clicking the button "I"ll be careful, I promise!".
  3. Rightclick, to toggle the string extensions.blocklist.enabled from true to false.
  4. Restart Firefox.

See if this help you out. If not try to deactivate your anti virus and try again. Thanks.

""ChrisJez [[#answer-754619|said]]""

Hi Tobias, Many thanks for your fast reply. Good news and bad news. I uninstalled Java and this removed both java RTE and DT from add-ons. Yay, straight to step 2, did the edit, closed FF then restarted and reinstalled Java. Go to webpage - Plugin is disabled; Click manage plug-ins - Java Deployment Tools highlighted. It has reappeared. Back to the square labeled one. I also know Java is unsupported for XP. I have 8.1 on another PC but like many other users I do not find it comfortable. Best,
Hi Chris, Okay, I think Firefox having issues to detect the current version of Java. But, if you"ve really installed the latest version of Java on your system you can unconcerned proceed with these steps: """CAUTION: These steps deactivate the Firefox blocklist for vulnerable plugins and extensions. Furthermore, vulnerable add-ons will NOT be blocked anymore. Use at your own risk!""" #Type """about:config""" into Location bar. #Proceed by clicking the button "I"ll be careful, I promise!". #Rightclick, to toggle the string """extensions.blocklist.enabled""" from true to """false""". #Restart Firefox. See if this help you out. If not try to deactivate your anti virus and try again. Thanks. Regards, Tobias

Modified July 16, 2015 at 8:48:11 AM PDT by Tobias

Question owner

Hi Tobias, Thanks again. I may have to consult the oracle about this DT issue. Sad and reluctant workaround is to use IE to look at pages/sites that FF won"t allow. It seems wiser to leave the blocking in place until everyone gets their acts together.

C:/Programmes/Java/jre "your version"/bin/new_plugin

delete npdeploytk.dll nothing else but close your broswer first:p and when you have deleted try to clean your registery with ccleaner or anything else:p

C:/Programmes/Java/jre "your version"/bin/new_plugin delete npdeploytk.dll nothing else but close your broswer first:p and when you have deleted try to clean your registery with ccleaner or anything else:p

Sad and reluctant workaround is to use IE to look at pages/sites that FF won"t allow.

On what page does Java not work for you in Firefox?

For sites that use the regular Java plugin, if it is set to "Ask to Activate", you should be able to activate it using the "usual" method:

  • a dark gray notification icon in the address bar that is reminiscent of a small Lego block, or
  • a link in a black rectangle in the page, or
  • an infobar sliding down between the toolbar area and the page

Hardly any sites use the deployment toolkit and if you find one that does, then Firefox should light up the plugin notification icon in the address bar in red instead of dark gray.

If the notification interface is not working correctly, you can use the Permissions panel of the Page Info dialog. You can call that up using any of these:

  • right-click the page and choose View Page Info > Permissions
  • (menu bar) Tools menu > Page Info > Permissions
  • click the padlock or globe icon to the left of the site address > More Information > Permissions

In the top section, you can override the default behavior for the current site. I guess the deployment toolkit is the one listed as Java - Vulnerable plugin!

""ChrisJez [[#answer-755228|said]]""

Sad and reluctant workaround is to use IE to look at pages/sites that FF won"t allow.
On what page does Java not work for you in Firefox? For sites that use the ""regular"" Java plugin, if it is set to "Ask to Activate", you should be able to activate it using the "usual" method: * a dark gray notification icon in the address bar that is reminiscent of a small Lego block, or * a link in a black rectangle in the page, or * an infobar sliding down between the toolbar area and the page Hardly any sites use the deployment toolkit and if you find one that does, then Firefox should light up the plugin notification icon in the address bar in red instead of dark gray. If the notification interface is not working correctly, you can use the Permissions panel of the Page Info dialog. You can call that up using any of these: * right-click the page and choose View Page Info > Permissions * (menu bar) Tools menu > Page Info > Permissions * click the padlock or globe icon to the left of the site address > More Information > Permissions In the top section, you can override the default behavior for the current site. I guess the deployment toolkit is the one listed as Java - Vulnerable plugin!

