Windows Updates-Security

• Internet Explorer Security Update

Two security vulnerablities are patched with this update.

1. ImportExportFavorites

2. Unsafe ActiveX Controls

IE includes a feature which allows a user to export and import their favorite list of web sites as a file. It is possible for a malicious web site operator to use this capability to write files that can be used to execute system commands the next time the user logs unto the machine. If successful, under certain situations, the remote user would have almost the same rights as the desktop user.

The activeX controls here are incorrectly marked as "safe for scripting". This patch corrects the marks on the affected active X controls to prevent misuse.

Update for Internet Explorer 4

Update for Internet Explorer 5

Back