From: Site Builder Network <sbn@MICROSOFT.COM>
Date: Tue, 20 May 1997 22:18:07 -0700 (PDT)
To: SBNMEM@LISTSERV.MSN.COM
Subject: Microsoft Responds To Java Security Issues By Posting Fix
Message-ID: <300484772A32CF11BEF200805F50855D036CADED@RED-78-MSG.dns.microsoft.com>
MIME-Version: 1.0
Content-Type: text/plain


*** Microsoft (R) Site Builder Network ***

In this issue:

NEWS & ANNOUNCEMENTS

* MICROSOFT RESPONDS TO JAVA SECURITY ISSUES BY POSTING
FIX
* ANNOUNCING NEW SITE BUILDER NETWORK DISCUSSION GROUPS
* SITE BUILDER WORKSHOP ADDS DYNAMIC HTML AREA


MEMBERSHIP DOWNLOADS AND NEWS SPOTLIGHT

* EDGEWORX OFFER TO SITE BUILDER MEMBERS
* WEBMEN TALKING IS NOW BIWEEKLY
* LIMITED TIME ONLY - AWARD-WINNING JAVA AUTHORING TOOL
* EG SOFTOWARE'S WEBTRENDS WEB SERVER LOG FILE ANALYZER
* HIT LIST PROFESSIONAL 3.0 - TRIAL VERSION


PLEASE NOTE: Email format restrictions may not allow a
URL to fit on one line. Thus, when you click the URL
line in the email message, you may get a browser error
(e.g., non-existent link).   If the URL does not seem to
work, please make certain you select, copy, then paste
the entire link address into your browser's target
address field.  Thank you.


NEWS & ANNOUNCEMENTS
MICROSOFT RESPONDS TO JAVA SECURITY ISSUES BY POSTING FIX
Researchers at the University of Washington recently
notified Microsoft and other vendors of several dozen
anomalies in Java virtual machines that could
potentially result in Java applets causing a system
crash and/or loss of data.  Microsoft today announced
the immediate availability of an updated version of the
Microsoft virtual machine for Java that addresses the
issues raised by the University of Washington.

The researchers with the Kimera Project in the
Department of Computer Science and Engineering at the
University of Washington have an automatic validation
technology that allows them to quickly identify
potential bugs in commercial Java implementations.
Their tests uncovered a variety of Java anomalies,
including 17 which affect the Microsoft virtual machine
and 24 which affect Sun Microsystem's virtual machine.

The anomalies are in the bytecode "verifier", which
enforces the security of the Java sandbox. There have
been no known attacks that exploit these anomalies, but
they could potentially allow a malicious application to
get access outside the sandbox.  More information is
available on the University of Washington's Kimera
Project website at
http://www.washington.edu/newsroom/news/k051997.html.

The updated version of the Microsoft virtual machine is
available to all users of Internet Explorer, Internet
Information Server and Visual J++ from
http://www.microsoft.com/java. All users and developers
are encouraged to download the new version of the
virtual machine.  The updated version will also be
distributed with all future releases of Microsoft
products containing the virtual machine.

ANNOUNCING NEW SITE BUILDER NETWORK DISCUSSION GROUPS
Because the Site Builder's Exchange discussion group
has been so busy lately, we've decided to divide it into
focused discussion groups. The Site Builder Network
Forum offers ongoing discussions on following topics:
Internet Explorer/HTML, Java/Visual J++, Active Server
Pages and Web and Graphic Design. Check out this cool
members-only benefit provided by The Cobb Group
accessible through the Level 1 lounge. Not a member?
It's time to sign up!

SITE BUILDER WORKSHOP ADDS DYNAMIC HTML AREA
Site Builder Workshop has added a whole new section just
for information on Dynamic HTML at
http://www.microsoft.com/workshop/authors/dhtml/.  This
powerful new technology in Internet Explorer unchains
HTML authors--and their Web pages--and makes interactive
components easy to build.  Microsoft's Dynamic HTML
technology gives authors creative control so they can
manipulate any page element and change styles,
positioning, and content at any time -- not only when
the page is loaded.

