JS.Exception.Exploit? What's this?

[xscape]

Hi all,

I'm using IE 5. A couple of times I've got to a website where good 'ol Norton has popped up a Virus Alert message and halted everything. It says the page I'm viewing contains a virus called JS.Exception.Exploit. What is this Virus? I was thinking it might be an Active X control of some sort but the JS bit makes me think JavaScript?

Also, I went to a page that someone said they were having problems with becuase it was setting itself to their homepage without them allowing it. Is this maybe what NAV is stopping then?

I'm just curious really, because it doesn't happen very often. If anyone knows about this then it'd be great if you could tell me what it's about!

Thanks!

 

[xscape]

Actually I've just been to the Symantec site and looked it up. If you're interested here is what is says:

JS.Exception.Exploit is an exploit which allows unpatched systems to run arbitrary code if a Java applet that was programmed to take advantage of the exploit is allowed to run. In many cases, the applet may perform simple actions, such as changing your Internet Explorer home page. It can also be programmed to run code to perform a mass mailing, as in the case of VBS.Loding.A@mm.

Type: Trojan Horse

Virus Definitions: August 16, 2001

Here's the full link that tells you more about it:

http://securityresponse.symantec.com/avcenter/venc/data/js.exception.exploit.html

Hope that's useful for anyone else!

 

[smitee]

xscape

Patch Available for 'Microsoft VM ActiveX Component' Vulnerability

http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/ms00-075.asp

 

[xscape]

Thanks smitee! I found and installed this one for the JVM problem in IE 4x and 5x. It's here for anyone who's interested:

http://www.microsoft.com/technet/treeview/default.asp?url=/TechNet/security/bulletin/ms00-081.asp

 

[smitee]

xscape

Sorry about that..I meant to thank you for the post..After your message I used the link, upgraded, and returned to let you know it was useful...the darn url was still on clipboard and I end up posting it back to you..I am still redfaced..I've been making a lot of mistakes lately..Thank you again

smitee