FULL PRODUCT VERSION :
java version "1.4.2_09"
Java(TM) 2 Runtime Environment, Standard Edition (build 1.4.2_09-b05)
Java HotSpot(TM) Client VM (build 1.4.2_09-b05, mixed mode)

ADDITIONAL OS VERSION INFORMATION :
Windows XP SP2

A DESCRIPTION OF THE PROBLEM :
JRE/Java installation is impossible if If a file named "c:\program.exe" exists.

This problem is typical to applications that do not handle double quotes properly in command line strings when launching other executables.

For example, running the following command:
  c:\program files\somethin.exe arg1 arg2"
will actually first try running "c:\program.exe" with arguments "arg1" and "arg2".

The proper way to run programs is with this kind of command-line:
  "c:\program files\somethin.exe" arg1 arg2"

It might also be possible to use this bug to perform a priviledge escalation attack (against the user who runs the Java setupper).


STEPS TO FOLLOW TO REPRODUCE THE PROBLEM :
1. Copy any executable file to "c:\program.exe"
2. Try installing JRE or JDK
3. Installation hangs once it gets to running patchjre.exe (it never finishes)



EXPECTED VERSUS ACTUAL BEHAVIOR :
EXPECTED -
Installation finishes without errors.
ACTUAL -
Installation hangs and never completes.

REPRODUCIBILITY :
This bug can be reproduced always.

CUSTOMER SUBMITTED WORKAROUND :
Make sure no "c:\program.exe" exists.