Skip to main content

Questions tagged [internet-explorer]

Internet Explorer is a web browser from Microsoft. It is the default web browser in Microsoft Windows.

Filter by
Sorted by
Tagged with
0 votes
2 answers
238 views

Strange jagged lines and dissapearing browsing history in Internet Explorer 6 [closed]

A while back, the following occurred. The PC is a Dell Inpsirion, running Windows 7. The browser was IE6. The network router was Linksys though the PC was wired to it. The router was secured. Prior ...
0 votes
1 answer
165 views

Windows 98 hacked just by visiting a website? [duplicate]

I am wondering how this was possible. I remember my cousin used to use the family computer and it was infected with viruses just by browsing the internet. I recall a bunch of our desktop icons turned ...
36 votes
2 answers
27k views

Smart-Screen filter still complains, despite I signed the executable, why?

First and foremost, this is my very first experience with Code Signing. I bought Standard Code Signing from Certum for 3 years. I intend to publish applications in Czech republic mostly. But to the ...
4 votes
2 answers
4k views

Forcing IE11 to use perfect forward secrey on AWS ELB

I can connect to my server in practically every browser except for Internet Explorer and I cannot figure out why. I am resolving SSL on AWS Elastic Load Balancer (ELB), which is configured to use the ...
2 votes
5 answers
2k views

How to analyze spam email URLs to detect exploits?

I'm receiving spam emails that, looking at the email headers, appear to be coming from a variety of computers around the planet. They're always the same type of email that contains invalid URLs inside ...
35 votes
5 answers
17k views

Why can't Windows 98/IE5 connect to HTTPS sites in 2015?

Recently I found an old installation CD for Windows 98 Second Edition, and looking for a bit of a nostalgia kick, I installed it inside VirtualBox. Win98SE shipped with IE 5.0, and browsing the web ...
0 votes
0 answers
385 views

Why would iexplore.exe run Wscript.exe?

In Windows logs, I found that C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe launched C:\Program Files\Internet Explorer\iexplore.exe" -dualengineadapter... which in turn launched &...
2 votes
1 answer
347 views

Securely launch local application from IE?

I am facilitating an management system project in intranet environment(but with internet access for many domain users) for printing barcode labels from a web interface. 1. The current method our ...
2 votes
1 answer
645 views

How to avoid crash after successfully run shellcode?

I am a student studying information security. Recently I read this article link and made full exploit code. calc.exe is executed as expected. But after running shellcode, IE just crashed. (because no ...
1 vote
0 answers
148 views

Third-party P3P extension for Internet Explorer or Edge

P3P has been removed from Internet Explorer and Edge in Windows 10. Is there a third-party browser extension that, as a cookie filter, reads compact privacy policies and allows or blocks cookies based ...
0 votes
1 answer
750 views

Find seed used in Math.random LCG given a list of outputs [duplicate]

Given one or two sequential Math.random outputs generated with Internet Explorer's linear congruential generator, is it possible to find the seed used in the LCG and find subsequent outputs? Here is ...
7 votes
3 answers
4k views

How can I detect (or inventory) all DLLs that don't use ASLR?

Based on this IE zero day, I'm interested in listing all DLLs in our systems that have been compiled to not work with ASLR. Ideally, I'd like to analyze a static file and not load it into memory to ...
2 votes
0 answers
2k views

Does Chrome cache smartcard PIN?

When I have authenticated with a server suing TLS/SSL using HTTPS using a smartcard and PIN and I invalidate the TLS session by restarting the server, refreshing Chrome browser does not reprompt for a ...
0 votes
1 answer
234 views

Telling the difference between firewall block or external problem with Page Cannot be Displayed (IE) [closed]

In our organization, when users run up against the firewall in Internet Explorer, this is what they see: The classic IE "Page Cannot Be Displayed". Of course, this is also what you see when ...
7 votes
1 answer
7k views

What's the alternative of content security policy (CSP) header in Internet Explorer IE?

As mentioned in the Content Security Policy documentation & from the "supported browsers" page on the CSP site, CSP is not supported in Internet Explorer. So, if we want to support CSP in our ...
4 votes
2 answers
1k views

Can I Prevent Internet Explorer from Storing Login Requests in Memory?

