Java vulnerability on Internet Explorer?

I've noticed that when I try to enter a certain site with Internet Explorer a Java written virus tries to attack me. Does anyone know anything about this? How can I fix it?

The first thing that the antivirus locates is a .exe. If I turn on Emergency Block right away the JVM doesn't start. However, if I don't turn on Emergency Block right away, the JVM starts and the antivirus detects a .class file. After that, the PC freezes for a while and I reset it (I won't wait to see what happens). When I restart, I find a folder named Sun with a lot of .class files inside.

Similar Messages

Java swing on Internet Explorer Urgent

hello,
I have simple applet. Which can be viewed on appletviewer , But if I try to view in Internet Explorer ,it gives nothing.
Plz help Me.

Go to this page to find out what version of Java your browser is using:
http://javatester.org/version.html
If it is not JDK 1.2 or higher, it doesn't support Swing or a whole lot of other really useful features that have been in Java for years. Blame Microsoft for that.
Then go and download the Sun Java plugin so that your browser will be using an up-to-date Java implementation.
Regards,
Dave Gilbert
http://www.jfree.org

How to create a java plugin for Internet explorer

Hi All,
I have recently started working on java,i need to a create a plugin which can launch any file type(say any file which draws a cube with some extension .abc).Where should i start my work from.What do i need to do first.Please help me out coz it is very important for my project work.
Any suggestions would be much appreciated.
Regards,
Deepti.

