Someone installed JRE 1.5.0_06 today and tried to bring up three of our SAS/Graph applets in one browser session - the Map, Graph, and Contour applets.

These are signed applets, and he got the "Do you want to run the application" message from the JRE.

He is able to click the Run button on the first message, but then things lock up, and he has to kill IE to free it up.

Two applets work OK, but the problem occurs when he adds a third applet.

If you choose to always trust SAS so the message doesn't appear, then the problem won't occur.

Also, the same html file works fine on Firefox 1.5.0.1.

Also attached is a .jpg of the screen when things are locked.

Internet Explorer: 6.0.2900.2180.spsp_sp2_rtm.040803-2158CO Update Version: SP2

---------------------------------

Testing on Different Machine:

"I tried this on another PC (my testing PC) and found that there was no hang this
time, but the Internet Explorer Information Bar restricted the file so active
content could not access my computer.

After I right clicked on the Information Bar and selected Allow Blocked Content,
then I was able to run the signed applets, and the graphs came up fine.

But, if I allow active content in IE by doing the following steps, then IE hangs
after you run the first signed applet.

Here are the instructions for allowing active content in IE:

From Internet Explorer, click on Tools -> Internet Options
On the Advanced tab, check the box in the Security section by "Allow active
content to run in files on My Computer".
-------------------------------

Testing with previous Update releases:

JRE 1.5.0_01 - the problem does not occur
JRE 1.5.0_02 - the problem does not occur
JRE 1.5.0_03 - the problem does not occur
JRE 1.5.0_04 - Not tested
JRE 1.5.0_05 - the problem does not occur
JRE 1.5.0_06 - the problem does occur

Note that the security window asking if you want to trust the signed applet by
SAS Institute changed between 1.5.0_05 and 1.5.0_06. See security_1.5.0_05.jpg
and security_1.5.0_06.jpg in the attachments.

The 1.5.0_06 window says "The applications digital signature has an error. Do
you want to run the application?" IÂ'm using the same jars for plug-in _05 and
_06, so there must be some new error checking for _06.


Some other testing that I tried:

The problem didn't occur with Java plug-in 1.4.2_09 when using our v9.1.3 SP4
jars.

It does occur with plug-in 1.5.0_06 when using our v9.1.3 SP4 jars.



--------------------------


1) Are all 3 applets signed by SAS?

YES

2) Does the dialog "The application's digital signature has an error"
pop up for the first 2 applets? Can customer click "run" on this dialog for the first 2 applets without seeing any hang?

The second dialog freezes




###@###.###
This happens only with 1.5.0_06 release using IE. could this be related to the security bulletin 00128 ("Secure Static Versioning") changes introduced in 1.5.0_06?