Sun Microsystems claimed yesterday that its attempt to stamp on a recently discovered Java Virtual Machine (JVM) security bug has been successful.

Security experts warned that the potentially devastating flaw in the JVM Run Time Environment could leave millions of desktops open to attack.

However, Sun stated: "Early indications are that Sun's response to this issue has been effective. As of 29 November 824,244 users have downloaded the upgraded version of J2SE 1.4.2_06 that corrects the vulnerability."

The company also reported that there have been "no reported attacks" exploiting the vulnerability. The download continues to be available at www.java.com and www.sun.com/developers.

"Sun recommends that all users use the manual download or static installer to ensure the effective and successful download of the new version," the company advised.