Skip to main content
Share Your Experience: Take the 2024 Developer Survey

Questions tagged [internet-explorer]

Internet Explorer is a web browser from Microsoft. It is the default web browser in Microsoft Windows.

Filter by
Sorted by
Tagged with
0 votes
1 answer
162 views

Windows 98 hacked just by visiting a website? [duplicate]

I am wondering how this was possible. I remember my cousin used to use the family computer and it was infected with viruses just by browsing the internet. I recall a bunch of our desktop icons turned ...
Zaku's user avatar
  • 101
0 votes
0 answers
376 views

Why would iexplore.exe run Wscript.exe?

In Windows logs, I found that C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe launched C:\Program Files\Internet Explorer\iexplore.exe" -dualengineadapter... which in turn launched &...
frankcolumbo's user avatar
1 vote
0 answers
143 views

Third-party P3P extension for Internet Explorer or Edge

P3P has been removed from Internet Explorer and Edge in Windows 10. Is there a third-party browser extension that, as a cookie filter, reads compact privacy policies and allows or blocks cookies based ...
Jonathan Dahlin's user avatar
2 votes
1 answer
639 views

How to avoid crash after successfully run shellcode?

I am a student studying information security. Recently I read this article link and made full exploit code. calc.exe is executed as expected. But after running shellcode, IE just crashed. (because no ...
ruslan's user avatar
  • 21
0 votes
1 answer
736 views

Find seed used in Math.random LCG given a list of outputs [duplicate]

Given one or two sequential Math.random outputs generated with Internet Explorer's linear congruential generator, is it possible to find the seed used in the LCG and find subsequent outputs? Here is ...
thriller's user avatar
7 votes
1 answer
7k views

What's the alternative of content security policy (CSP) header in Internet Explorer IE?

As mentioned in the Content Security Policy documentation & from the "supported browsers" page on the CSP site, CSP is not supported in Internet Explorer. So, if we want to support CSP in our ...
Abhishek Sharma M's user avatar
0 votes
1 answer
232 views

Telling the difference between firewall block or external problem with Page Cannot be Displayed (IE) [closed]

In our organization, when users run up against the firewall in Internet Explorer, this is what they see: The classic IE "Page Cannot Be Displayed". Of course, this is also what you see when ...
WakeDemons3's user avatar
5 votes
1 answer
934 views

What is the implication of HSTS on unsupported browsers?

HSTS is currently available only on Edge and IE11. What will be its implication on lower browser versions (IE9 & IE10)? How will HSTS behave? Will there be any impact on the site?
ChallengeMe's user avatar
2 votes
0 answers
90 views

IIS 7.5 don't let to use stream cipher! [closed]

Internet Information Services 7.5 in Windows 7 don't let me to use stream cipher. When I change the local group policy to force the use of stream cipher or GCM mode, which works like stream cipher, ...
seyyed heydar javadi's user avatar
1 vote
2 answers
2k views

Why does tls_version "TLS 1.2" from howsmyssl rate "Probably Okay" in Chrome on Windows 10 but "Bad" in IE11 on Windows 7?

I'm implementing an API endpoint based on howsmyssl to check the TLS version of clients then notify those clients about whether or not they passed the test. However, several clients have reported ...
bw-patrick's user avatar
2 votes
0 answers
2k views

Does Chrome cache smartcard PIN?

When I have authenticated with a server suing TLS/SSL using HTTPS using a smartcard and PIN and I invalidate the TLS session by restarting the server, refreshing Chrome browser does not reprompt for a ...
ansonl's user avatar
  • 131
0 votes
1 answer
201 views

Is the windows root trust store used by IE?

With the Symantec-Google drama, it would help to know if the Internet Explorer browser has its own root trust store built in to the browser, or uses the automatically updating Windows System root ...
Nathan Basanese's user avatar
1 vote
0 answers
216 views

Testing Adobe Flash - SWF Stack Corruption

For didactic purposes I have a windows 7 VM with IE11 and Adobe Flash 18.0.0.203. Also, I must test if CVE-2017-2988 can be executed on it. I have downloaded the stackbad.swf, inserted it in an index....
AlexandruC's user avatar
2 votes
1 answer
345 views

Securely launch local application from IE?

I am facilitating an management system project in intranet environment(but with internet access for many domain users) for printing barcode labels from a web interface. 1. The current method our ...
Ben's user avatar
  • 121
2 votes
0 answers
122 views

Unwanted browswer redirection

I use IE 10 on Windows 10, and when I type www.outlook.com, my Facebook page opens! I can type www.msn.com and use it to get to the email, but what is causing this and how to fix it? I tried several ...
NoChance's user avatar
  • 175
0 votes
0 answers
2k views

Is it ok to turn off P3P in IE11 on Windows 7?

