I'v had a box compromised via a web browser twice. First time was the nimbda worm in september 2001 which exploited a vulnerability in Internet Explorer 5. Se

I'v had a box compromised via a web browser twice. First time was the nimbda worm in september 2001 which exploited a vulnerability in Internet Explorer 5. Second time was due to an out of date java runtime, probably around 2008. It was a virtual machine that I was using for some testing. The malware spewed email spam for a short time until I noticed. I consider it to be a good idea to use separate devices for work and casual web browsing.