Hi Viravan,
I signed my applet as u said but for some reason the browser is not recognising the cert.The applet is reading a wrl file from my local C drive.I'm creating a plugin to show this applet in the browser window.this is all i have to do.i guess u will have an idea by looking at this program of mine.
Curves.wrl is the file which i'm reading from the Cdrive.
i even changed my policy file but in vain.
JAVA CODE
import java.awt.BorderLayout;
import com.sun.j3d.utils.applet.MainFrame;
import com.sun.j3d.utils.universe.*;
import javax.media.j3d.*;
import javax.vecmath.*;
import javax.vecmath.Point3d;
import com.sun.j3d.loaders.Scene;
import java.awt.GraphicsConfiguration;
import java.io.*;
import com.sun.j3d.loaders.vrml97.VrmlLoader;
import com.sun.j3d.loaders.Scene;
import com.sun.j3d.utils.behaviors.mouse.*;
import com.sun.j3d.utils.geometry.ColorCube;
import java.lang.*;
import java.applet.*;
import java.net.URL;
     public class Vrml2 extends Applet {
     private SimpleUniverse u=null;
     public BranchGroup createSceneGraph() {
     BranchGroup objRoot = new BranchGroup();
     //TransformGroup objScale = new TransformGroup();
     //Transform3D t3d = new Transform3D();
     //t3d.setScale(0.3);
     //objScale.setTransform(t3d);
     //objRoot.addChild(objScale);
     BoundingSphere bounds = new BoundingSphere(new Point3d(0.0,0.0,0.0),      100.0);
     Color3f bgColor = new Color3f(1.0f,1.0f,1.0f);
     Background bg = new Background(bgColor);
     bg.setApplicationBounds(bounds);
     objRoot.addChild(bg);
     Color3f light1Color = new Color3f(1.0f, 1.0f, 0.9f);
     Vector3f light1Direction = new Vector3f(4.0f, -7.0f, -12.0f);
     DirectionalLight light1 = new DirectionalLight(light1Color,      light1Direction);
     light1.setInfluencingBounds(bounds);
     objRoot.addChild(light1);
     TransformGroup objTrans = new TransformGroup();
     objTrans.setCapability(TransformGroup.ALLOW_TRANSFORM_WRITE);
     objTrans.setCapability(TransformGroup.ALLOW_TRANSFORM_READ);
     objTrans.setCapability(ColoringAttributes.ALLOW_COLOR_READ);     objTrans.setCapability(ColoringAttributes.ALLOW_COLOR_WRITE);     objTrans.setCapability(Material.ALLOW_COMPONENT_READ);
     objTrans.setCapability(Material.ALLOW_COMPONENT_WRITE);
     objTrans.setCapability(TransformGroup.ENABLE_PICK_REPORTING);
     //objScale.addChild(objTrans);
     objRoot.addChild(objTrans);
     VrmlLoader loader = new VrmlLoader();
     Scene s = null;
     try {
          s = loader.load("c:/documents and      settings/dk27/morph/curves.wrl");
     catch (SecurityException e) {
          System.out.println(" caught security exception by deepti");
          System.out.println(e);
     catch (Exception e) {
          System.out.println("Exception caught");
          System.err.println(e);
          System.exit(1);
     //objTrans.addChild(new ColorCube(0.2));
     objTrans.addChild(s.getSceneGroup());
     Transform3D yAxis = new Transform3D();
     Transform3D tr3d=new Transform3D();
     tr3d.lookAt(new Point3d(13.00,-2.5,11.83),new Point3d      (20.0,0.0,50.0),new Vector3d(0.0,1.0,0.0));
     tr3d.invert();
     //to rotate the cone left button
     MouseRotate behavior = new MouseRotate();
     behavior.setTransformGroup(objTrans);
     objTrans.addChild(behavior);
     behavior.setSchedulingBounds(bounds);
     //to zoom the cone middle button
     MouseZoom behavior1=new MouseZoom();
     behavior1.setTransformGroup(objTrans);
     objTrans.addChild(behavior1);
     behavior1.setSchedulingBounds(bounds);
     //to translate the cone right button
     MouseTranslate behavior2=new MouseTranslate();
     behavior2.setTransformGroup(objTrans);
     objTrans.addChild(behavior2);
     behavior2.setSchedulingBounds(bounds);
     objRoot.compile();
     return objRoot;
     public Vrml2() {
     public void init(){
     setLayout(new BorderLayout());
     GraphicsConfiguration config=SimpleUniverse.getPreferredConfiguration     ();
     Canvas3D c = new Canvas3D(config);
     add("Center", c);
     BranchGroup scene = createSceneGraph();
     SimpleUniverse u = new SimpleUniverse(c);
     u.getViewingPlatform().setNominalViewingTransform();
     u.addBranchGraph(scene);
     public void destroy(){
     u.removeAllLocales();
     public static void main(String[] args) {
     new MainFrame(new Vrml2(),600,800);
APPLET CODE:
<HTML>
<HEAD>
<TITLE>Morphing Applet</TITLE>
</HEAD>
<BODY>
<APPLET CODE = "Vrml2" CODEBASE = "." ARCHIVE = "Vrml2.jar" WIDTH = 202 HEIGHT = 177>
</APPLET>
</BODY>
</HTML>
the errors that it is displaying are
java.security.cert.CertificateException: Unable to verify the certificate with root CA
     at sun.plugin.security.TrustDecider.isAllPermissionGranted(Unknown Source)
     at sun.plugin.security.PluginClassLoader.getPermissions(Unknown Source)
     at java.security.SecureClassLoader.getProtectionDomain(SecureClassLoader.java:162)
     at java.security.SecureClassLoader.defineClass(SecureClassLoader.java:111)
     at java.net.URLClassLoader.defineClass(URLClassLoader.java:248)
     at java.net.URLClassLoader.access$100(URLClassLoader.java:56)
     at java.net.URLClassLoader$1.run(URLClassLoader.java:195)
     at java.security.AccessController.doPrivileged(Native Method)
     at java.net.URLClassLoader.findClass(URLClassLoader.java:188)
     at sun.applet.AppletClassLoader.findClass(AppletClassLoader.java:128)
     at sun.plugin.security.PluginClassLoader.findClass(Unknown Source)
     at java.lang.ClassLoader.loadClass(ClassLoader.java:297)
     at sun.applet.AppletClassLoader.loadClass(AppletClassLoader.java:108)
     at java.lang.ClassLoader.loadClass(ClassLoader.java:253)
     at sun.applet.AppletClassLoader.loadCode(AppletClassLoader.java:373)
     at sun.applet.AppletPanel.createApplet(AppletPanel.java:579)
     at sun.plugin.AppletViewer.createApplet(Unknown Source)
     at sun.applet.AppletPanel.runLoader(AppletPanel.java:515)
     at sun.applet.AppletPanel.run(AppletPanel.java:293)
     at java.lang.Thread.run(Thread.java:484)
java.lang.ExceptionInInitializerError: java.security.AccessControlException: access denied (java.lang.RuntimePermission modifyThreadGroup)
     at java.security.AccessControlContext.checkPermission(AccessControlContext.java:272)
     at java.security.AccessController.checkPermission(AccessController.java:399)
     at java.lang.SecurityManager.checkPermission(SecurityManager.java:545)
     at sun.applet.AppletSecurity.checkAccess(AppletSecurity.java:139)
     at java.lang.ThreadGroup.checkAccess(ThreadGroup.java:279)
     at java.lang.ThreadGroup.getParent(ThreadGroup.java:140)
     at javax.media.j3d.MasterControl$23.run(MasterControl.java:3077)
     at java.security.AccessController.doPrivileged(Native Method)
     at javax.media.j3d.MasterControl.<clinit>(MasterControl.java:3070)
     at javax.media.j3d.VirtualUniverse.<clinit>(VirtualUniverse.java:206)
     at Vrml4.init(Vrml4.java:110)
     at sun.applet.AppletPanel.run(AppletPanel.java:344)
     at java.lang.Thread.run(Thread.java:484)
Exception:java.io.FileNotFoundException: D:\JDK13~1.1\lib\flavormap.properties (The system cannot find the file specified) while loading default flavormap.properties file URL:file:D:\JDK13~1.1\lib\flavormap.properties

