VULHUB ™

The Virtual Machine is a component of various programs and operating systems that handles the execution of Java code. All Microsoft VMs with build numbers between 2000 and 3187 inclusive have been found to contain a weakness whereby a Java applet could take any action on the local machine that the user could take. This is possible because the MS VM allows 'cast', or conversion, operations to be done on classes, which creates the opportunity for a 'public' class to be converted to 'private', thereby increasing the privileges of the code within that class. This action could not be coded in a regular java compiler, but the java binary could be edited spoecifically to cause the cast operation.

The Virtual Machine is a component of various programs and operating systems that handles the execution of Java code. All Microsoft VMs with build numbers between 2000 and 3187 inclusive have been found to contain a weakness whereby a Java applet could take any action on the local machine that the user could take. This is possible because the MS VM allows 'cast', or conversion, operations to be done on classes, which creates the opportunity for a 'public' class to be converted to 'private', thereby increasing the privileges of the code within that class. This action could not be coded in a regular java compiler, but the java binary could be edited spoecifically to cause the cast operation.