New Security Flaw in Internet Explorer, and How to Fix It   7/4/2005 - 785 views, 4 Comments

Summary: Microsoft has confirmed this week that there is a newly discovered security flaw in Windows Internet Explorer (IE). Says the Microsoft website: "Microsoft is investigating a new public report of a vulnerability affecting Internet Explorer. We have not been made aware of any ...

Previous Article « Microsoft Releases New Free Microsoft Baseline Security Analyzer 2.0 for Windows
Read Next Article » How Your Laptop Can Help You if You’re Stuck in an Airport

Microsoft has confirmed this week that there is a newly discovered security flaw in Windows Internet Explorer (IE).

Says the Microsoft website: “Microsoft is investigating a new public report of a vulnerability affecting Internet Explorer. We have not been made aware of any attacks attempting to use the reported vulnerability or customer impact at this time, but we are aggressively investigating the public report.”

Microsoft has said that at the end of the investigation they will take appropriate action, which may include issuing a security update. However, in the meantime, they recommend increaing your IE security settings by doing the following (from the Microsoft site):

“1. On the Internet Explorer Tools menu, click Internet Options.
2. In the Internet Options dialog box, click the Security tab, and then click the Internet icon.
3. Under Security level for this zone, move the slider to High. This sets the security level for all Web sites you visit to High.

Note If no slider is visible, click Default Level, and then move the slider to High.

Note Setting the level to High may cause some Web sites to work incorrectly. If you have difficulty using a Web site after you change this setting, and you are sure the site is safe to use, you can add that site to your list of trusted sites. This will allow the site to work correctly even with the security setting set to High.”

Also note that according to the Microsoft site, enabling this workaround will cause you to be prompted to run ActiveX whenever at a site requiring it. You should answer “yes” to this prompt if you trust the site.

Get FREE email alerts of new Internet Patrol stories!
    *We never share your email address with anyone

Email Address:
Date of first visit:
How you found us:

Subscribe
to The Internet Patrol on your cell phone    Email the link for this page to a friend!

Read more:

»  New Critical Internet Explorer (IE) Flaw Involves Msdds.dll

»  Internet Explorer 6 Security Flaw Given “Extremely Critical” Status

»  Microsoft Announces Patch for “Help Flaw” Security Hole

»  Severe Security Flaw in Netscape

For additional similar stories check out our archives on Security, Windows

 

4 Comments »

  1. Hello,
    Thanks for your continuing series of well thought out and well written columns.
    I get your column courtesy of Lockergnome. As with all of their links to their contributors, I first click on the link to the article and then have to click again to get to the full text.
    I can only think that this is to force exposure to the ads - am I correct in this?
    Thanks.

    Jon

    Comment by Jon Chorney — 7/5/2005 @ 4:33 am

  2. “As with all of their links to their contributors, I first click on the link to the article and then have to click again to get to the full text.
    I can only think that this is to force exposure to the ads - am I correct in this?”

    No, it is to provide exposure to the author. In exchange for providing content for free to the host site, visitors are steered to the author site. For example, you have now found Aunty’s site, and Aunty is very happy to welcome you!

    Kissy kissy,

    Aunty Spam

    Comment by Aunty Spam — 7/5/2005 @ 7:32 am

  3. Oh, Aunty. CP could have just as easily put the link to your site directly in his newsletter. But then his advertisers wouldn’t pay for his newsletter, the ads being on the page that links to your site.

    Comment by Ken A — 7/11/2005 @ 4:25 am

  4. Or, one can easily subscribe to Aunty’s newsletter in addition to “Lockergnome” by CP. Aunty’s subscription link is on this page twice; near the top and just above these comments.

    Comment by Robert W. Jones — 8/12/2005 @ 3:37 am

RSS feed for comments on this post.

Leave a comment

Warning! All comments which contain URLs and are clearly just spam to generate a link back to the URL will be deleted on sight. Don't bother wasting your time!

If you are going to include a URL in your comment,
please keep it under 25 characters in length,
or use TinyURL to shorten it before including it in your comment.

Line and paragraph breaks are automatic, your email address is never displayed.
HTML allowed: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>

(required)

(required)


We apologize for having to ask you to enter the letters and numbers you see in the image above to validate your comment, but we are being attacked by thousands of comment form spams every day!

 
The Internet Patrol
Patrolling the Internet for You!