Some time ago Microsoft dropped support for P3P in IE11 and Edge on Windows 10 (https://msdn.microsoft.com/en-us/library/mt146424(v=vs.85).aspx). Unfortunately P3P remains in use, by default, in IE11 ...
saekort's user avatar
  • 333
3 votes
0 answers
167 views

Mechanisms of built-in password managers in browser

I am researching for auto-fill mechanisms in built-in web-browsers password managers. Using windows hosts file i am redirecting browser query to my web-server where i am storing the full copy of ...
Giuseppe Baldinini's user avatar
0 votes
2 answers
236 views

Strange jagged lines and dissapearing browsing history in Internet Explorer 6 [closed]

A while back, the following occurred. The PC is a Dell Inpsirion, running Windows 7. The browser was IE6. The network router was Linksys though the PC was wired to it. The router was secured. Prior ...
GordyN.Nauught's user avatar
36 votes
2 answers
26k views

Smart-Screen filter still complains, despite I signed the executable, why?

First and foremost, this is my very first experience with Code Signing. I bought Standard Code Signing from Certum for 3 years. I intend to publish applications in Czech republic mostly. But to the ...
Vlastimil Burián's user avatar
1 vote
0 answers
332 views

Internet Explorer WScript Shell Enabled

While testing a company's systems security, I found out that they have allowed WScript.Shell to run in all of their Internet Explorer for Intranet websites. It works if you open HTML files in your IE ...
John McKean's user avatar
3 votes
1 answer
1k views

How to de-obfuscate a malicious payload?

I've received some spam email that led to a JavaScript file which I assume is malicious. My curiosity got the best of me so I opened the file in notepad and I'm trying to make sense of the code but I ...
Zeh's user avatar
  • 33
1 vote
1 answer
478 views

XSS Page Cannot be Displayed

When I try XSS on various websites, such as inserting " onmouseover="alert(1) in a search box, I either get a message saying You don't have permission to access this page or This page cannot be ...
BillyBob's user avatar
  • 123
8 votes
1 answer
2k views

Are Heap addresses randomized by ASLR?

I have been reading this article about an Internet Explorer exploit and I am a little confused about why the memory addresses effected by the heap-spray "work". The paper states that the attack uses ...
MikeTGW's user avatar
  • 183
13 votes
2 answers
3k views

How does Internet Explorer know what text files I have viewed?

I am using Windows 8.1 and Internet Explorer 11. Each time I use File Explorer to view a .txt file the history of Internet Explorer shows that I viewed that file in pages visited on this PC. ...
user2174870's user avatar
  • 1,398
2 votes
1 answer
144 views

How do websites track users for flow control

I've written a short program that uses a webbrowser to visit many pages of a website (on which users can sell/buy items - kind of like a specialist ebay). However after 20 or so page views I get ...
FraserOfSmeg's user avatar
1 vote
0 answers
15 views

Unable to remove a trojan that affects IE [duplicate]

I'm unable to remove a Trojan from my computer (and also that of a colleague). I think it came from a compromised Drupal website which had 5 malicious PHP scripts (now removed). I have run several ...
Aaron Kreider's user avatar
4 votes
2 answers
1k views

Can I Prevent Internet Explorer from Storing Login Requests in Memory?

Using Internet Explorer 11 I have been able to login to HTTPS web applications by providing a username and password and then subsequently logout. Whilst the browser process is running I can then dump ...
Matthew Murdoch's user avatar
0 votes
2 answers
2k views

Is it possible to execute xss when response is of content type:application/json in latest IE? [duplicate]

Question is when response type of request is coming as application/json and also there is not any kind of escaping/encoding implemented then is it possible to execute xss there? Changing file ...
bhartay's user avatar
  • 89
0 votes
0 answers
207 views

Sandboxing IE on metro interface

I hold a tablet with Windows 8.1. When I'm on the desktop interface I do use Sandboxie for normal internet usage to prevent having Windows infected. I wonder if there is a way to do the same with the ...
franz1's user avatar
  • 481
2 votes
0 answers
237 views

Problem using custom CryptoNG KSP on IE 11

We are currently developing a custom KSP (Key Storage Provider) for a Key Storage System. We successfully developed a CSP (CryptoAPI) and a KSP (CryptoNG) provider, and both work really fine for ...
CristianTM's user avatar
  • 2,580
5 votes
1 answer
15k views

Mixed Content error in IE11 - HTTPS resource on HTTP page

I have an HTTP webpage with a piece of JavaScript that adds an iframe to the page. The iframe is pointing to an HTTPS page. In the IE11 developer console, this error appears: SEC7111: HTTPS ...
Ben Amada's user avatar
  • 151
1 vote
2 answers
9k views

When and how will Internet Explorer refuse sha-1 certificates?

sha1 certificates are deprecated. The web browser Google Chrome shows a red security warning for the website https://sha1-2017.badssl.com/ (sha1 certificate expires in 2017). It shows neutral (neither ...
Colonel Panic's user avatar
2 votes
2 answers
310 views

Custom browser based on Internet Explorer - Uniqueness questions

I have developed a custom web browser for Windows using C# (based on Internet Explorer 11) and I'm trying to understand & solve the next issues: 1. I adjusted the User Agent string and the ...
Sahar Avr's user avatar
  • 181
3 votes
1 answer
484 views

Could the causes of CVE-2015-2502 vulnerability be common to Firefox and Chrome?