Using Internet Explorer 11 I have been able to login to HTTPS web applications by providing a username and password and then subsequently logout. Whilst the browser process is running I can then dump ...
5 votes
1 answer
15k views

Mixed Content error in IE11 - HTTPS resource on HTTP page

I have an HTTP webpage with a piece of JavaScript that adds an iframe to the page. The iframe is pointing to an HTTPS page. In the IE11 developer console, this error appears: SEC7111: HTTPS ...
2 votes
0 answers
239 views

Problem using custom CryptoNG KSP on IE 11

We are currently developing a custom KSP (Key Storage Provider) for a Key Storage System. We successfully developed a CSP (CryptoAPI) and a KSP (CryptoNG) provider, and both work really fine for ...
8 votes
1 answer
5k views

Does Microsoft Edge (Spartan) share Cookies, Cache, Passwords, or TLS Certificates with Internet Explorer?

Windows 10 was released with a new browser called Microsoft Edge. Interestingly, Internet Explorer is also installed on the same default install. Given that Chrome and Firefox tend to separate their ...
1 vote
2 answers
2k views

Why does tls_version "TLS 1.2" from howsmyssl rate "Probably Okay" in Chrome on Windows 10 but "Bad" in IE11 on Windows 7?

I'm implementing an API endpoint based on howsmyssl to check the TLS version of clients then notify those clients about whether or not they passed the test. However, several clients have reported ...
5 votes
1 answer
936 views

What is the implication of HSTS on unsupported browsers?

HSTS is currently available only on Edge and IE11. What will be its implication on lower browser versions (IE9 & IE10)? How will HSTS behave? Will there be any impact on the site?
2 votes
0 answers
92 views

IIS 7.5 don't let to use stream cipher! [closed]

Internet Information Services 7.5 in Windows 7 don't let me to use stream cipher. When I change the local group policy to force the use of stream cipher or GCM mode, which works like stream cipher, ...
0 votes
1 answer
205 views

Is the windows root trust store used by IE?

With the Symantec-Google drama, it would help to know if the Internet Explorer browser has its own root trust store built in to the browser, or uses the automatically updating Windows System root ...
1 vote
0 answers
217 views

Testing Adobe Flash - SWF Stack Corruption

For didactic purposes I have a windows 7 VM with IE11 and Adobe Flash 18.0.0.203. Also, I must test if CVE-2017-2988 can be executed on it. I have downloaded the stackbad.swf, inserted it in an index....
2 votes
0 answers
124 views

Unwanted browswer redirection

I use IE 10 on Windows 10, and when I type www.outlook.com, my Facebook page opens! I can type www.msn.com and use it to get to the email, but what is causing this and how to fix it? I tried several ...
0 votes
0 answers
2k views

Is it ok to turn off P3P in IE11 on Windows 7?

Some time ago Microsoft dropped support for P3P in IE11 and Edge on Windows 10 (https://msdn.microsoft.com/en-us/library/mt146424(v=vs.85).aspx). Unfortunately P3P remains in use, by default, in IE11 ...
3 votes
0 answers
169 views

Mechanisms of built-in password managers in browser

I am researching for auto-fill mechanisms in built-in web-browsers password managers. Using windows hosts file i am redirecting browser query to my web-server where i am storing the full copy of ...
1 vote
2 answers
9k views

When and how will Internet Explorer refuse sha-1 certificates?

sha1 certificates are deprecated. The web browser Google Chrome shows a red security warning for the website https://sha1-2017.badssl.com/ (sha1 certificate expires in 2017). It shows neutral (neither ...
1 vote
0 answers
335 views

Internet Explorer WScript Shell Enabled

While testing a company's systems security, I found out that they have allowed WScript.Shell to run in all of their Internet Explorer for Intranet websites. It works if you open HTML files in your IE ...
3 votes
1 answer
1k views

How to de-obfuscate a malicious payload?

