ELM Bulletin - November 23, 2005
Microsoft Internet Explorer Vulnerability
Microsoft has recently been informed that a security vulnerability exists within Internet Explorer which could potentially place millions of computers at risk. All computers running Windows XP Service Pack 2 or Windows 2000 Service Pack 4 are affected, even if they have been fully patched.
At issue is a flaw in the way in which Internet Explorer handles certain JavaScript code. JavaScript is a programming language that is used on the internet primarily to offer a more full featured browsing experience. Individuals taking advantage of this security vulnerability could ultimately gain complete control over any compromised computer system.
At this time no patch is available from Microsoft to repair the vulnerability but one is anticipated over the next couple of weeks. If you wish to take precautionary measures against this security vulnerability you can disable Active Scripting using the following procedure:
1/ Close all open applications
2/ Open Internet Explorer
3/ Click on the TOOLS menu
4/ Click on the INTERNET OPTIONS sub-menu
5/ Click on the SECURITY tab
6/ Ensure that the INTERNET icon is selected and click on the CUSTOM LEVEL button
7/ Scroll to the bottom of the displayed list and then scroll slowly upward until you see the SCRIPTING heading
8/ Under the ACTIVE SCRIPTING sub-heading select DISABLE
9/ Click on OK
10/ Click on OK (again)
Once Microsoft has released a patch to correct this problem we will notify you so that you can reverse this procedure to restore full internet functionality.
As always, please do not hesitate to contact me if you have any questions about this or any other issue.
Past issues of the ELM Bulletin are available from our website, feel free to forward them to anyone you wish.
You have received this ELM Bulletin either by request or because you have given your contact information to an ELM employee. If you no longer wish to receive the ELM Bulletin, send us an email with "Remove Me" in the subject line and we will remove your email address from our distribution list.
Peter Rhebergen Telephone |
Websites & Publications Product Websites |
