logo
DATABASE RESOURCES PRICING ABOUT US

MS07-045: Cumulative security update for Internet Explorer

Description

<html><body><p>Resolves two vulnerabilities by setting the kill bit for ActiveX objects. Addresses the third vulnerability by modifying the way that Internet Explorer handles certain strings in CSS files.</p><h2></h2><div class="kb-notice-section section">The update that this article describes has been replaced by a newer update. To resolve this problem, install the most current cumulative security update for Internet Explorer. To install the most current update, visit the following Microsoft Web site:<div class="indent"><a href="http://update.microsoft.com" id="kb-link-1" target="_self">http://update.microsoft.com</a></div>For more technical information about the most current cumulative security update for Internet Explorer, visit the following Microsoft Web site:<div class="indent"><a href="http://www.microsoft.com/technet/security/current.aspx" id="kb-link-2" target="_self">http://www.microsoft.com/technet/security/current.aspx</a></div></div><h2>INTRODUCTION</h2><div class="kb-summary-section section">Microsoft has released security bulletin MS07-045. The security bulletin contains all the relevant information about the security update. This information includes file manifest information and deployment options. To view the complete security bulletin, visit one of the following Microsoft Web sites: <ul class="sbody-free_list"><li>Home users:<div class="indent"><a href="http://www.microsoft.com/protect/computer/updates/bulletins/200708.mspx" id="kb-link-3" target="_self">http://www.microsoft.com/protect/computer/updates/bulletins/200708.mspx</a></div></li><li>IT professionals:<div class="indent"><a href="http://www.microsoft.com/technet/security/bulletin/ms07-045.mspx" id="kb-link-4" target="_self">http://www.microsoft.com/technet/security/bulletin/ms07-045.mspx</a></div></li></ul></div><h2></h2><div class="kb-moreinformation-section section"><h3 class="sbody-h3">Known issues with this security update</h3><ul class="sbody-free_list"><li>Controls that prompt before they are loaded<br/><br/><span class="text-base">Note</span> This issue occurs on Web sites that do not use the recommended techniques. This issue is resolved by using the techniques that are described on the following Microsoft Web site:<div class="indent"><a href="http://msdn.microsoft.com/en-us/ie/default.aspx" id="kb-link-5" target="_self">http://msdn.microsoft.com/en-us/ie/default.aspx</a></div>When certain controls are loaded on a Web page, the controls are not correctly masked by the functionality of this update. These controls include controls that are used in Macromedia Shockwave Director, in QuickTime Player, and in Virtools Web Player. When Windows determines that a control is inactive, the system prompts the user before the control is loaded.<br/></li><li>In Windows XP with Service Pack 2 (SP2) and in Windows Server 2003 with Service Pack 1 (SP1), the <span class="text-base">Add or Remove Programs</span> item in Control Panel lists software updates. These software updates are listed under the name of the product to which the updates apply. In Windows XP with SP2, <span class="text-base">Add or Remove Programs</span> lists this update under <strong class="uiterm">Windows XP - Software Updates</strong>.<br/></li><li>Using monikers is no longer supported in Internet Explorer. For more information about this issue, click the following article number to view the article in the Microsoft Knowledge Base: <br/><div class="indent"><span><div class="indent"><a href="https://support.microsoft.com/en-us/help/906294" id="kb-link-6">906294 </a> The use of monikers is no longer supported in Internet Explorer after installing the security updates provided by cumulative security update 896727 (MS05-038)<br/><br/></div></span></div></li><li><span><div class="indent"><a href="https://support.microsoft.com/en-us/help/937905" id="kb-link-7">937905 </a> Description of the Input Method Editor (Korean) 2007 hotfix package: July 7, 2007<br/><br/></div></span></li><li>You may receive an error message that resembles the following when you try to visit a Web page in Windows Internet Explorer 7: <div class="sbody-error"> Webpage cannot be displayed </div><span> For more information about this issue, click the following article number to view the article in the Microsoft Knowledge Base: <div class="indent"><a href="https://support.microsoft.com/en-us/help/942818" id="kb-link-8">942818 </a> Error message after you install a Windows Internet Explorer 7 update from Windows Update or from Microsoft Update: "Webpage cannot be displayed" </div></span></li></ul><h3 class="sbody-h3">Non-security-related fixes that are included in this security update</h3><ul class="sbody-free_list"><li><span><div class="indent"><a href="https://support.microsoft.com/en-us/help/941495" id="kb-link-9">941495 </a> Internet Explorer increases the per-domain cookie limit from 20 to 50 <br/><br/></div></span><br/><span class="text-base">General distribution release (GDR) fixes </span><ul class="sbody-free_list"><li><span><div class="indent"><a href="https://support.microsoft.com/en-us/help/937053" id="kb-link-10">937053 </a> When you copy text from a Rich Text box in InfoPath on a computer that has Internet Explorer 7 installed, the pasted text unexpectedly appears inside a table cell<br/><br/></div></span></li><li><span><div class="indent"><a href="https://support.microsoft.com/en-us/help/936953" id="kb-link-11">936953 </a> FIX: The item may not be selected when you use the windowless SELECT control to create a list in Internet Explorer 7<br/><br/></div></span></li><li><span><div class="indent"><a href="https://support.microsoft.com/en-us/help/936904" id="kb-link-12">936904 </a> Error message when you open a Web page in Windows Internet Explorer 7: "Internet Explorer has encountered a problem and needs to close"<br/><br/></div></span></li><li><span><div class="indent"><a href="https://support.microsoft.com/en-us/help/936882" id="kb-link-13">936882 </a> FIX: An access violation may occur and you may receive an error message when you open a Web page that uses SSL in Internet Explorer 6<br/><br/></div></span></li><li><span><div class="indent"><a href="https://support.microsoft.com/en-us/help/935777" id="kb-link-14">935777 </a> FIX: The buffer size of the InternetQueryOptionW function is half of its actual size if you use INTERNET_OPTION_URL as the second parameter in Internet Explorer 7<br/><br/></div></span></li><li><span><div class="indent"><a href="https://support.microsoft.com/en-us/help/935776" id="kb-link-15">935776 </a> FIX: The InternetQueryOptionW function returns a value of true when you use the INTERNET_OPTION_URL option flag as the second parameter in Internet Explorer 7<br/><br/></div></span></li><li><span><div class="indent"><a href="https://support.microsoft.com/en-us/help/935579" id="kb-link-16">935579 </a> FIX: When you access an external document by using a link in an inline frame in Internet Explorer 7, the value of the document object is returned as "undefined"<br/><br/></div></span></li><li><span><div class="indent"><a href="https://support.microsoft.com/en-us/help/933133" id="kb-link-17">933133 </a> When you try to use Internet Explorer 7 to download a file from a Web page, the file name changes<br/><br/></div></span></li><li><span><div class="indent"><a href="https://support.microsoft.com/en-us/help/933014" id="kb-link-18">933014 </a> FIX: An application uses the Favorites folder of Internet Explorer 7 as the root directory when the application calls the "DoOrganizeFavDlg" function<br/><br/></div></span></li><li><span><div class="indent"><a href="https://support.microsoft.com/en-us/help/932043" id="kb-link-19">932043 </a> A Web site cannot set a cookie if the Domain attribute is in uppercase characters and has an odd number of characters in Internet Explorer 6<br/><br/></div></span></li><li><span><div class="indent"><a href="https://support.microsoft.com/en-us/help/935575" id="kb-link-20">935575 </a> FIX: When you try to use Windows Internet Explorer 7 to display a Scalable Vector Graphics (SVG) file on a local computer, Internet Explorer 7 cannot display the SVG file<br/><br/></div></span></li></ul></li></ul><span>The third-party products that this article discusses are manufactured by companies that are independent of Microsoft. Microsoft makes no warranty, implied or otherwise, about the performance or reliability of these products.</span></div></body></html>


Related