Virtual Machine Sandbox Vulnerability

A security vulnerability exists in the Microsoft® virtual machine (Microsoft VM) that could allow a Java applet to take unauthorized actions on the computer of a web site visitor.

Issue

The Microsoft VM is a virtual machine for the Win32® operating environment. It runs atop Microsoft Windows® 95, 98 or Windows NT®. It ships as part of each operating system, and also as part of Microsoft Internet Explorer. The version of the Microsoft VM that ships with Microsoft Internet Explorer 4.0 and Internet Explorer 5.0 contains a security vulnerability that could allow a Java applet to operate outside the bounds set by the sandbox and take any desired action on the user's computer. If such an applet were hosted on a web site, it could act against the computer of any user who visited the site.

Affected Products

• Microsoft VM, all builds in the 2000 series (before, but not including, build 2439) and 3000 series (before, but not including, build 3186)

Download

Patch: http://www.microsoft.com/java/vm/dl_vm32.htm

Further Details

Source: Microsoft Corporation

Reference: Microsoft Corporation

Updated: September 8, 1999

>> Recommended Download - secure your PC from spyware, adware and malware now with Spyware Doctor <<