Microsoft on Wednesday released a patch to fix three flaws in its Java Virtual Machine, one of which gives an attacker complete control of a user's machine.

The release comes 10 days after news of the vulnerabilities was posted to a security mailing list. The BugTraq posting discusses more than 10 flaws although the new patch from Microsoft fixes just three of them.

The Microsoft VM shipped with most versions of Windows, including Windows 95, 98 and 98 SE, Me, NT 4.0 Service Pack 1 and later, 2000 and XP Service Pack 1. It also ships as part of most Internet Explorer versions.

More Here at eWEEK.