Microsoft Windows 2000 Patch: Microsoft Virtual Ma

Important This update upgrades your computer to build 3802 of the Microsoft virtual machine (VM), which includes the same vulnerability fixes as those contained in Microsoft VM build 3319. If you have already installed Microsoft VM build 3319, then your computer is not affected by the vulnerability.

This update resolves the "VM File Reading" security vulnerability in the Microsoft virtual machine (Microsoft VM) and is discussed in Microsoft Security Bulletin MS00-081. Download now to prevent a malicious Web site operator from reading - but not changing, adding, or deleting - the files on your computer or viewing the Web content on your intranet.

Java applets (which are hosted on Web sites and run on the computers of visiting users) are run within the Microsoft VM, which uses a protected area on your computer called the "sandbox" to restrict what Java applets can do. Normally, the sandbox prevents a Java applet from performing inappropriate actions on a visiting users computer. Through a complex series of steps, a malicious Web site operator can create a Java applet that can bypass the restrictions set by the sandbox and read files on a visiting users computer or view Web content on the visiting users intranet.

For more information about this vulnerability, read Microsoft Security Bulletin MS00-081. This update is cumulative, and includes all vulnerability fixes made in past Microsoft VM releases.