Select the product you need help with
- Internet Explorer
- Windows Phone
- More products
MS03-011: Flaw in the Microsoft VM could enable system compromise
Article ID: 816093 - View products that this article applies to.
NoticeThe Microsoft virtual machine (Microsoft VM) update that was previously listed in this article is no longer available. For more information, visit the following Microsoft Web pages:
Technical UpdateJuly 17, 2003: This article was updated to add information about Windows 2000 Service Pack 4 and Windows Server 2003.
November 10, 2003: The "Restart Requirement" section was updated.
April 23, 2004: This article was updated to remove information about Windows 2000 Service Pack 4.
The Microsoft VM is a virtual machine for the Win32operating environment. The Microsoft VM is shipped in most versions of Windows and in most versions of Microsoft Internet Explorer. A new security vulnerability has been reported that affects the ByteCode Verifier component of the Microsoft VM. It occurs because the ByteCode verifier does not correctly look for certain malicious code when a Java applet is being loaded. The attack vector for this new security issue would likely involve an attacker creating a malicious Java applet and inserting it into a Web page that would exploit this vulnerability when it was opened. An attacker could then host this malicious Web page on a Web site or could send it to a user in e-mail. The present Microsoft VM has been updated to include a fix for this newly reported security vulnerability. This version of VM includes all previously released fixes to the VM.
There are a number of workarounds that you may be able to apply temporarily while you evaluate and test the new Microsoft VM:
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.
To determine the Microsoft VM build number on a computer that is running Windows 98, Windows 98 Second Edition, or Windows Millennium Edition, follow these steps:
For more information about how this patch applies to Windows 2000 Service Pack 4, click the following article number to view the article in the Microsoft Knowledge Base:
820101For more information about the differences between Windows XP Service Pack 1 and Windows XP Service Pack 1a, click the following article number to view the article in the Microsoft Knowledge Base:
(http://support.microsoft.com/kb/820101/ )Frequently asked questions about the Microsoft VM and Windows 2000 service pack 4
(http://support.microsoft.com/kb/813926/ )Differences between Windows XP Service Pack 1 and Windows XP Service Pack 1a
Article ID: 816093 - Last Review: June 30, 2009 - Revision: 17.0