This question already has an answer here:

Are there any kind of drive by download attacks (in Java maybe) that does not require any user interaction? When you make a drive by download in Java in general a popup appears to ask some permission to the user (example of permission).

So is this attack exist without any user interaction process?

marked as duplicate by Anders, crovers, Xander, Rory Alsop Dec 21 '16 at 18:10

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

  • 1
    Yes - in Java maybe not so much these days, but there are many that exploit vulnerabilities in Adobe Flash, the browser, or the operating system. – tlng05 Jan 4 '15 at 16:14

Yes, many client side exploits on browsers (Internet Explorer, for example) and some plugins like Flash (and even some old Java ones I believe) do not acquire user interaction.

Not the answer you're looking for? Browse other questions tagged or ask your own question.