Don't press F1 on Internet explorer

alt

A new security advisory from Microsoft warns about a risk involving any version of Internet Explorer on Windows 2000 and Windows XP that can allow a malicious Web ware to infiltrate your PC. The F1 key is normally designated to bring up help in Windows programs, including the operating system. As per the advisory, the flaw is in the way VBScript processes help files in Internet Explorer. 

It means that in case a malicious Web site displays a specially crafted dialog box and a user pressed the F1 key, arbitrary code could be executed in the security context of the currently logged-on user.

ADVISE – Set security in Internet Explorer on the affected systems to “high.” as it will disable Active Scripting and keeps the VBScript code from executing. Also, in case you happen to come across a site that displays a message box that won’t go away that exhorts you to hit F1, log off or use the Windows Task manager to close IE

Next >

Last Updated on Thursday, 04 March 2010 10:52.

Add comment


Security code
Refresh