Archive for Internet Explorer

Microsoft includes XP in fix for recent IE security issue

Microsoft has released today (May 1, 2014) a security update (MS14-021 / 2965111) that addresses the recent Internet Explorer (IE) issue that was first discussed in Security Advisory 2963983. More importantly, Microsoft has decided to make this patch available for Windows XP users, although XP is officially no longer a supported operating system.

If your computers are set to receive automatic Windows updates from Microsoft, then this patch will be automatically installed.

Read more here:

http://blogs.technet.com/b/msrc/archive/2014/05/01/out-of-band-release-to-address-microsoft-security-advisory-2963983.aspx

https://technet.microsoft.com/library/security/ms14-may 

https://technet.microsoft.com/library/security/ms14-021

Unregister VGX.DLL for IE Zero-Day workaround

Post revised 4/30/2014

Over this past weekend (April 27, 2014), there have been numerous reports of another zero-day security flaw with Internet Explorer. Some sites have gone so far as to say :”stop using Internet Explorer” completely until this flaw is fixed.

But given that the vulnerability exists in a now deprecated VML vector graphics format, there is an easy workaround solution that is recommended by Microsoft and others — simply unregister the VGX.DLL system file that is associated with this deprecated format.

To unregister VGX.DLL manually

These instructions should work for XP, Vista, Windows 7, and Windows 8 computers. Before starting, you will need to know if you are running a 32-bot or a 64-bit version of Windows.

  1. Press “WIN“+R keys to display the Run window.
    WIN” = Windows key next to the ALT key. Press the “WIN” key like a Shift key, and then press the letter “R“)
  2. Type (or copy and paste) the following command into the Window, including the double quotes:
    “%SystemRoot%\System32\regsvr32.exe” -u “%CommonProgramFiles%\Microsoft Shared\VGX\vgx.dll”
  3. Wait for a response window to appear telling you that the command was successful.
  4. If you are running a 32 bit version of windows, you are done.
  5. If you are running a 64 bit version of Windows, you need to repeat steps 1-2-3, but using the following command instead:
    “%SystemRoot%\System32\regsvr32.exe” -u “%CommonProgramFiles(x86)%\Microsoft Shared\VGX\vgx.dll”

For more information:

https://technet.microsoft.com/en-us/library/security/2963983.aspx

http://nakedsecurity.sophos.com/2014/04/27/microsoft-acknowledges-in-the-wild-internet-explorer-zero-day/

Block IE10 from Installing

This is from the “wish I knew about this sooner…” department.

Microsoft released earlier this year the Internet Explorer 10 Blocker Toolkit for Windows (x86 and x64) and Windows 2008 R2 SP1. This patch does not pertain to networks that are running an update management tool, such as WSUS, that provides the ability to block IE10 from being rolled out.

For all other workstations, you can download and run this tool manually from each workstation. The tool is a .EXE file that contains three files to be extracted.

  1. Create or identify a temp folder to be used (e.g. c:\temp)
  2. Download and run the IE10 Blocker Toolkit.
  3. Click Yes and then select the temp folder from step 1 to extract the three files
    image
  4. Open up an elevated command prompt, and use the CD command to switch to the temp folder
  5. Type ie10_blocker.cmd  /B and press Enter to set the block for IE10.
    image
  6. Check that you receive “The operation completed successfully” message, and then close the command prompt window.

As a reminder, IE10 is only pushed out for Windows 7/2008R2 and above. So, there’s no need to run this command script on Windows XP or Vista or Windows Server 2003.

Setup Tracking Protection for Internet Explorer

Internet Explorer (IE) version 9/10 has a feature called Tracking Protection. Paul Thurrott covers the details of this feature in his blog post. By enabling Tracking Protection, chances are you will also see a performance boost when browsing the Internet.

So here are the quick steps for implementing Tracking Protection:

  1. Open up IE9/IE10 and click on Tools –> Safety –> Tracking Protection. This will open up the Tracking Protection section of Manage Add-ons.
    image   image

    Please note: whenever you change or add something to Tracking Protection, you may need to close and re-open the Tracking Protection in order to see your changes.

  2. Click “Your Personalized List” and click the Enable button. This will tell IE to automatically generate an internal tracking protection list based on your browsing habits.

    After enabling, click on “Settings for this list…” and it will display for you URL’s (based on your browsing history) that you may wish to block.
    image   image

  3. Close and then reopen Tracking Protection and you will now see a new option “Get a Tracking Protection online….”. Click on this link and from the new window that opens up, select one or more third party tracking protection lists. Then Click Add –> Add List, then close and reopen Tracking Protection.

    image   image   image

Now, go ahead and enjoy a safer and faster browsing experience!

Google Apps and Windows XP

Google recently announced that they will discontinue support for Microsoft’s Internet Explorer 8 (IE8) for its online apps and services by mid-November 2012. This decision is based on Google’s policy to only support the most recent version of a browser, and it’s immediate predecessor.

image

IE9 is currently available for Windows Vista, Windows 7, and Windows 2008 servers). IE10 is scheduled to be released in late OcTober.

This announcement by Google specifically impacts Windows XP users, as Windows XP does not and will not support IE9. This means that XP users may experience some loss of features when using things like Google Apps.

Please note that you can continue to use Google as your search engine with IE8 on your XP workstation. That is not being affected. Only online services such as Google Apps are impacted.

Solutions?

  1. The easiest (and less expensive) solution is to install the latest version of Google Chrome browser on your XP workstation, and use it for accessing Google Apps, and use IE8 for all your other web browsing needs.
  2. If you are already running Windows 7 or Windows Vista, you can do a free, in-place upgrade from IE8 to IE9. Here are the links:
    Download IE9 for Windows 7
    Download IE9 for Windows Vista
  3. Or, you can use this time to start thinking about replacing that old XP workstation with a newer Windows 7 system.

If you have questions, please contact me.