No actual attacks reported based on security vulnerability Sun Microsystems on Tuesday said there have been 1.9 million downloads of an upgraded version of J2SE to correct a possible security vulnerability in the JVM, although there have been no attacks reported based on the problem.The upgrade is Version 1.4.2_06 and it is available at www.java.com as well as at www.sun.com/developers.The vulnerability involved Java Plug-in technology in the SDK and the Java Run-time Environment that allows hackers to bypass the Java sandbox and applet security. A remote attacker could execute hostile applets to access arbitrary files or the JVM user’s network. To ensure an effective download of the new version of J2SE, Sun recommends that users use the manual download or static installer. SecurityEndpoint Protection