Internet Explorer is a web browser from Microsoft. It is the default web browser in Microsoft Windows.

learn more… | top users | synonyms

-5
votes
0answers
52 views

home page troubles in IE [migrated]

I am having trouble in changing IE homepage. Everytime I change my home page to google.com or default it changes my home page into annoying one called http://go.speedbit.com/?pid=s What the heck ...
0
votes
0answers
15 views

Does upgrading from IE8 to IE11 erase old IE8 stig settings? [migrated]

I hardened Internet Explorer 8 on a 2012 R2 Box according to latest IE8 Disa Stigs. A coworker accidentally installed IE11, realized his mistake and then rolled it back to IE8. Will the IE8 Disa ...
0
votes
2answers
79 views

Browser Updated, yet still vulnerable to POODLE

So here's a situation, some of my company's partners notified us that they will be entirely disable their server's SSLv3 support. This prompts my superior to take this chance to update our operation ...
2
votes
1answer
109 views

What benefit does the IE setting “Block unsecured images with other mixed content” provide?

Internet Explorer has the security setting shown in below screen shot. My understanding is that "unsecured images" are images that are not transmitted over HTTPS. What I am curious about is why ...
1
vote
5answers
110 views

How to analyze spam email URLs to detect exploits?

I'm receiving spam emails that, looking at the email headers, appear to be coming from a variety of computers around the planet. They're always the same type of email that contains invalid URLs inside ...
0
votes
0answers
28 views

Security audit framework of Internet Explorer Outlook Web Access (OWA) add-on?

I'm working with a software company that has developed an add-on to Outlook Web Access. They are aggregating data and providing a consolidated view of a particular topic / category. I have experience ...
1
vote
1answer
159 views

Arbitrary code execution by opening a webpage by IE?

I came across this piece of HTML code today: <!doctype html> <html> <meta http-equiv="X-UA-Compatible" content="IE=EmulateIE8" > <head> </head> <body> <SCRIPT ...
44
votes
6answers
4k views

Is the option to jump to blanks in password fields a security risk?

Using Ctrl + ← / →, it's a common behavior across different operating systems to jump from word to word (or from blank to blank) in text input fields. Now I've discovered that this also applies on ...
1
vote
1answer
395 views

How to force browsers to accepte all further SSL certificates

I am using the last versions of IE, Firefox and Google Chrome web browsers on Windows 8. How can force these browsers to accept automatically the SSL certificates of any website I will visit ? I know ...
1
vote
2answers
210 views

Are Internet Explorers “Tracking Protection” able to prevent AddThis canvas fingerprinting?

A paper on web tracking mechanisms identifies the web-tracking company AddThis as a major user of canvas fingerprinting. Are IE:s Tracking Protection, provided Tracking Protection Lists including ...
0
votes
1answer
158 views

HTTPS encryption and internet proxy [closed]

I'm not sure if this is the right place to ask this question. Please tell me, and I'll delete it. I want to modify a Word document hosted on my OneDrive account. I see that it is using a SSL ...
-3
votes
1answer
145 views

Vulnerability in Internet Explorer [closed]

An attacker could host a specially crafted website that is designed to exploit this vulnerability through Internet Explorer and then convince a user to view the website. This here being remote code ...
6
votes
2answers
297 views

Zero-Day Exploit targeting Internet Explorer Versions 9 through 11

Few days ago, FireEye has found a vulnerability, which affects all versions of IE (even the latest 11). Microsoft has official statement regarding this issue. FireEye wrote a technical article on ...
0
votes
1answer
76 views

Simpler idea for protection against reflected XSS on client side

I was going through some CLIENT side defenses against reflected XSS e.g. XSS auditor(chrome), IE8 XSS Filters, NoScript. They use regular expression and other sophisticated techniques. Why didn't they ...
4
votes
2answers
2k views

Forcing IE11 to use perfect forward secrey on AWS ELB

I can connect to my server in practically every browser except for Internet Explorer and I cannot figure out why. I am resolving SSL on AWS Elastic Load Balancer (ELB), which is configured to use the ...
1
vote
1answer
173 views

Are HTML Components (HTC) files a potential attack vector?

I'm working on a site that has a higher-than-normal concern for user security. I've recently been working on some CSS issues with older versions of IE (we support 7 and higher) and found that an easy ...
2
votes
1answer
155 views

Does Internet Explorer handle Extended Validation properly

I'm reading about Extended Validation (EV) certificates and have a few questions. From what I understand, EV allows domain owners to pay extra for a especially trusted certificate (that the browser ...
7
votes
2answers
848 views

How can I detect (or inventory) all DLLs that don't use ASLR?

Based on this IE zero day, I'm interested in listing all DLLs in our systems that have been compiled to not work with ASLR. Ideally, I'd like to analyze a static file and not load it into memory to ...
6
votes
2answers
20k views

Is there an SSL Certificate state-cache on Windows, IE, and Outlook and how it it managed?

Today I changed the SSL certificate that 3,000+ Outlook clients are using. In doing this I changed the certificate to an "older" one that had the same subject name, expiration and everything else. ...
8
votes
2answers
2k views

Will disabling the Java add-on in IE protect you from Java exploits?

Concerning the recent Java vulnerability (Should I be disabling Java?), the most common advise seems to be to disable Java plug-ins in the browser. However, Heise Security suggests that, when it ...
20
votes
4answers
1k views

How can a web application protect IE users when this browser doesn't support HSTS?

HTTP Strict Transport Security (HSTS) is a very useful feature at preventing OWASP a9 violations and attacks like SSLStrip which try and prevent the client from making a secure connection. My ...
4
votes
1answer
454 views

How did my homepage get changed in IE?

I have rarely used IE in the past. I just use it to test how a website looks. Today all of a sudden when I went on to open IE, it opened with a homepage that wasn't set by me. It was an address of a ...
9
votes
3answers
347 views

Do I have to harden IE if I'm only using Firefox?

Assume a Windows 7 system (probably whatever home version comes with the machine), with the latest OS patches, latest IE and latest Firefox. Also assume that the user uses only Firefox for browsing, ...