Bugtraq mailing list archives

Re: IE 5.0 allows executing programs


From: paulle () EXCHANGE MICROSOFT COM (Exchange)
Date: Fri, 3 Sep 1999 13:01:53 -0700


Despite how much I know it might pain some people, if one puts
"http://windowsupdate.microsoft.com"; in the "Trusted" zone, then one can
still disable "safe for scripting" controls in the "Internet" zone and get
the convenience of Windows Update without prompting.

(You could still be DNS spoofed. I tried using https:, but the site doesn't
like that...)

Paul


Current thread: