Internet Explorer "javaprxy.dll" Memory Corruption Vulnerability

**Steve** · 08-07-2005, 10:59 AM

Good old Internet Exploder has a new "extremely critical" vulnerability listed on Secunia.

The vulnerability is caused due to the javaprxy.dll COM object being instantiated incorrectly in Internet Explorer via the object tag. This can be exploited via a malicious web site to cause a memory corruption.

Successful exploitation allows execution of arbitrary code, but requires that the file "javaprxy.dll" exists on the system.

NOTE: "javaprxy.dll" is included with Microsoft Java Virtual Machine. Exploit code is publicly available.

The easy fix to this is to stop using a broken virtual machine and go and get Sun's version instead.

iMc · 08-07-2005, 12:43 PM

Originally Posted by Kez

Good old Internet Exploder has a new "extremely critical" vulnerability listed on Secunia.The easy fix to this is to stop using a broken virtual machine and go and get Sun's version instead.

One of the first things I do when installing Windows is get Sun Java. So much more stable. Never had a problem with it.

Bull Dog · 09-07-2005, 02:20 PM

I've always done likewise, don't trust M$.

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Internet Explorer download	Dooms	Operating systems & applications	4	17-06-2005 10:29 AM
Internet Explorer 7 Release Date!	Xaneden	General discussion	101	22-03-2005 03:30 PM
Can't get rid of internet explorer	liquid-fix	Operating systems & applications	6	18-09-2004 05:25 PM
Internet Explorer just CLOSES....	Zak33	Operating systems & applications	11	23-06-2004 05:57 PM
Internet Explorer Loading Problem	Kilrov	Help - technical & advisory	3	15-06-2004 03:57 PM

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)