Chosen Solution

Thanks for the further suggestions from theshine and jscher2000. Not sure whether I should just mark this as SOLVED given my reluctant IE workaround. Respectively... As indicated earlier, I did uninstall/reinstall of Java (confirmed both RTEs are up to date). And, my Registry was recently overhauled by CCleaner. FF add-on for Java DT is set to "ask to activate" but on the page there is just a circle with a cross and "This plug-in is disabled". Manage plug-ins takes me to the add-ons page where "Always activate" is grayed out. Right clicking on the page does not produce a "page option" menu. But, this is visible via, Tools, Page Info, Permissions - where everything is set to default. HOWEVER, with a D"Oh! While the original question is still sound/valid, I was being fooled into thinking the problem (with a particular page) was Java DT - which, as reported I cannot activate to uninstall. The manage plug- ins always seemed to take me to this app that was highlighted. BUT, the actual problem with the web page was Flash plug-in disabled. Page displays once this is activated. Hey ho.

Thanks for the further suggestions from theshine and jscher2000. Not sure whether I should just mark this as SOLVED given my reluctant IE workaround. Respectively... As indicated earlier, I did uninstall/reinstall of Java (confirmed both RTEs are up to date). And, my Registry was recently overhauled by CCleaner. FF add-on for Java DT is set to "ask to activate" but on the page there is just a circle with a cross and "This plug-in is disabled". Manage plug-ins takes me to the add-ons page where "Always activate" is grayed out. Right clicking on the page does not produce a "page option" menu. But, this is visible via, Tools, Page Info, Permissions - where everything is set to default. HOWEVER, with a D"Oh! While the original question is still sound/valid, I was being fooled into thinking the problem (with a particular page) was Java DT - which, as reported I cannot activate to uninstall. The manage plug- ins always seemed to take me to this app that was highlighted. BUT, the actual problem with the web page was Flash plug-in disabled. Page displays once this is activated. Hey ho.

Hmm, that's confusing, Firefox usually can distinguish between plugins the page wants to use, and if you click the plugin notification icon in the address bar, should list all plugins the page is trying to use so you can activate the one(s ) you want to activate.

What is Java and why is it needed?

Java is a programming language and computing platform released by Sun Microsystems in 1995. Currently Java development is carried out by Oracle.
There are many applications and websites (see Java Applet, Java Web Start) that will only work if you have Java installed.

Java is the basis for many types of web-based applications and a standard for the design and distribution of mobile applications, games, web content, and enterprise software.

Applications Java are usually compiled into special bytecode, so they can run on any Java virtual machine (JVM) regardless of computer architecture.

Java vulnerabilities

Availability in the system outdated version Java leads to the fact that they begin to be actively exploited by attackers to carry out attacks on the target system.

So in 2010, the number of attempts to hack the JVM security system increased significantly, as a result of which Java became more attacked than Acrobat And Flash. The increase in the number of attacks is caused by an increase in the number of computers with installed Java-programs and with a high percentage of computers on which no updates were installed JVMs that address security vulnerabilities.

Critics believe that the updated versions JVM are not used because many users they just don't know about what is installed on their computer JVM(some collectors computer systems in addition to the OS, they also preinstall application software), and since many users do not know how to update JVM. When it comes to corporate computers, many companies restrict users' rights to install software and are too slow to install updates.

Among the suggestions put forward by critics is that, given the security risk, and the small number of websites that require the add-on to JVM was installed in the browser.

Infections with most types of blocking Trojans, Trojan families Carberp And Mayachok.1 occur using so-called drive-by attacks (see. Blackhole exploit kit) including due to the presence of an outdated version installed on the user’s system Java. You should also remember the recent epidemic caused by a Trojan program BackDoor.Flashback, which infected more than 650,000 computers running operating system Mac OS X, which occurred due to the exploitation of a Java vulnerability.

Java update

Java update is a function that allows you to ensure that your computer has the latest Java versions. Function Java updates connects to update servers at scheduled times and checks for available updates.
You can configure the frequency of checking for updates, as well as the ability to manually update at any time.

Spoiler: Instructions for automatically updating Java

When automatic updates are enabled, the system periodically checks for new versions of Java. When a new version is detected, you are prompted to update the installed version. If the request is confirmed, the previously installed version will be replaced with the new one.

Change Java update settings in the Java Control Panel.

  1. Find the Java Control Panel
    Windows XP Click Start > Settings > Control Panel
    Windows 7, Windows Vista Click Start > Control Panel
  2. Launch the Java Control Panel by double-clicking the icon Java. The Java Control Panel will open.
  3. To access the settings, go to the tab Update.
    Note.
    • Tab Update may not be available if your network administrator has disabled the Java update feature during installation.
    • If you are not logged in using account administrator, the Java update notification settings will not be available and the user will not be able to change them.
  4. To set up automatic check Availability of updates for the Java update feature, select the checkbox.
  5. To disable the Java update feature, uncheck the box Automatically check for updates.

