Microsoft offers work-around for IE vulnerability

Iria · Jul 7, 2005, 04:37 AM

JULY 06, 2005 (IDG NEWS SERVICE) - Microsoft Corp. has released software that can be used to mitigate a critical vulnerability in Internet Explorer that was first reported last week.

The bug, which concerns the way Internet Explorer handles ActiveX components, can cause the browser to crash and could be used by an attacker to run unauthorized software on the user's machine, Microsoft said.

Yesterday, Microsoft released software that in the registry disables a file called Javaprxy.dll, which is used to run these components in Internet Explorer. This file is used by the Microsoft Java Virtual Machine, the company said.

Microsoft has not yet decided whether it will release a software patch that would fix the underlying problem, a spokeswoman said. "The work-around that they've offered here doesn't fix the underlying vulnerability, but it removes the functionality," she said.

__________
Read More / Source: ComputerWorld

Matth · Jul 7, 2005, 09:09 PM

So is this an issue if you have Sun java, instead of Microsoft?

There doesn't seem to be a Javaprxy.dll present in Sun java

Jul 7, 2005, 04:37 AM	#1
Iria DriverHeaven Extreme Member Join Date: Apr 2004 Posts: 7,275 Rep Power: 89	Microsoft offers work-around for IE vulnerability JULY 06, 2005 (IDG NEWS SERVICE) - Microsoft Corp. has released software that can be used to mitigate a critical vulnerability in Internet Explorer that was first reported last week. The bug, which concerns the way Internet Explorer handles ActiveX components, can cause the browser to crash and could be used by an attacker to run unauthorized software on the user's machine, Microsoft said. Yesterday, Microsoft released software that in the registry disables a file called Javaprxy.dll, which is used to run these components in Internet Explorer. This file is used by the Microsoft Java Virtual Machine, the company said. Microsoft has not yet decided whether it will release a software patch that would fix the underlying problem, a spokeswoman said. "The work-around that they've offered here doesn't fix the underlying vulnerability, but it removes the functionality," she said. __________ Read More / Source: ComputerWorld

Jul 7, 2005, 09:09 PM	#2
Matth Flash Banner Hater Join Date: Jun 2002 Location: UK Posts: 3,426 Rep Power: 93 System Specs	So is this an issue if you have Sun java, instead of Microsoft? There doesn't seem to be a Javaprxy.dll present in Sun java