Poison applet blights browsers

[Joe Gronlund]

Crackers can use a malicious Java applet to hijack Internet sessions - leaving victims not so blissfully unaware.

Exploiters can re-direct Web traffic once it has left the proxy server to a destination of the attacker's choice, Microsoft warns.

The software giant has issued a patch which it describes as "critical" for client systems. Netscape advises users to upgrade to either version 6.2 and 6.2.1 of its browser (which includes an updated Sun JVM plug-in) that guards against this potential risk.

http://www.theregister.co.uk/content/55/24295.html

[Jake Bunce]

*laugh*

this is becoming a regular thing..

[nuno]

hmmm
this is starting to get quite annoying, all these M$ bugs, arghhh
unbelievable

[Mr. X]

Netscape advises users to upgrade to either version 6.2 and 6.2.1 of its browser (which includes an updated Sun JVM plug-in) that guards against this potential risk.

[nuno]

Who should read this bulletin: Customers using Microsoft® Internet Explorer® in a configuration where a proxy server is interposed between the browser and the Internet.

http://www.microsoft.com/technet/sec...n/MS02-013.asp

[dabean]

Sun JVM is also affected, unknown number of previous versions on a undisclosed number of platforms. But 1.3.1_02 appearing for all platforms indicates the scope of the exploit.

See Sun Bulletin 00216 (when its released).