Are there any kind of drive by download attacks (in Java maybe) that does not require any user interaction? When you make a drive by download in Java in general a popup appears to ask some permission to the user (example of permission).

So is this attack exist without any user interaction process?

  • 1
    Yes - in Java maybe not so much these days, but there are many that exploit vulnerabilities in Adobe Flash, the browser, or the operating system.
    – tlng05
    Jan 4, 2015 at 16:14

1 Answer 1


Yes, many client side exploits on browsers (Internet Explorer, for example) and some plugins like Flash (and even some old Java ones I believe) do not acquire user interaction.

Not the answer you're looking for? Browse other questions tagged .