The word from CNET News.com is that a Java-related bug that first cropped in late 1997 has now been reintroduced with Internet Explorer 5.0. Microsoft is working on yet another patch, but an official spokesperson declined to predict when it would be available.

Here's the word from Dick Craddock at Microsoft:

"A problem was found where it's possible for a malicious Web site to exploit a hole in the interface between IE and the Apple Mac runtime for Java to gain access to content redirected through to other Web sites."

The actual method that could be used by someone who wanted to gain access to files on your home computer is somewhat complicated but certainly doable. Paul Festa's article lays it all out, in case anyone wants to find out how, so we think this is a credible threat.

February 09, 2012