Change notification settings

There are two notification options:

  • Before installation Use this setting to enable automatic downloading and configure notifications to be received before a Java update is installed.
  • Before download and before installation This is the default setting. This setting is used to configure whether to receive notifications before a Java update is downloaded and installed.

Change update schedule

You can change how often and when you receive update notifications.
Manual update options

You can check for updates manually by pressing the button Update now at the bottom of the Update tab in the Java Control Panel.


Install new update
Latest versions of installation packages Java RE available on the Oracle website

Uninstalling Java

It is always recommended to use the latest version Java, as it contains updates and improvements to previous versions. You can check if your computer has the latest version Java by visiting the Java Verification web page.

It is highly recommended to remove from your system all previous versions Java.
Saving old and unsupported versions Java is serious security risk.
Removing previous versions from the system Java guarantees application execution Java on a system with the latest security and performance enhancements.

Spoiler: Java removal instructions

Uninstalling older versions of Java is the same as uninstalling any other software from a Windows system.

Windows 7 and Vista

  1. Select Start.
  2. Select.
  3. Select Programs.
  4. Select Programs and Features.
  5. Select the program you want to remove and click Remove
To remove programs you may need administrator rights.

Windows XP

  1. Select Start.
  2. Select Control Panel(Control Panel).
  3. In Control Panel, click Add/Remove Programs.
  4. The Add/Remove Programs window displays a list of all software products installed on the system, including software Java. Highlight software, which you want to delete, and click the button Remove.

When writing the instructions, information was used from the sites Java.com and Wikipedia

Enabling/disabling JavaScript in a browser is not the whim of sophisticated users, it is not a procedure that concerns only programmers and webmasters, it is not experiments with settings. These are necessary safety measures! Even if you have only taken your first step on the Internet, knowing how to enable javascript in Firefox and, accordingly, disable it, will definitely come in handy. More specifically, it will save your PC from many problems and troubles associated with viruses; will make walking around sites more comfortable.

NO: Before we start mastering the FF settings in the context of this task, in order to avoid confusion, let's find out what Javascript is and what Java is. Despite the similarity of letters, these are two different concepts. Or rather, two programming languages ​​that have fundamental differences between themselves. Don't confuse them! In this article, we will look in detail at how to work with both Java and Javascript add-ons.

Disable/enable JavaScript in Firefox

Previously (before version 23 was released), you could disable javascript in Firefox with one mouse click. But, alas, these times have sunk into oblivion. Now, to solve this problem you have to put in a little more effort.

1. In your browser's address bar, type "about:config" and press ENTER.

2. Before you disable javascript in firefox , read the warning message “Be careful...” and only then click the “I promise...” button.

3. On the settings tab, in the “Search:” column, create a request - (without parentheses).


4. Find the directive of the same name (javascript.enabled) in the “Settings name” field. Right-click on it. Activate the “Switch” function in the context menu.


The setting value should change from “true” to “false”.

5. Close the "about:config" tab. Restart your browser.

Enable/disable Java in Firefox

In order to enable java in firefox, the first thing you need to do is download it from the website and install it on Windows. Because Java is a standalone software platform (used not only by browsers, but also by other desktop applications).

1. Open the Java download page in your browser - java.com/ru/download/. Or type the query “download Java” into a search engine and follow the first link in the results.


2. Click the “Download Java” button or open the “All downloaded files...” section.

3. Download the installer to your PC and install it on your system.

The next time you launch the browser, it will “detect” installed platform Java and will automatically connect to its software shell as an additional plugin.

Additionally, you can disable or enable java support in firefox through the settings menu:

1. In the "Tools" section, click "Add-ons".

2. Go to the "Plugins" tab.

3. Find Java Deployment Toolkit and Java(TM) in the list of connected plugins.

4. In their field, in the drop-down menu (located to the right of the name), set the required value - “Always enable”, “Never enable”.

5. Restart your browser.

The above methods for disabling/enabling Java and Javascript are based on using exclusively regular funds Firefox browser. It is worth noting that they are not the only ones. These settings are also managed through special browser extensions.


2024 gtavrl.ru.