Disabling the MSIE hole.

From: Suresh P (surya@nsecure.net)
Date: 03/13/02 

From: "Suresh P" <surya@nsecure.net>
To: "Magnus Bodin" <magnus@bodin.org>, <vuln-dev@securityfocus.com>, <bugtraq@securityfocus.com>, <focus-ms@securityfocus.com>
Date: Wed, 13 Mar 2002 11:22:49 +0530

Hi All,
    You can disable the Latest MSIE hole on all windows machines
by enabling the security settings for the LocalZone.
unfortunately, there is no UI for doing this. All you have to
do is, launch regedit, traverse to the following key and
change the value to 3.
HKEY_CURRENT_USER
\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0
and change the value of "1004" from "0" to "3".
This is applicable for Windows 95/98/NT/2000

regards,
Suresh Ponnusami,
Internet Security Consultant,
nSecure Software (P) Ltd,
http://www.nsecure.net/
Ph: 91 80 535 1545
Fax: 91 80 535 1551
----------------------------------------------------------------------------
-
This message is intended for the addressee only. It may
contain privileged or confidential information. If you have
received this message in error, please notify the sender
and destroy the message immediately. Unauthorised
use or reproduction of this message is strictly prohibited.

Loading