Java not working in Internet Explorer

I normally use another browser (Google Chrome) but need to use Internet Explorer for a particular online banking service. This service requires a Java applet.
I have the current Java environment (as at 21.3.12), SE 6 Update 31.
Java works in Chrome but does not work in IE8 or IE9.
I have un-installed and re-installed Java several times, tried going back to IE8, turned off ActiveX filtering, confirmed Java scripting is on, checked add-ins are managed correctly and so on and so on, without success. Given Java works it is not a Java
issue but must be an IE issue.
Are there any additional steps or diagnostics I can run to try to identify the problem as I need this to be resolved for the purposes of running my business.
Many thanks!

Hi guys.
I'm having an issue like this and none of the solutions above helped me.
I'm trying to open a specific web page that is not working with Java only on Internet Explorer (7, 8 nor 9). If I try to open in Google Chrome or Firefox it goes fine.
I've tried various versions of Java and all my tries were done both on Windows XP Professional and Windows 7 Professional.
The weird thing is that when I test it through Java webpage or some other page, it goes fine. It is not working only for this specific webpage.
This is the webpage:
http://iweb03ds.magnaclosures.com/stconf.nsf/meeting/mid3FC5EBB1D59C830685257A2900420436
It is a meeting webpage for our company to present their work to our clients and suppliers. I've also followed their own step-by-step advises, but no good either.
Could anyone help me on that?

Switching VM in Internet Explorer

There are articles how to switch between Sun Java and Microsoft VM Java in MS Internet Explorer 6. Unfortunately the descriptions fail to say, that you need administrator rights.
Or at least in the case of Windows XP Professional wSp2 client in the Windows 2003 Active Directory environment it is the case.
Any idea, how to switch between SUN and MS VM with domain user rights?
I would appreciate your comments/ help.
Regards,
Milos

