| ActiveMac | Anonymous | Create a User | Reviews | News | Forums | Advertise |
|
|
|
User Controls |
|
New User |
|
Login |
|
Edit/View My Profile |
|
|
|
|
|
|
|
ActiveMac |
|
Articles |
|
Forums |
|
Links |
|
News |
|
News Search |
|
Reviews |
|
|
|
|
|
|
|
News Centers |
|
Windows/Microsoft |
|
DVD |
|
ActiveHardware |
|
Xbox |
|
MaINTosh |
|
News Search |
|
|
|
|
|
|
|
ANet Chats |
|
The Lobby |
|
Special Events Room |
|
Developer's Lounge |
|
XBox Chat |
|
|
|
|
|
|
|
FAQ's |
|
Windows 98/98 SE |
|
Windows 2000 |
|
Windows Me |
|
Windows "Whistler" XP |
|
Windows CE |
|
Internet Explorer 6 |
|
Internet Explorer 5 |
|
Xbox |
|
DirectX |
|
DVD's |
|
|
|
|
|
|
|
TopTechTips |
|
Registry Tips |
|
Windows 95/98 |
|
Windows 2000 |
|
Internet Explorer 4 |
|
Internet Explorer 5 |
|
Windows NT Tips |
|
Program Tips |
|
Easter Eggs |
|
Hardware |
|
DVD |
|
|
|
|
|
|
|
Latest Reviews |
|
Applications |
|
Microsoft Windows XP Professional |
|
Norton SystemWorks 2002 |
|
|
|
Hardware |
|
Intel Personal Audio Player 3000 |
|
Microsoft Wireless IntelliMouse Explorer |
|
|
|
|
|
|
|
Site News/Info |
|
About This Site |
|
Affiliates |
|
ANet Forums |
|
Contact Us |
|
Default Home Page |
|
Link To Us |
|
Links |
|
Member Pages |
|
Site Search |
|
Awards |
|
|
|
|
|
|
|
Credits |
 |
Critical flaw in Windows could allow rogue Java code | |
|
||
| Time: 10:31 EST/15:31 GMT | News Source: TechRepublic | Posted By: Robert Stein | ||
|
One of the first security bulletins to rate Microsoft’s new, tougher Critical criteria is MS02-069, which includes notice of a COM Object Access Vulnerability that may let attackers run untrusted Java applets and therefore take over a Windows system remotely and perform almost any action and read or modify any file. The bulletin also covers seven other risks associated with the Microsoft Virtual Machine. | ||
|
Write Comment
Return to News |
Displaying 1 through 25 of 308 Last | Next |
The time now is
11:23:20 AM
ET.
Any comment problems? E-mail us |
| #1 By 20 (24.243.41.64) at 12/30/2002 10:47:55 AM |
|
What's great is is that in 2004, Microsoft won't be allowed to fix or patch the MS JVM according to the court ruling in the original Sun v. Microsoft case regarding Java.
As per the ruling, they could not add new features to the JVM, but could only patch discovered vulnerabilities. After 2004, no code changes, not even for critical fixes are allowed. |
| #2 By 135 (209.180.28.6) at 12/30/2002 11:20:11 AM |
|
Critical flaw in Windows could allow rogue Java code
Hehe. Ain't that the truth. That rogue Java code from Sun will be there any day now. :) |
| #3 By 20 (24.243.41.64) at 12/30/2002 11:53:49 AM |
|
#4: That's true. But Microsoft's JVM allows interaction with COM (ActiveX), so that's where the exploit lies.
MS's JVM and Sun's JVM are designed not to allow applets to do certain things, but that doesn't mean that there couldn't be a bug in the code which breaks this rule. It is, after all, designed and implemented by humans. |
| #4 By 7711 (68.45.63.108) at 12/30/2002 2:35:06 PM |
|
"Microsoft Security Bulletin MS02-069 Print
Flaw in Microsoft VM Could Enable System Compromise (810030) Originally posted: December 11, 2002" copied from the MS knowledge base... Why is this news on 12/30? |
| #5 By 20 (24.243.41.64) at 12/30/2002 5:32:05 PM |
|
#8: There is a Microsoft JVM and a Sun JVM.
Microsoft has always been in control of their JVM, likewise with Sun. This flaw is in the Microsoft JVM. The recent lawsuits from Sun is to get the SUN JVM included in Windows. |
| #6 By 8589 (66.169.175.34) at 12/30/2002 6:52:26 PM |
|
Well, for one thing "jview" needs to be run in a DOS window. And I have version 3809, and the affected versions are up to 3805.
Another late and lame post. |
| #7 By 20 (24.243.41.64) at 12/31/2002 12:03:52 AM |
|
#12: Yes, Sun will have to have a way to do that. I'm sure they probably have NOT thought of that since everything with Java comes too little too late.
This is why the ruling to put Sun's JVM in Windows is a good thing. Despite it being wrong and setting bad precedents, it will allow Sun what it's always wanted. And when Sun blows this gigantic opportunity, there will be no more arguments for Sun's competence with Java. It will be clear, Sun is completely incompetent as a competitor so any market share it loses to MS's .NET is only because of their incompetence, not because of anything MS did. |
|
Write Comment
Return to News |
Displaying 1 through 25 of 308 Last | Next |
The time now is
11:23:20 AM
ET.
Any comment problems? E-mail us |
