On machines with MSJVM, IE8 crashs while installing an executa

  • Thread starter Thread starter On machines with MSJVM, IE8 cras
  • Start date Start date
O

On machines with MSJVM, IE8 cras

Guest
Hi,

The machines on which this problem was occurring had jre 6 update 13 as well

as MS Java Version 5.00.3155 installed.



Following steps would help you to reproduce the problem:-



1. Followings applications should be installed on the machine:-

a. OS Win XP SP3

b. jre 5 update 5 or above

c. MS Java Version 5.00.3155



2. IE8 memory protection should be enabled. To enable IE memory protection

follow the steps given below:-



a. Open IE and click on Tools->Internet Options

b. Go to Advanced tab

c. Check the checkbox “Enable memory protection to help mitigate online

attacksâ€Â



3. Download any executable (ex: Setup.exe) using the object tag in an html

page.



Sample html page:-









New Document

















Test







4. Load the html page.



Observation:- It is observed that exe will start executing, cancel the

executing and wait for 2 to 3 mins.

After 2 to 3 mins it is observed that IE will reload again (atleast 2

times) or a crash occurs.



After executing the above steps with memory protection off (described in

step 2, uncheck the checkbox), this issue was not observed.



Also uninstalling the MSJVM, resolved this issue.



Not able to figure out what's the relation between MSJVM and memory

protection off.



Following have been tried to resolve this issue and it did not work:-



1. Running IE in no add-on mode.

2. Switching off the anti virus application.

3. Resetting IE Advanced settings (RIES).

4. Disabling MSJVM throught browser advanced settings.

5. Installing the latest Sun's jre.



Thanks.





"Donald Anadell" wrote:



>

> "On machines with MSJVM, IE8 crashs" crashs@discussions.microsoft.com> wrote in message

> news:2FD8C3D2-BA43-4224-94D2-6788DBE42BC6@microsoft.com...

> > Hi,

> >

> > Frequent IE crashes were observed while installing an executable

> > downloaded

> > from a webpage. We found out that the issue comes up on machines with

> > following configurations and MSJVM installed:-

> >

> > Machine configurations:-

> >

> > OS: Win XP SP3

> > Browser: IE8


>

> Hummm...I've never experienced any issue of that nature here with the

> configuration you've described. You'd have to offer a little more detail

> about the executable in question how you determined that MSJVM was at fault.

>

> >

> > After uninstalling the MSJVM, this issue was resolved.

> >

> > I would like to know if MSJVM is shipped with Win XP SP3?


>

> No, beginning with "Windows XP SP1a" MSJVM was no longer bundled with the

> installation. If your installation CD is Windows XP SP1 then the MSJVM is

> installed.

>

> > Whether it is safe to uninstall MSJVM?


>

> It's always been safe to uninstall the Microsoft Java Virtual Machine.

>

> > If unstalling MSJVM in dangerous then what is the alternative solution?


>

> There is nothing inherently dangerous about uninstalling the MSJVM. Your

> alternative is to install the Sun Java Virtual Machine. The latest Sun JRE

> is version 6 Update 18.

>

> Good luck,

>

> Donald Anadell

>

>

> >

> > Thanks and Regards,

> > Ashwini


>

>

> .

>
 
"On machines with MSJVM, IE8 crashs"

wrote in message

news:C5643090-D4E9-4F7B-BB89-FBFAB8423697@microsoft.com...

>

> Hi,

> The machines on which this problem was occurring had jre 6 update 13 as

> well

> as MS Java Version 5.00.3155 installed.




The machine has a vulnerable version of the MSJVM installed on it. The

latest most secure version of the MSJVM is:

MSJVM Version 5.00.3810



If you type wjview into the Run Box, the dialog box that pops up should read

version 5.00.3810, or your machine is not secured. Visit the Windows Update

site and get the MSJVM updated.



If the problem still exists after you've updated the MSJVM to version

5.00.3810, then uninstall it and go with Sun's Java Virtual Machine.



Good luck,



Donald Anadell





>

> Following steps would help you to reproduce the problem:-

>

> 1. Followings applications should be installed on the machine:-

> a. OS Win XP SP3

> b. jre 5 update 5 or above

> c. MS Java Version 5.00.3155

>

> 2. IE8 memory protection should be enabled. To enable IE memory protection

> follow the steps given below:-

>

> a. Open IE and click on Tools->Internet Options

> b. Go to Advanced tab

> c. Check the checkbox "Enable memory protection to help mitigate online

> attacks"

>

> 3. Download any executable (ex: Setup.exe) using the object tag in an html

> page.

