Microsoft VM
Note: I am not a fan of Sun Java on IE implementation. Microsoft VM has better integration with IE on my computer and I think is runs faster! What do you think?
A security vulnerability has been reported that affects the ByteCode Verifier component of the Microsoft VM. It occurs because the ByteCode verifier does not correctly look for certain malicious code when a Java applet is being loaded. The attack vector for this new security issue would likely involve an attacker creating a malicious Java applet and inserting it into a Web page that would exploit this vulnerability when it was opened. An attacker could then host this malicious Web page on a Web site or could send it to a user in e-mail. The present Microsoft VM has been updated to include a fix for this newly reported security vulnerability. This version of VM includes all previously released fixes to the VM. All builds of the Microsoft VM up to and including build 5.0.3809 are affected by these vulnerabilities.
MS03-011: Flaw in the Microsoft VM Could Enable System Compromise: http://support.microsoft.com/default.aspx?scid=kb;EN-US;816093
To determine the Microsoft VM build number on a computer, follow these steps:
- Click Start, and then click Run.
- In the Open box, type command, and then click OK.
- At the command prompt, type jview, and then press ENTER.
Or visit Java Test Site - http://www.javatester.org/
The following is a our step-by-step of how to (re)-install and update Microsoft VM 5.0:
Step 1: Download and run Build 5.0.3805 (Download from Alt Site)
Step 2: For all Windows OS - Download (Alt Site) and run Build 5.0.3810 - For for Win2kSP4 you need to Download Q816093 (Alt Site) and Run this patch.
Note: if you have difficulty downloading the above files, it may be your settings on the browser that may have set to blocked it. How to allow IE to download files from an FTP server? Click here to find out how. Try browsing the folder and download directly. Or type ftp://ftp.mac-net.com/util/ (http://ftp.mac-net.com/ftp/util/) on your browser's address.
Step 3: Run the version check again.
Step 4: Test that it is working properly - visit http://www.c360.ca/ it has a good visual system that makes use of Microsoft VM Engine.
To determine the Microsoft VM build number on a computer, follow these steps:
- Click Start, and then click Run.
- In the Open box, type command, and then click OK.
- At the command prompt, type jview, and then press ENTER.
The version information appears on the first line as "Version n.nn.nnnn," where the last four digits are the build number. For example, 5.00.3810 is Microsoft VM build 3810.
Note:
Be aware, however, that after Sept. 30, 2004, MS will apparently no longer be distributing Java or providing any support for Java including security fixes. (It's unclear as to how 6/26/03 court decision will affect this - Microsoft is involved in a law suit about the (future of the) implementation of (Sun's) Java Virtual Machine in its operating systems.
Update:
MS VM life extended - The Microsoft Java Virtual Machine is no longer available from Microsoft directly due to legal wrangling with SUN. However, recognizing the need to provide a smooth transition for current users of the Microsoft Java Virtual Machine (MSJVM), Sun Microsystems and Microsoft have agreed to extend Microsoft's license to use Sun's Java source code and compatibility test suites. This extension allows Microsoft to support the MSJVM until 31 December 2007, providing customers with the ability to transition from the MSJVM on a schedule and plan that is most effective for them. August 2004.
|