if you can install the latest ie.. it has the vm for java

Oracle forms 11g running forms on internet explorer error

Hi , this is abhishek I am new to oracle forms 11g . My question is that when I run the forms 11g on internet explorer it shows an error . The error is too many tries.
first I like to clarify that before running the forms i start the weblogic server ,along with admin server for weblogic and opmn managed components, i give the user name and password to start the weblogic server, everything starts smoothly . even I have jre 1_6_29 installed to start the servlet . Main problem starts when the java runs the internet explorer browser then a box appears asking for user name and password and database connect string , then after putting the username and password it again asks for the username and password.It happens three times and after that an error appears in a dialog box which shows too many tries . I also checked the net configuration asistant with the local net service name configuration there it shows the service name which is orcl.Home and then TCP --->Host name is localhost with 1521 as standard port number --> yes perform the test and the result is written connecting test successful . what is wrong with the instance , the http listener is working perfectly then why this error is coming, is there something to do with the browser , but the browser is supporting java very well .. please help

I have found the file but it does not have any path except forms_path,oracle_home,webutil_config,etcCurious, my default.env had the following default TNS_ADMIN entry:
# TNS Entry to locate the database
TNS_ADMIN=D:\Oracle\Middleware\asinst_1\configI modified this entry to point to the location where my tnsnames.ora and sqlnet.ora files are located. I use a generic location and share them accross installed Oracle products rather than maintain seperate copies of these files in each Oracle Home. For example, I commented out the original entry and added a new one.
#TNS_ADMIN=D:\Oracle\Middleware\asinst_1\config
TNS_ADMIN=D:\oracle\tns_adminCraig...

Microsoft Security Advisory (2757760): Vulnerability in Internet Explorer

Vulnerability in Internet Explorer Could Allow Remote Code Execution
Microsoft is investigating public reports of a vulnerability in Internet Explorer 6, Internet Explorer 7, Internet Explorer 8, and Internet Explorer 9. Internet Explorer 10 is not affected. Microsoft is aware of targeted attacks that attempt to exploit this vulnerability.
A remote code execution vulnerability exists in the way that Internet Explorer accesses an object that has been deleted or has not been properly allocated. The vulnerability may corrupt memory in a way that could allow an attacker to execute arbitrary code in the context of the current user within Internet Explorer. An attacker could host a specially crafted website that is designed to exploit this vulnerability through Internet Explorer and then convince a user to view the website.
On completion of this investigation, Microsoft will take the appropriate action to protect our customers, which may include providing a solution through our monthly security update release process, or an out-of-cycle security update, depending on customer needs.
Article including some suggested actions is continued here: http://technet.microsoft.com/en-us/security/advisory/2757760
Related: http://nakedsecurity.sophos.com/2012/09/17/new-ie-zero-day-exploit-poison-ivy/
ThinkPad: T530 / X1 Gen 2 / Helix - Yoga: Tablet 2 Pro (Win) / Yoga 3 Pro
If you find a post helpful and it answers your question, please click the "Accept As Solution" button.
Lenovo Advocate ~ I am not employed by Lenovo or Microsoft. I am a volunteer.
Microsoft MVP - Consumer Security
SpywareHammer

The suggested setting in EMET for IE is to be protected against ALL the available exploits --- that is to say, including Mandatory ASLR as well as BottomUpASLR. Unless you experience an issue with it [and the EMET Notifier should advise you of any problems it encounters], there's no reason to "generically" turn-off MandatoryASLR.
Having said that, here are the common exceptions people need to be aware of:
1) Windows Media Player users should UNcheck Mandatory ASLR for their Windows Media Player.
2) Skype users should UNcheck EAF for their Skype.
3) Some versions of Trusteer Rapport are having trouble with Microsoft EMET - web browsers do not open at all or open a blank, unusable window. In such case, Windows XP users should UNcheck EAF protection for each of their web browsers; and Windows Vista and 7 users should UNcheck Mandatory ASLR protection for each of their web browsers.
4) Configuring the system setting for DEP changes a boot option for Windows. For systems using BitLocker, this will cause BitLocker to detect that “system boot information has changed” and you will be forced to enter your recovery key the next time you boot Windows. It is highly recommended that you have your recovery key ready before changing the system configuration setting for DEP on a system with BitLocker enabled.
Windows 7 Pro SP1 (64-bit), avast! V7 Free, MBAM Pro, Windows Firewall, EMET, OpenDNS Family Shield, IE9 & Firefox (both using WOT & KeyScrambler), MVPS HOSTS file, SpywareBlaster, WinPatrol PLUS, SAS (on-demand scanner), Secunia PSI.
[I am experimenting with Sandboxie, and believe computer-users who sandbox are acting prudently.]