>

> Sample html page:-

>

>

>

>

> New Document

>

>

>

>

>

>

>

> classid="clsid:260EE74E-D335-40C4-93B5-65801C79A79R" CODEBASE="SetUp.exe"

> style="width:0%;height:0%">

> Test

>

>

>

> 4. Load the html page.

>

> Observation:- It is observed that exe will start executing, cancel the

> executing and wait for 2 to 3 mins.

> After 2 to 3 mins it is observed that IE will reload again (atleast 2

> times) or a crash occurs.

>

> After executing the above steps with memory protection off (described in

> step 2, uncheck the checkbox), this issue was not observed.

>

> Also uninstalling the MSJVM, resolved this issue.

>

> Not able to figure out what's the relation between MSJVM and memory

> protection off.

>

> Following have been tried to resolve this issue and it did not work:-

>

> 1. Running IE in no add-on mode.

> 2. Switching off the anti virus application.

> 3. Resetting IE Advanced settings (RIES).

> 4. Disabling MSJVM throught browser advanced settings.

> 5. Installing the latest Sun's jre.

>

> Thanks.

>

>

> "Donald Anadell" wrote:

>

>>

>> "On machines with MSJVM, IE8 crashs" > crashs@discussions.microsoft.com> wrote in message

>> news:2FD8C3D2-BA43-4224-94D2-6788DBE42BC6@microsoft.com...

>> > Hi,

>> >

>> > Frequent IE crashes were observed while installing an executable

>> > downloaded

>> > from a webpage. We found out that the issue comes up on machines with

>> > following configurations and MSJVM installed:-

>> >

>> > Machine configurations:-

>> >

>> > OS: Win XP SP3

>> > Browser: IE8


>>

>> Hummm...I've never experienced any issue of that nature here with the

>> configuration you've described. You'd have to offer a little more detail

>> about the executable in question how you determined that MSJVM was at

>> fault.

>>

>> >

>> > After uninstalling the MSJVM, this issue was resolved.

>> >

>> > I would like to know if MSJVM is shipped with Win XP SP3?


>>

>> No, beginning with "Windows XP SP1a" MSJVM was no longer bundled with the

>> installation. If your installation CD is Windows XP SP1 then the MSJVM

>> is

>> installed.

>>

>> > Whether it is safe to uninstall MSJVM?


>>

>> It's always been safe to uninstall the Microsoft Java Virtual Machine.

>>

>> > If unstalling MSJVM in dangerous then what is the alternative solution?


>>

>> There is nothing inherently dangerous about uninstalling the MSJVM. Your

>> alternative is to install the Sun Java Virtual Machine. The latest Sun

>> JRE

>> is version 6 Update 18.

>>

>> Good luck,

>>

>> Donald Anadell

>>

>>

>> >

>> > Thanks and Regards,

>> > Ashwini


>>

>>

>> .

>>
 
Hi,



I tried with installing MSJVM version 5.00.3810 but it didn't work for me.



Uninstalling the MSJVM doesn't seem to be a proper solution as there can be

applications on client's machine that could be dependent on it.



I even tried using the Diagnostic Tool for the Microsoft VM 1.0a to check if

the URL which we are trying to connect has any MSJVM dependency. But the

report generated by the tool showed that none of the files downloaded are

MSJVM dependent.



Thanks.



"Donald Anadell" wrote:



>

> "On machines with MSJVM, IE8 crashs"

> wrote in message

> news:C5643090-D4E9-4F7B-BB89-FBFAB8423697@microsoft.com...

> >

> > Hi,

> > The machines on which this problem was occurring had jre 6 update 13 as

> > well

> > as MS Java Version 5.00.3155 installed.


>

> The machine has a vulnerable version of the MSJVM installed on it. The

> latest most secure version of the MSJVM is:

> MSJVM Version 5.00.3810

>

> If you type wjview into the Run Box, the dialog box that pops up should read

> version 5.00.3810, or your machine is not secured. Visit the Windows Update

> site and get the MSJVM updated.

>

> If the problem still exists after you've updated the MSJVM to version

> 5.00.3810, then uninstall it and go with Sun's Java Virtual Machine.

>

> Good luck,

>

> Donald Anadell

>

>

> >

> > Following steps would help you to reproduce the problem:-

> >

> > 1. Followings applications should be installed on the machine:-

> > a. OS Win XP SP3

> > b. jre 5 update 5 or above

> > c. MS Java Version 5.00.3155

> >

> > 2. IE8 memory protection should be enabled. To enable IE memory protection

> > follow the steps given below:-

> >

> > a. Open IE and click on Tools->Internet Options

> > b. Go to Advanced tab

> > c. Check the checkbox "Enable memory protection to help mitigate online

> > attacks"

> >

> > 3. Download any executable (ex: Setup.exe) using the object tag in an html

> > page.

> >

> > Sample html page:-

> >

> >

> >

> >

> > New Document

> >

> >

> >

> >

> >

> >

> >

> > > classid="clsid:260EE74E-D335-40C4-93B5-65801C79A79R" CODEBASE="SetUp.exe"

> > style="width:0%;height:0%">

> > Test

> >

> >

> >

> > 4. Load the html page.

> >

> > Observation:- It is observed that exe will start executing, cancel the

> > executing and wait for 2 to 3 mins.

> > After 2 to 3 mins it is observed that IE will reload again (atleast 2

> > times) or a crash occurs.

> >

> > After executing the above steps with memory protection off (described in

> > step 2, uncheck the checkbox), this issue was not observed.

> >

> > Also uninstalling the MSJVM, resolved this issue.

> >

> > Not able to figure out what's the relation between MSJVM and memory

> > protection off.

> >

> > Following have been tried to resolve this issue and it did not work:-

> >

> > 1. Running IE in no add-on mode.

> > 2. Switching off the anti virus application.

> > 3. Resetting IE Advanced settings (RIES).

> > 4. Disabling MSJVM throught browser advanced settings.

> > 5. Installing the latest Sun's jre.

> >

> > Thanks.

> >

> >

> > "Donald Anadell" wrote:

> >

> >>

> >> "On machines with MSJVM, IE8 crashs" >> crashs@discussions.microsoft.com> wrote in message

> >> news:2FD8C3D2-BA43-4224-94D2-6788DBE42BC6@microsoft.com...

> >> > Hi,

> >> >

> >> > Frequent IE crashes were observed while installing an executable

> >> > downloaded

> >> > from a webpage. We found out that the issue comes up on machines with

> >> > following configurations and MSJVM installed:-

> >> >

> >> > Machine configurations:-

> >> >

> >> > OS: Win XP SP3

> >> > Browser: IE8

> >>

> >> Hummm...I've never experienced any issue of that nature here with the

> >> configuration you've described. You'd have to offer a little more detail

> >> about the executable in question how you determined that MSJVM was at

> >> fault.

> >>

> >> >

> >> > After uninstalling the MSJVM, this issue was resolved.

> >> >

> >> > I would like to know if MSJVM is shipped with Win XP SP3?

> >>

> >> No, beginning with "Windows XP SP1a" MSJVM was no longer bundled with the

> >> installation. If your installation CD is Windows XP SP1 then the MSJVM

> >> is

> >> installed.

> >>

> >> > Whether it is safe to uninstall MSJVM?

> >>

> >> It's always been safe to uninstall the Microsoft Java Virtual Machine.

> >>

> >> > If unstalling MSJVM in dangerous then what is the alternative solution?

> >>

> >> There is nothing inherently dangerous about uninstalling the MSJVM. Your

> >> alternative is to install the Sun Java Virtual Machine. The latest Sun

> >> JRE

> >> is version 6 Update 18.

> >>

> >> Good luck,

> >>

> >> Donald Anadell

> >>

> >>

> >> >

> >> > Thanks and Regards,

> >> > Ashwini

> >>

> >>

> >> .

> >>


>

>

> .

>
 
I'm going to stick my unwanted nose in here:



Isn't the MS-JVM unsupported for many years, and for that reason a

security risk?

---

Leonard Grey

Errare humanum est



On machines with MSJVM wrote:

> Hi,

>

> I tried with installing MSJVM version 5.00.3810 but it didn't work for me.

>

> Uninstalling the MSJVM doesn't seem to be a proper solution as there can be

> applications on client's machine that could be dependent on it.

>

> I even tried using the Diagnostic Tool for the Microsoft VM 1.0a to check if

> the URL which we are trying to connect has any MSJVM dependency. But the

> report generated by the tool showed that none of the files downloaded are

> MSJVM dependent.

>

> Thanks.

>

> "Donald Anadell" wrote:

>

>> "On machines with MSJVM, IE8 crashs"

>> wrote in message

>> news:C5643090-D4E9-4F7B-BB89-FBFAB8423697@microsoft.com...

>>> Hi,

>>> The machines on which this problem was occurring had jre 6 update 13 as

>>> well

>>> as MS Java Version 5.00.3155 installed.


>> The machine has a vulnerable version of the MSJVM installed on it. The

>> latest most secure version of the MSJVM is:

>> MSJVM Version 5.00.3810

>>

>> If you type wjview into the Run Box, the dialog box that pops up should read

>> version 5.00.3810, or your machine is not secured. Visit the Windows Update

>> site and get the MSJVM updated.

>>

>> If the problem still exists after you've updated the MSJVM to version

>> 5.00.3810, then uninstall it and go with Sun's Java Virtual Machine.

>>

>> Good luck,

>>

>> Donald Anadell

>>

>>

>>> Following steps would help you to reproduce the problem:-

>>>

>>> 1. Followings applications should be installed on the machine:-

>>> a. OS Win XP SP3

>>> b. jre 5 update 5 or above

>>> c. MS Java Version 5.00.3155

>>>

>>> 2. IE8 memory protection should be enabled. To enable IE memory protection

>>> follow the steps given below:-

>>>

>>> a. Open IE and click on Tools->Internet Options

>>> b. Go to Advanced tab

>>> c. Check the checkbox "Enable memory protection to help mitigate online

>>> attacks"

>>>

>>> 3. Download any executable (ex: Setup.exe) using the object tag in an html

>>> page.

>>>

>>> Sample html page:-

>>>

>>>

>>>

>>>

>>> New Document

>>>

>>>

>>>

>>>

>>>

>>>

>>>

>>> >> classid="clsid:260EE74E-D335-40C4-93B5-65801C79A79R" CODEBASE="SetUp.exe"

>>> style="width:0%;height:0%">

>>> Test

>>>

>>>

>>>

>>> 4. Load the html page.

>>>

>>> Observation:- It is observed that exe will start executing, cancel the

>>> executing and wait for 2 to 3 mins.

>>> After 2 to 3 mins it is observed that IE will reload again (atleast 2

>>> times) or a crash occurs.

>>>

>>> After executing the above steps with memory protection off (described in

>>> step 2, uncheck the checkbox), this issue was not observed.

>>>

>>> Also uninstalling the MSJVM, resolved this issue.

>>>

>>> Not able to figure out what's the relation between MSJVM and memory

>>> protection off.

>>>

>>> Following have been tried to resolve this issue and it did not work:-

>>>

>>> 1. Running IE in no add-on mode.

>>> 2. Switching off the anti virus application.

>>> 3. Resetting IE Advanced settings (RIES).

>>> 4. Disabling MSJVM throught browser advanced settings.

>>> 5. Installing the latest Sun's jre.

>>>

>>> Thanks.

>>>

>>>

>>> "Donald Anadell" wrote:

>>>

>>>> "On machines with MSJVM, IE8 crashs" >>> crashs@discussions.microsoft.com> wrote in message

>>>> news:2FD8C3D2-BA43-4224-94D2-6788DBE42BC6@microsoft.com...

>>>>> Hi,

>>>>>

>>>>> Frequent IE crashes were observed while installing an executable

>>>>> downloaded

>>>>> from a webpage. We found out that the issue comes up on machines with

>>>>> following configurations and MSJVM installed:-

>>>>>

>>>>> Machine configurations:-

>>>>>

>>>>> OS: Win XP SP3

>>>>> Browser: IE8

>>>> Hummm...I've never experienced any issue of that nature here with the

>>>> configuration you've described. You'd have to offer a little more detail

>>>> about the executable in question how you determined that MSJVM was at

>>>> fault.

>>>>

>>>>> After uninstalling the MSJVM, this issue was resolved.

>>>>>

>>>>> I would like to know if MSJVM is shipped with Win XP SP3?

>>>> No, beginning with "Windows XP SP1a" MSJVM was no longer bundled with the

>>>> installation. If your installation CD is Windows XP SP1 then the MSJVM

>>>> is

>>>> installed.

>>>>

>>>>> Whether it is safe to uninstall MSJVM?

>>>> It's always been safe to uninstall the Microsoft Java Virtual Machine.

>>>>

>>>>> If unstalling MSJVM in dangerous then what is the alternative solution?

>>>> There is nothing inherently dangerous about uninstalling the MSJVM. Your

>>>> alternative is to install the Sun Java Virtual Machine. The latest Sun

>>>> JRE

>>>> is version 6 Update 18.

>>>>

>>>> Good luck,

>>>>

>>>> Donald Anadell

>>>>

>>>>

>>>>> Thanks and Regards,

>>>>> Ashwini

>>>>

>>>> .

>>>>


>>

>> .

>>
 
[Give the man a cigar!]



Leonard Grey wrote:

> I'm going to stick my unwanted nose in here:

>

> Isn't the MS-JVM unsupported for many years, and for that reason a

> security risk?

>

> On machines with MSJVM wrote:

>> I tried with installing MSJVM version 5.00.3810 but it didn't work for

>> me.

>>

>> Uninstalling the MSJVM doesn't seem to be a proper solution as there can

>> be

>> applications on client's machine that could be dependent on it.

>>

>> I even tried using the Diagnostic Tool for the Microsoft VM 1.0a to check

>> if the URL which we are trying to connect has any MSJVM dependency. But

>> the

>> report generated by the tool showed that none of the files downloaded are

>> MSJVM dependent.

>>

>> Thanks.

>>

>> "Donald Anadell" wrote:

>>

>>> "On machines with MSJVM, IE8 crashs"

>>> wrote in

>>> message

>>> news:C5643090-D4E9-4F7B-BB89-FBFAB8423697@microsoft.com...

>>>> Hi,

>>>> The machines on which this problem was occurring had jre 6 update 13 as

>>>> well

>>>> as MS Java Version 5.00.3155 installed.

>>> The machine has a vulnerable version of the MSJVM installed on it. The

>>> latest most secure version of the MSJVM is:

>>> MSJVM Version 5.00.3810

>>>

>>> If you type wjview into the Run Box, the dialog box that pops up should

>>> read version 5.00.3810, or your machine is not secured. Visit the

>>> Windows Update site and get the MSJVM updated.

>>>

>>> If the problem still exists after you've updated the MSJVM to version

>>> 5.00.3810, then uninstall it and go with Sun's Java Virtual Machine.

>>>

>>> Good luck,

>>>

>>> Donald Anadell

>>>

>>>

>>>> Following steps would help you to reproduce the problem:-

>>>>

>>>> 1. Followings applications should be installed on the machine:-

>>>> a. OS Win XP SP3

>>>> b. jre 5 update 5 or above

>>>> c. MS Java Version 5.00.3155

>>>>

>>>> 2. IE8 memory protection should be enabled. To enable IE memory

>>>> protection follow the steps given below:-

>>>>

>>>> a. Open IE and click on Tools->Internet Options

>>>> b. Go to Advanced tab

>>>> c. Check the checkbox "Enable memory protection to help mitigate online

>>>> attacks"

>>>>

>>>> 3. Download any executable (ex: Setup.exe) using the object tag in an

>>>> html page.

>>>>

>>>> Sample html page:-

>>>>

>>>>

>>>>

>>>>

>>>> New Document

>>>>

>>>>

>>>>

>>>>

>>>>

>>>>

>>>>

>>>> >>> classid="clsid:260EE74E-D335-40C4-93B5-65801C79A79R"

>>>> CODEBASE="SetUp.exe"

>>>> style="width:0%;height:0%">

>>>> Test

>>>>

>>>>

>>>>

>>>> 4. Load the html page.

>>>>

>>>> Observation:- It is observed that exe will start executing, cancel the

>>>> executing and wait for 2 to 3 mins.

>>>> After 2 to 3 mins it is observed that IE will reload again (atleast 2

>>>> times) or a crash occurs.

>>>>

>>>> After executing the above steps with memory protection off (described

>>>> in step 2, uncheck the checkbox), this issue was not observed.

>>>>

>>>> Also uninstalling the MSJVM, resolved this issue.

>>>>

>>>> Not able to figure out what's the relation between MSJVM and memory

>>>> protection off.

>>>>

>>>> Following have been tried to resolve this issue and it did not work:-

>>>>

>>>> 1. Running IE in no add-on mode.

>>>> 2. Switching off the anti virus application.

>>>> 3. Resetting IE Advanced settings (RIES).

>>>> 4. Disabling MSJVM throught browser advanced settings.

>>>> 5. Installing the latest Sun's jre.

>>>>

>>>> Thanks.

>>>>

>>>>

>>>> "Donald Anadell" wrote:

>>>>

>>>>> "On machines with MSJVM, IE8 crashs" >>>> crashs@discussions.microsoft.com> wrote in message

>>>>> news:2FD8C3D2-BA43-4224-94D2-6788DBE42BC6@microsoft.com...

>>>>>> Hi,

>>>>>>

>>>>>> Frequent IE crashes were observed while installing an executable

>>>>>> downloaded

>>>>>> from a webpage. We found out that the issue comes up on machines with

>>>>>> following configurations and MSJVM installed:-

>>>>>>

>>>>>> Machine configurations:-

>>>>>>

>>>>>> OS: Win XP SP3

>>>>>> Browser: IE8

>>>>> Hummm...I've never experienced any issue of that nature here with the

>>>>> configuration you've described. You'd have to offer a little more

>>>>> detail about the executable in question how you determined that MSJVM

>>>>> was at fault.

>>>>>

>>>>>> After uninstalling the MSJVM, this issue was resolved.

>>>>>>

>>>>>> I would like to know if MSJVM is shipped with Win XP SP3?

>>>>> No, beginning with "Windows XP SP1a" MSJVM was no longer bundled with

>>>>> the installation. If your installation CD is Windows XP SP1 then the

>>>>> MSJVM is

>>>>> installed.

>>>>>

>>>>>> Whether it is safe to uninstall MSJVM?

>>>>> It's always been safe to uninstall the Microsoft Java Virtual Machine.

>>>>>

>>>>>> If unstalling MSJVM in dangerous then what is the alternative

>>>>>> solution?

>>>>> There is nothing inherently dangerous about uninstalling the MSJVM.

>>>>> Your alternative is to install the Sun Java Virtual Machine. The

>>>>> latest Sun JRE

>>>>> is version 6 Update 18.

>>>>>

>>>>> Good luck,

>>>>>

>>>>> Donald Anadell

>>>>>

>>>>>

>>>>>> Thanks and Regards,

>>>>>> Ashwini

>>>>>

>>>>> .

>>>>>

>>>

>>> .
 
"On machines with MSJVM, IE8 crashs"

wrote in message

news:A3727996-96E8-4589-9835-04D51EAA24A3@microsoft.com...

> Hi,

>

> I tried with installing MSJVM version 5.00.3810 but it didn't work for me.

>

> Uninstalling the MSJVM doesn't seem to be a proper solution as there can

> be

> applications on client's machine that could be dependent on it.

>

> I even tried using the Diagnostic Tool for the Microsoft VM 1.0a to check

> if

> the URL which we are trying to connect has any MSJVM dependency. But the

> report generated by the tool showed that none of the files downloaded are

> MSJVM dependent.




As has been pointed out in this thread, the MSJVM is no longer supported by

Microsoft. Support for the MSJVM ended on December 31, 2007.



See:



MSJVM Transition FAQ

http://www.microsoft.com/mscorp/java/faq.mspx



The last secure version of the MSJVM that was put out by Microsoft was

version 5.00.3810. While uninstalling the MSJVM may not "seem" to be a

proper solution to you, non the less you have reported that uninstalling it

resolves your problem.



The Sun Java Virtual Machine is the alternative to the MSJVM. If your

client machine applications are dependent on a Java Virtual Machine, install

the Sun JRE(Java Runtime Enviornment) Update 18 available here:

http://java.sun.com/javase/downloads/index.jsp



Sorry I don't have anything else to offer.



Donald Anadell





>

> Thanks.

>

> "Donald Anadell" wrote:

>

>>

>> "On machines with MSJVM, IE8 crashs"

>> wrote in message

>> news:C5643090-D4E9-4F7B-BB89-FBFAB8423697@microsoft.com...

>> >

>> > Hi,

>> > The machines on which this problem was occurring had jre 6 update 13 as

>> > well

>> > as MS Java Version 5.00.3155 installed.


>>

>> The machine has a vulnerable version of the MSJVM installed on it. The

>> latest most secure version of the MSJVM is:

>> MSJVM Version 5.00.3810

>>

>> If you type wjview into the Run Box, the dialog box that pops up should

>> read

>> version 5.00.3810, or your machine is not secured. Visit the Windows

>> Update

>> site and get the MSJVM updated.

>>

>> If the problem still exists after you've updated the MSJVM to version

>> 5.00.3810, then uninstall it and go with Sun's Java Virtual Machine.

>>

>> Good luck,

>>

>> Donald Anadell

>>

>>

>> >

>> > Following steps would help you to reproduce the problem:-

>> >

>> > 1. Followings applications should be installed on the machine:-

>> > a. OS Win XP SP3

>> > b. jre 5 update 5 or above

>> > c. MS Java Version 5.00.3155

>> >

>> > 2. IE8 memory protection should be enabled. To enable IE memory

>> > protection

>> > follow the steps given below:-

>> >

>> > a. Open IE and click on Tools->Internet Options

>> > b. Go to Advanced tab

>> > c. Check the checkbox "Enable memory protection to help mitigate online

>> > attacks"

>> >

>> > 3. Download any executable (ex: Setup.exe) using the object tag in an

>> > html

>> > page.

>> >

>> > Sample html page:-

>> >

>> >

>> >

>> >

>> > New Document

>> >

>> >

>> >

>> >

>> >

>> >

>> >

>> > > > classid="clsid:260EE74E-D335-40C4-93B5-65801C79A79R"

>> > CODEBASE="SetUp.exe"

>> > style="width:0%;height:0%">

>> > Test

>> >

>> >

>> >

>> > 4. Load the html page.

>> >

>> > Observation:- It is observed that exe will start executing, cancel the

>> > executing and wait for 2 to 3 mins.

>> > After 2 to 3 mins it is observed that IE will reload again (atleast 2

>> > times) or a crash occurs.

>> >

>> > After executing the above steps with memory protection off (described

>> > in

>> > step 2, uncheck the checkbox), this issue was not observed.

>> >

>> > Also uninstalling the MSJVM, resolved this issue.

>> >

>> > Not able to figure out what's the relation between MSJVM and memory

>> > protection off.

>> >

>> > Following have been tried to resolve this issue and it did not work:-

>> >

>> > 1. Running IE in no add-on mode.

>> > 2. Switching off the anti virus application.

>> > 3. Resetting IE Advanced settings (RIES).

>> > 4. Disabling MSJVM throught browser advanced settings.

>> > 5. Installing the latest Sun's jre.

>> >

>> > Thanks.

>> >

>> >

>> > "Donald Anadell" wrote:

>> >

>> >>

>> >> "On machines with MSJVM, IE8 crashs" > >> crashs@discussions.microsoft.com> wrote in message

>> >> news:2FD8C3D2-BA43-4224-94D2-6788DBE42BC6@microsoft.com...

>> >> > Hi,

>> >> >

>> >> > Frequent IE crashes were observed while installing an executable

>> >> > downloaded

>> >> > from a webpage. We found out that the issue comes up on machines

>> >> > with

>> >> > following configurations and MSJVM installed:-

>> >> >

>> >> > Machine configurations:-

>> >> >

>> >> > OS: Win XP SP3

>> >> > Browser: IE8

>> >>

>> >> Hummm...I've never experienced any issue of that nature here with the

>> >> configuration you've described. You'd have to offer a little more

>> >> detail

>> >> about the executable in question how you determined that MSJVM was at

>> >> fault.

>> >>

>> >> >

>> >> > After uninstalling the MSJVM, this issue was resolved.

>> >> >

>> >> > I would like to know if MSJVM is shipped with Win XP SP3?

>> >>

>> >> No, beginning with "Windows XP SP1a" MSJVM was no longer bundled with

>> >> the

>> >> installation. If your installation CD is Windows XP SP1 then the

>> >> MSJVM

>> >> is

>> >> installed.

>> >>

>> >> > Whether it is safe to uninstall MSJVM?

>> >>

>> >> It's always been safe to uninstall the Microsoft Java Virtual Machine.

>> >>

>> >> > If unstalling MSJVM in dangerous then what is the alternative

>> >> > solution?

>> >>

>> >> There is nothing inherently dangerous about uninstalling the MSJVM.

>> >> Your

>> >> alternative is to install the Sun Java Virtual Machine. The latest

>> >> Sun

>> >> JRE

>> >> is version 6 Update 18.

>> >>

>> >> Good luck,

>> >>

>> >> Donald Anadell

>> >>

>> >>

>> >> >

>> >> > Thanks and Regards,

>> >> > Ashwini

>> >>

>> >>

>> >> .

>> >>


>>

>>

>> .

>>
 
"Leonard Grey" wrote in message

news:uOSm7%23%23oKHA.1544@TK2MSFTNGP06.phx.gbl...

> I'm going to stick my unwanted nose in here:

>

> Isn't the MS-JVM unsupported for many years, and for that reason a

> security risk?




Hi Leonard,



If you queston is directed at me, I'm not aware of any current threat to the

MSJVM Version 5.00.3810. But I do agree with your premiss about using

unsupported software being a security risk.



Donald Anadell





> ---

> Leonard Grey

> Errare humanum est

>

> On machines with MSJVM wrote:

>> Hi,

>>

>> I tried with installing MSJVM version 5.00.3810 but it didn't work for

>> me.

>>

>> Uninstalling the MSJVM doesn't seem to be a proper solution as there can

>> be applications on client's machine that could be dependent on it.

>>

>> I even tried using the Diagnostic Tool for the Microsoft VM 1.0a to check

>> if the URL which we are trying to connect has any MSJVM dependency. But

>> the report generated by the tool showed that none of the files downloaded

>> are MSJVM dependent.

>>

>> Thanks.

>>

>> "Donald Anadell" wrote:

>>

>>> "On machines with MSJVM, IE8 crashs"

>>> wrote in

>>> message news:C5643090-D4E9-4F7B-BB89-FBFAB8423697@microsoft.com...

>>>> Hi,

>>>> The machines on which this problem was occurring had jre 6 update 13 as

>>>> well

>>>> as MS Java Version 5.00.3155 installed.

>>> The machine has a vulnerable version of the MSJVM installed on it. The

>>> latest most secure version of the MSJVM is:

>>> MSJVM Version 5.00.3810

>>>

>>> If you type wjview into the Run Box, the dialog box that pops up should

>>> read version 5.00.3810, or your machine is not secured. Visit the

>>> Windows Update site and get the MSJVM updated.

>>>

>>> If the problem still exists after you've updated the MSJVM to version

>>> 5.00.3810, then uninstall it and go with Sun's Java Virtual Machine.

>>>

>>> Good luck,

>>>

>>> Donald Anadell

>>>

>>>

>>>> Following steps would help you to reproduce the problem:-

>>>>

>>>> 1. Followings applications should be installed on the machine:-

>>>> a. OS Win XP SP3

>>>> b. jre 5 update 5 or above

>>>> c. MS Java Version 5.00.3155

>>>>

>>>> 2. IE8 memory protection should be enabled. To enable IE memory

>>>> protection

>>>> follow the steps given below:-

>>>>

>>>> a. Open IE and click on Tools->Internet Options

>>>> b. Go to Advanced tab

>>>> c. Check the checkbox "Enable memory protection to help mitigate online

>>>> attacks"

>>>>

>>>> 3. Download any executable (ex: Setup.exe) using the object tag in an

>>>> html

>>>> page.

>>>>

>>>> Sample html page:-

>>>>

>>>>

>>>>

>>>>

>>>> New Document

>>>>

>>>>

>>>>

>>>>

>>>>

>>>>

>>>>

>>>> >>> classid="clsid:260EE74E-D335-40C4-93B5-65801C79A79R"

>>>> CODEBASE="SetUp.exe"

>>>> style="width:0%;height:0%">

>>>> Test

>>>>

>>>>

>>>>

>>>> 4. Load the html page.

>>>>

>>>> Observation:- It is observed that exe will start executing, cancel the

>>>> executing and wait for 2 to 3 mins.

>>>> After 2 to 3 mins it is observed that IE will reload again (atleast 2

>>>> times) or a crash occurs.

>>>>

>>>> After executing the above steps with memory protection off (described

>>>> in

>>>> step 2, uncheck the checkbox), this issue was not observed.

>>>>

>>>> Also uninstalling the MSJVM, resolved this issue.

>>>>

>>>> Not able to figure out what's the relation between MSJVM and memory

>>>> protection off.

>>>>

>>>> Following have been tried to resolve this issue and it did not work:-

>>>>

>>>> 1. Running IE in no add-on mode.

>>>> 2. Switching off the anti virus application.

>>>> 3. Resetting IE Advanced settings (RIES).

>>>> 4. Disabling MSJVM throught browser advanced settings.

>>>> 5. Installing the latest Sun's jre.

>>>>

>>>> Thanks.

>>>>

>>>>

>>>> "Donald Anadell" wrote:

>>>>

>>>>> "On machines with MSJVM, IE8 crashs" >>>> crashs@discussions.microsoft.com> wrote in message

>>>>> news:2FD8C3D2-BA43-4224-94D2-6788DBE42BC6@microsoft.com...

>>>>>> Hi,

>>>>>>

>>>>>> Frequent IE crashes were observed while installing an executable

>>>>>> downloaded

>>>>>> from a webpage. We found out that the issue comes up on machines with

>>>>>> following configurations and MSJVM installed:-

>>>>>>

>>>>>> Machine configurations:-

>>>>>>

>>>>>> OS: Win XP SP3

>>>>>> Browser: IE8

>>>>> Hummm...I've never experienced any issue of that nature here with the

>>>>> configuration you've described. You'd have to offer a little more

>>>>> detail

>>>>> about the executable in question how you determined that MSJVM was at

>>>>> fault.

>>>>>

>>>>>> After uninstalling the MSJVM, this issue was resolved.

>>>>>>

>>>>>> I would like to know if MSJVM is shipped with Win XP SP3?

>>>>> No, beginning with "Windows XP SP1a" MSJVM was no longer bundled with

>>>>> the

>>>>> installation. If your installation CD is Windows XP SP1 then the

>>>>> MSJVM is

>>>>> installed.

>>>>>

>>>>>> Whether it is safe to uninstall MSJVM?

>>>>> It's always been safe to uninstall the Microsoft Java Virtual Machine.

>>>>>

>>>>>> If unstalling MSJVM in dangerous then what is the alternative

>>>>>> solution?

>>>>> There is nothing inherently dangerous about uninstalling the MSJVM.

>>>>> Your

>>>>> alternative is to install the Sun Java Virtual Machine. The latest

>>>>> Sun JRE

>>>>> is version 6 Update 18.

>>>>>

>>>>> Good luck,

>>>>>

>>>>> Donald Anadell

>>>>>

>>>>>

>>>>>> Thanks and Regards,

>>>>>> Ashwini

>>>>>

>>>>> .

>>>>>

>>>

>>> .

>>>
 
Back
Top