1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

New MS Security Risk--Javaprxy.dll COM object

Discussion in 'Security and Privacy' started by Welshjim, 2005/07/07.

Thread Status:
Not open for further replies.
  1. 2005/07/07
    Welshjim

    Welshjim Inactive Thread Starter

    Joined:
    2002/01/07
    Messages:
    5,643
    Likes Received:
    0
    You may have already seen various articles about
    "A security vulnerability in the Javaprxy.dll COM object "
    There are several disquieting news articles and then there are MS' own mentions
    http://support.microsoft.com/default.aspx?scid=KB;EN-US;903235
    http://www.microsoft.com/technet/security/advisory/903144.mspx

    I am sure this is a legitimate problem for many, but buried in the first article is the following
    So it would seem, if you run Sun's Java and do not run MSJVM, the security risk does not apply to you, and the workarounds in the second MS article above are not needed.
     
  2. 2005/07/12
    Welshjim

    Welshjim Inactive Thread Starter

    Joined:
    2002/01/07
    Messages:
    5,643
    Likes Received:
    0
    Anyone who did not yet install the fix for javaprxy.dll COM Object
    http://support.microsoft.com/defaul...KB;EN-US;903235
    will probably get it offered in today's new MS Updates using Windows Update.
    The MS Security Bulletin article is
    http://www.microsoft.com/technet/se...n/MS05-037.mspx
    If you look under Vulnerabilities, you can find that
    1) This indeed applies only if you have MSJava VirtualMachine (or components) installed.
    2) However, there are many ways of getting MSJVM dependent files installed.
    3) There is a Diagnostic Tool to determine if you have such files.
    http://www.microsoft.com/downloads/...&displaylang=en
    As mentioned earlier, I do not have MSJVM on my PC nor do I have javaprxy.dll. However, Windows Update offered the fix to me today.
    When I ran the tool mentioned in 3), it confirmed that I do not have MSJVM installed, but I have a long list of files which are considered MSJVM dependent. So I guess that is why I am offered the fix.
    I went ahead and installed it, just to get rid of the "reminder" icon.
     

  3. to hide this advert.

Thread Status:
Not open for further replies.

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.