Internet explorer allows me to open certain information/tabs which are somehow connected to java script but Firefox won't. This just started happening a few days agoyet my javca script is enabled. what is the problem/fix. I'm a novice with computers

I am not sophisticated at understanding computer language. What I know is that 3 things have happened in the last 2 weeks.
1.My yahoo account which I go to from Mozilla firefox 4.0.1 now requires me to click on a link that says it disables updates. Then my homepage seems to be ok/normal except:
2.One of the email links tries to open a site called Ok Cupid and that site is really distorted and unreadable
3. another website www.texastrails.org has a tab called 'docs' which can be reached from "member portal". There should be documents in Word and adobe reader on the left side of the screen which can be opened normally. These do not exist now and the texas trails webmaster says it has to do with Java Script. (it does open in Internet Explorer)
Why would these two sites open in IE but not firefox?
Note that I went to "My Computer" and found I have environment 5.0 Java6 update 24 and J2SE Runtime environment 5.0update 6 on different lines. I have no clue what these mean:-)
I also click on Firefox "tools" and see that java is checked/enabled.

This is not an answer. I have the same problem, what gives? None of the "solutions" have worked. The only thing left I haven't tried is resetting my IP an disabling my routers firewall, which is dangerous. Guess I might just keep on using IE instead, sure it's annoying, but hey it works.

Java and Internet Explorer automation

Hi,
I would like to create a routine in java that would simulate a user browing the web.
Ex: A user vistiting a certain page, clicking on a few links etc...
Is their a java library that can server as a bridge beetween java and internet explorer in order to automate this process.
Thank you.

You want to see it all happening on the screen? If so, you could maybe look into IECanvas or some other Java/COM bridge that would let you embed IE in the Java app. I'm not sure what kind of API is available such that would allow for that.
Another idea is java.awt.Robot which would let you move the mouse and enter text and click on things on any application, but the problem here is that you'd need to know exact coordinates to click on. You could use it to grab screen shots if you can deal with the image manipulation to figure out what is where.

How to stop the information bar cmoing in the Internet Explorer with java

hai all,
iam new to this forum and posting a question on java application where i had a problem.
I work in a software company. we have developed an application and it is in production and we had a small problem. we have deifferent kinds of reports te users can get dynamicalty based on theirn requet parameters. so when we are deployingthe application on server and accessing it from the client machine(bothe the server and client are diferent i mean different machines) they get an information bar that
"To help protect your security, Internet Explorer blocked this site from downloading files to your computer. Click here for options". and for this we have given them the solutions for setting the security features for the
Internet Explorer . but they want it to be done thru program such that they dont want to see that message. i need a small help for this.
It would be very help ful for me in my carreer if i get a solution for this.

I'm not 100% sure, but doesn't all applets have the same popup bar? I guess you can tell your customers to turn off their popup blocker beforehand. (This is what my uni does with WebCT Vista)

Java applet not showing up in Internet Explorer 8

Hi,
I have an applet tag in a JSP, and it is not working in Internet Explorer 7 and 8.
Yes, I have read that the applet tag was deprecated - the problem is that it is working for my colleague, also in IE8.
Java is enabled on my machine/IE options.
Could anyone please suggest what the issue might be?
Thanks.

I haven't tried resizing the applet yet. Since you all mentioned it I am going to play with that later today.
To elaborate on the fix, yes - updating to Java 6 - 16 will allow IE 8 to display applets.
Just in case anyone else runs into this issue as well:
I am running Vista on a 64 bit.
It has two directories named Program Files:
One named just "Program Files" - evidently for the 64 bit stuff.
Another named something like "Program Files (x86)".
Apparently it will look into "Program Files" - the 64 bit one by default.
I haven't found a 64 bit version of Java 6 - 16 to install - the only 64 bit one is some version of 1.5, unless I am missing something, so the Java 6 - 16 installed into the Program Files(x86), and 1.5 into Program Files. Windows pointed JAVA_HOME to 1.5 because it looks into the Program Files by default.
The result was that when I went to the Java site it analyzed my Java version and told me I have the most up to date version. But -
java -version on the console returned 1.5. Confusing at first, but on such systems, apparently the JAVA_HOME has to be explicitly repointed to the (x86) Program File directory.

PDF will not open in my firefox browser although i have updated my jave and adobe, they open in internet explore

I recently downloaded the latest version of adobe reader, jave and the newest firefox version. I think 3.6.4 (but i could be mistaken). Ever since my firefox updated today 3/8/10 it has stopped opening pdf's in browser. All i see is a blank screen or sometimes just the loading blue bar. It will not open. I do not have this problem when i try an open the same files using internet explorer.

See if the solutions in this article help to solve your problem: [[Opening PDF files within Firefox]]. For more information on using Adobe within Firefox, see [[Using the Adobe Reader plugin with Firefox]].

Java Applet Background Color Problem on Internet Explorer

Hi,
Please check out the following URL:
http://www.utopiainteractive.com/clients/AkonFinal/glossary.htm
The menu bar is writting in Java Applet. If you scroll down the page, and scroll back up, I see white background as I scroll back up. It happens only on Internet explorer. Neither Java Applet nor HTML Body bg color is white. I am kinda lost, and any help would really be appreciated.
Thank you and look forward to hearing from someone soon.
Sachin

Hi,
Well I used HtmlConver utility to generate applet html code, so I assume nothing is wrong with Object tag. Do you know what could cause this problem on Internet explorer? To be honest, I spent last couple of days, but I am just lost. It absolutely works fine on Netscape.
Thanks,
Sachin

Java Applet not displaying in Internet Explorer Options

For some reason my Internet Explorer browser is refusing to use Java. I've installed IE 8 and reinstalled the Java application, yet when I go to check the IE Options, the Java Applet does not even display as a selectable option. It works just fine in Firefox, which is what baffles me. As a direct result of this, my Java Desktop applications aren't working properly either. I have one that creates custom playing cards and I can change the backgrounds and view all my cards, but it will not save the information, an error of which I believe to be related to how Java isn't working with IE 8.
Any ideas? I've made sure that my virus protection is up to date. I'm at my wits end.

I'm having this exact or a very similar issue on Windows 7 Home Premium (64 bit) laptop with JRE 1.6.0_17
smccoy wrote:
Java doesn't work with my Internet Explorer, but it does work with Firefox. After deleting "temporary Internet Files" and restarting Internet Explorer 8.0.7600.16385 Java applets work on the browser.
>
Java does not appear in my Internet Options advanced tab.This is the main problem I have, Java is nowhere to be seen under Internet Options
>
And, in the Java control panel advanced default browser for Java, the IE is checked but greyed out. Same thing here
Only thing I can think of is that I've installed both the 32 bit and 64 bit JRE on this machine so I can have Java on both IE 32 bit an IE 64 bit.
Mght that come into play here?

Internet Explorer in Java Application

Hello,
I would like to embed MS Internet Explorer in java application.
What I am trying to do is to add voice-interface where user can access menu items, toolbar buttons etc by using speech, instead of clicking by mouse or keyboard. I need to have Internet Explorer with all of its menus' etc but I would like to have a control to modify them and add my own functionality such as speech recognition commands.
Any Help will be greatly appreciated.
Regards,
Asaf

Get njawin package at
http://www.simtel.net/product.php?id=60701&sekid=0&SiteID=simtel.net
There you will find an example for MS WebBrowser (WebBrowserExample.jar). The example sources are packed in JAR.

Java vulnerability on Internet Explorer?

Similar Messages

Maybe you are looking for