MEMBERSHIP DOWNLOADS AND NEWS SPOTLIGHT
EDGEWORX OFFER TO SITE BUILDER MEMBERS
Antares is offering all Site Builder members the
opportunity to purchase the EdgeworX Developer Edition
at the exceptional promotional price of $99 (vs. $399
List Price).  This promotional price will be available
on a purchase of EdgeworX Developer Edition made through
May 31, 1997.  This offer is made exclusively to Site
Builder members.

-This special promotional price is available only
through a link on the EdgeworX download area of the Site
Builder Network site.

-Purchasers will be required to provide their SBN
Membership to claim the discount.

-It is not necessary to download evaluation copy of
EdgeworX Developer Edition to take advantage of this
promotion.

Take advantage of this special offer and learn why
everyone is talking about EdgeworX.  For example:
"With the tight integration of VBA and DCOM support as
part of the EdgeworX product, any of the 3 million
Visual Basic developers will be able to quickly create
web applications using a familiar object-based design
environment." - Tom Button, Director of the developer
tools division at Microsoft.

"EdgeworX from Antares Alliance Makes VB Programmers
into Web Experts." - Michael Goulde, Seybold.

EdgeworX is a VBA and DCOM based object-oriented
development and execution framework for creating dynamic
Web applications.  Based on Microsoft's Visual Basic for
Applications (VBA), EdgeworX provides a comprehensive
library of DCOM-enabled ActiveX objects, which enable
developers to quickly and easily build dynamic,
interactive Web applications. Download your evaluation
copy today.

WEBMEN TALKING IS NOW BIWEEKLY
Our popular Site Builder Network Magazine question-and-
answer column, Web Men Talking, will double in
frequency, from monthly to biweekly! If you aren't one
of the 10,000 people who read the column every week, you
are missing out!  Check out
http://www.microsoft.com/sitebuilder/columnists/default
.asp.

LIMITED TIME ONLY - AWARD-WINNING JAVA AUTHORING TOOL

Jamba is a Java authoring tool for web content creators
and graphic designers who want to take advantage of
Java's ability to add animation and interactive
navigation to static HTML pages. Jamba offers a non-
programming environment using a point & click interface
that creates feature-rich Java applets that run across
all major web browsers and all platforms.  Unlike
Macromedia's Shockwave and other tools that use a plug-
in strategy, Jamba applets do not require the browser to
first download and install or updated large plug-ins
before the applet can be viewed.   Download the 30-day
trial version for one week only! Go to
http://www.microsoft.com/sbnmember/download/download.asp


E.G. SOFTWARE'S WEB TRENDS WEB SERVER LOG FILE ANALYZER
- TRIAL VERSION
WebTrends is the fastest, most popular Web server log
file analyzer on the market, and the only product to
provide real-time analysis and reporting for IIS and
other Web servers. Go to
http://www.microsoft.com/sbnmember/download/download.asp

HIT LIST PROFESSIONAL 3.0 - TRIAL VERSION
Get to know the who, what, when, where, and why of your
Web-site traffic. Hit List Professional 3.0 by
Marketwave provides sophisticated analysis of your Web-
site traffic and visitor usage -- think of it as 'Caller
ID' for your Web site. Until June 9, 1997, SBN members
can buy Hit List Professional 3.0 for 50% off the retail
price! Go to
http://www.microsoft.com/sbnmember/download/download.asp

________________________________________
To increase or decrease the frequency of e-mail or
postal mail you receive from Site Builder Network,
please go to
http://www.microsoft.com/sbnmember/apply/apply.asp and
click "Change Your Membership."  You will find check
boxes, which will allow you to choose the frequency
ofmail you wish to receive (including none).  To cancel
your SBN membership, please put "Cancel my Membership"
in the subject heading and e-mail back to
SBN@microsoft.com.