Microsoft offers patch for Java VM flaw
Published: 06 Mar 2002 09:50 GMT
A flaw in Microsoft's Java Virtual Machine could allow hackers to hijack a browser and redirect traffic, capturing sensitive data such as the person's passwords, Microsoft has revealed.
The company disclosed the flaw on Monday on its Web site and posted a patch intended to rectify the problem.
A Java Virtual Machine converts programs written in the Java language into machine code that computers can read. That lets programs run on many different computer systems -- such as those using Apple's Mac OS or Microsoft's Windows -- without having to be rewritten for each operating system.
To exploit the flaw, a hacker would lure a person to a site where a malicious Java applet is running. In order for the exploit to work, the victim would have to have Internet Explorer configured to access Internet resources via a proxy server. The flaw would let a hacker view the information as it passes through the proxy server.
People whose browsers are not configured to use a proxy server, which includes most home users, are not at risk, Microsoft said.
Since the beginning of the year, the Redmond, Wash.-based company has placed a greater emphasis on the security of its software products, though analysts say that tangible results have yet to emerge in a significant way.
For all security-related news, including updates on the latest viruses, hacking exploits and patches, check out ZDNet UK's Viruses and Hacking News Section.
Have your say instantly, and see what others have said. Go to the Security forum.
Let the editors know what you think in the Mailroom.
Did you find this article useful?
38 out of 82 people found this useful
- Share this article:
