|
Posted by george on December 11, 2007, 6:43 pm
If you were Registered and logged in, you could reply and use other advanced thread options
> george wrote:
>
>
>>> Hm? ByteVerify is an exploit for the class format verifier of the Java
>>> ClassLoader of super old Sun JavaVM 1.2.4.
>>
>> That's exactly unhelpful response you could find on Symmantec, but what
>> does byteverify do to your machine?
>
>
> If you're running Sun's Java VM 1.2.4 or older: it will allow the attacker
> to execute arbitrary code, which will do about virtually anything.
>
> If you're not so horribly stupid and run a newer version of Sun's JavaVM,
> a Java VM of another vendor, or simply none at all, the exploit fails and
> doesn't execute anything malicious. Thus, nothing happens.
>
> It's really a wonder that such super-old exploits are still in use.
Right - my machine is about a year old, o/s windows xp, it runs java 1.5;
how could I possibly have byteverify in the first place? Whatever peoples
oppinions are on Norton security, it is still one of market leaders and as
such you'd expect it to prevent you getting this old trojan?
|