On Tuesday August 18, 2015, Microsoft published an advisory pointing out a 0-day vulnerability (CVE-2015-2502) that can be exploited by an attacker to perform a remote code execution on Internet ...
user avatar
11 votes
1 answer
49k views

Why does IE11 refuse to enable back navigation caching for HTTPS?

On my website, I get this error message in the console: DOM7011: The code on this page disabled back and forward caching. For more information, see: http://go.microsoft.com/fwlink/?LinkID=291337 ...
Flimm's user avatar
  • 1,280
4 votes
3 answers
4k views

How to avoid fake "Windows Virus Alert"

I was recently browsing online when I came across this page: When I chose to close the tab, I received this message: And after choosing "Leave this page" twice, I receive this message: Choosing OK ...
motoku's user avatar
  • 231
1 vote
1 answer
3k views

How malicious 3rd party toolbars on IE could be?

How dangerous for the user such 3rd party search/ad Internet Explorer toolbars are? Are they able to transmit information regarding my Internet surfing behaviour back to their developers even when I ...
user avatar
35 votes
5 answers
17k views

Why can't Windows 98/IE5 connect to HTTPS sites in 2015?

Recently I found an old installation CD for Windows 98 Second Edition, and looking for a bit of a nostalgia kick, I installed it inside VirtualBox. Win98SE shipped with IE 5.0, and browsing the web ...
smitelli's user avatar
  • 2,085
8 votes
1 answer
5k views

Does Microsoft Edge (Spartan) share Cookies, Cache, Passwords, or TLS Certificates with Internet Explorer?

Windows 10 was released with a new browser called Microsoft Edge. Interestingly, Internet Explorer is also installed on the same default install. Given that Chrome and Firefox tend to separate their ...
makerofthings7's user avatar
2 votes
2 answers
981 views

Internet Explorer - Advanced Properties for Trusted Root Certificates

If you go to IE -> Internet Options -> Content -> Certificates -> Trusted Root Certification Authorities. Now Click on some CA certificates and click on Advanced You can add properties to the ...
user93353's user avatar
  • 2,042
2 votes
2 answers
194 views

Browser Updated, yet still vulnerable to POODLE

So here's a situation, some of my company's partners notified us that they will be entirely disable their server's SSLv3 support. This prompts my superior to take this chance to update our operation ...
John's user avatar
  • 21
2 votes
1 answer
3k views

What benefit does the IE setting "Block unsecured images with other mixed content" provide?

Internet Explorer has the security setting shown in below screen shot. My understanding is that "unsecured images" are images that are not transmitted over HTTPS. What I am curious about is why does ...
user avatar
2 votes
5 answers
2k views

How to analyze spam email URLs to detect exploits?

I'm receiving spam emails that, looking at the email headers, appear to be coming from a variety of computers around the planet. They're always the same type of email that contains invalid URLs inside ...
Icann's user avatar
  • 453
0 votes
0 answers
106 views

Security audit framework of Internet Explorer Outlook Web Access (OWA) add-on?

I'm working with a software company that has developed an add-on to Outlook Web Access. They are aggregating data and providing a consolidated view of a particular topic / category. I have experience ...
Swalsh's user avatar
  • 1
0 votes
1 answer
532 views

Arbitrary code execution by opening a webpage by IE?

I came across this piece of HTML code today: <!doctype html> <html> <meta http-equiv="X-UA-Compatible" content="IE=EmulateIE8" > <head> </head> <body> <SCRIPT ...
user61258's user avatar
50 votes
7 answers
5k views

Is the option to jump to blanks in password fields a security risk?

Using Ctrl + ← / →, it's a common behavior across different operating systems to jump from word to word (or from blank to blank) in text input fields. Now I've discovered that this also applies on ...
stuXnet's user avatar
  • 679
1 vote
1 answer
2k views

How to force browsers to accepte all further SSL certificates

I am using the last versions of IE, Firefox and Google Chrome web browsers on Windows 8. How can force these browsers to accept automatically the SSL certificates of any website I will visit ? I know ...
user avatar
2 votes
2 answers
516 views

Are Internet Explorers "Tracking Protection" able to prevent AddThis canvas fingerprinting?

A paper on web tracking mechanisms identifies the web-tracking company AddThis as a major user of canvas fingerprinting. Are IE:s Tracking Protection, provided Tracking Protection Lists including ...
qnyz's user avatar
  • 211
-1 votes
1 answer
322 views

HTTPS encryption and internet proxy [closed]

I'm not sure if this is the right place to ask this question. Please tell me, and I'll delete it. I want to modify a Word document hosted on my OneDrive account. I see that it is using a SSL ...
VansFannel's user avatar
-2 votes
1 answer
241 views

Vulnerability in Internet Explorer [closed]

An attacker could host a specially crafted website that is designed to exploit this vulnerability through Internet Explorer and then convince a user to view the website. This here being remote code ...
Alok's user avatar
  • 115