Microsoft admits to another Java security hole

Get your patches here...

By Aled Herbert, 21 March 2002 07:40

NEWS Microsoft has issued a warning about another security hole in its software that could enable hackers to run malicious Jave programs on Windows machines. The first vulnerability permits a Java applet on a website to monitor a visitor's web surfing until the browser window is closed down, according to Reuters. The second hole allows a malicious Java program to run outside a restricted area on a user's computer. Microsoft and Sun released a joint bulletin about the first vulnerability, which affects the Java Virtual Machine (JVM), on 4 March. Both vulnerabilities are rated as 'critical' but as yet there have been no known attempts to exploit the holes. The update released by Microsoft on 4 March fixes both holes.

Post your comment

In order to post a comment you need to be registered and logged in.

Log in or create your silicon.com account below

Will not be displayed with your comment

By signing up for this service, you indicate that you agree to our Terms and Conditions and have read and understood our Privacy Policy.

Questions about membership? Find the answers in the Membership FAQ