Microsoft security software detects and removes this threat.

This threat uses a software vulnerability to download and run other files on your PC, including malware.

It runs when you visit a hacked website and you have a vulnerable version of Java. A number of legitimate websites could be hacked to unwillingly host this threat.

The following versions of Java are vulnerable:

• JDK and JRE 7 Update 4 and earlier Java SE
• JDK and JRE 6 Update 32 and earlier Java SE
• JDK and JRE 5.0 Update 35 and earlier Java SE
• SDK and JRE 1.4.2_37 and earlier Java SE

To check if you're running a vulnerable version of Java:

1. Go to the control panel (Select Start then Control Panel)
2. Select Programs. If Java is installed you will see it in the list of installed programs. Click it to open the Java Control Panel.
3. On the General tab, click About to see which version of Java you have installed.

You might get a detection for this threat when you visit a website that has the malicious code, even if you're not using a vulnerable version of Java. This doesn't mean that you have been hacked; it means someone has tried to hack into your PC.

The vulnerability that this threat exploits is described in CVE-2012-1723.

Find out ways that malware can get on your PC.  

Exploit:Java/CVE-2012-1723.A allows an attacker to gain access to and run arbitrary files on your computer.

Make sure you install all available updates from Java to avoid this exploit. For more information on updating Java please see the Additional information section in this entry.

Exploit:Java/CVE-2012-1723.A is the detection for malicious JavaScript code that attempts to exploit a vulnerability in the Java Runtime Environment (JRE) up to and including version 7, update 4 (described in CVE-2012-1723).