I've received some spam email that led to a JavaScript file which I assume is malicious. My curiosity got the best of me so I opened the file in notepad and I'm trying to make sense of the code but I ...
1 vote
1 answer
484 views

XSS Page Cannot be Displayed

When I try XSS on various websites, such as inserting " onmouseover="alert(1) in a search box, I either get a message saying You don't have permission to access this page or This page cannot be ...
8 votes
1 answer
2k views

Are Heap addresses randomized by ASLR?

I have been reading this article about an Internet Explorer exploit and I am a little confused about why the memory addresses effected by the heap-spray "work". The paper states that the attack uses ...
11 votes
1 answer
49k views

Why does IE11 refuse to enable back navigation caching for HTTPS?

On my website, I get this error message in the console: DOM7011: The code on this page disabled back and forward caching. For more information, see: http://go.microsoft.com/fwlink/?LinkID=291337 ...
13 votes
2 answers
4k views

How does Internet Explorer know what text files I have viewed?

I am using Windows 8.1 and Internet Explorer 11. Each time I use File Explorer to view a .txt file the history of Internet Explorer shows that I viewed that file in pages visited on this PC. ...
4 votes
3 answers
4k views

How to avoid fake "Windows Virus Alert"

I was recently browsing online when I came across this page: When I chose to close the tab, I received this message: And after choosing "Leave this page" twice, I receive this message: Choosing OK ...
2 votes
1 answer
145 views

How do websites track users for flow control

I've written a short program that uses a webbrowser to visit many pages of a website (on which users can sell/buy items - kind of like a specialist ebay). However after 20 or so page views I get ...
1 vote
0 answers
15 views

Unable to remove a trojan that affects IE [duplicate]

I'm unable to remove a Trojan from my computer (and also that of a colleague). I think it came from a compromised Drupal website which had 5 malicious PHP scripts (now removed). I have run several ...
50 votes
7 answers
5k views

Is the option to jump to blanks in password fields a security risk?

Using Ctrl + ← / →, it's a common behavior across different operating systems to jump from word to word (or from blank to blank) in text input fields. Now I've discovered that this also applies on ...
7 votes
1 answer
489 views

Are HTML Components (HTC) files a potential attack vector?

I'm working on a site that has a higher-than-normal concern for user security. I've recently been working on some CSS issues with older versions of IE (we support 7 and higher) and found that an easy ...
0 votes
2 answers
2k views

Is it possible to execute xss when response is of content type:application/json in latest IE? [duplicate]

Question is when response type of request is coming as application/json and also there is not any kind of escaping/encoding implemented then is it possible to execute xss there? Changing file ...
0 votes
0 answers
210 views

Sandboxing IE on metro interface

I hold a tablet with Windows 8.1. When I'm on the desktop interface I do use Sandboxie for normal internet usage to prevent having Windows infected. I wonder if there is a way to do the same with the ...
26 votes
4 answers
2k views

How can a web application protect users when the browser doesn't support HSTS?

HTTP Strict Transport Security (HSTS) is a very useful feature at preventing OWASP a9 violations and attacks like SSLStrip which try and prevent the client from making a secure connection. This ...
2 votes
2 answers
313 views

Custom browser based on Internet Explorer - Uniqueness questions

I have developed a custom web browser for Windows using C# (based on Internet Explorer 11) and I'm trying to understand & solve the next issues: 1. I adjusted the User Agent string and the ...
3 votes
1 answer
486 views

Could the causes of CVE-2015-2502 vulnerability be common to Firefox and Chrome?

On Tuesday August 18, 2015, Microsoft published an advisory pointing out a 0-day vulnerability (CVE-2015-2502) that can be exploited by an attacker to perform a remote code execution on Internet ...
1 vote
1 answer
3k views

How malicious 3rd party toolbars on IE could be?

How dangerous for the user such 3rd party search/ad Internet Explorer toolbars are? Are they able to transmit information regarding my Internet surfing behaviour back to their developers even when I ...
2 votes
2 answers
996 views

Internet Explorer - Advanced Properties for Trusted Root Certificates

If you go to IE -> Internet Options -> Content -> Certificates -> Trusted Root Certification Authorities. Now Click on some CA certificates and click on Advanced You can add properties to the ...
19 votes
2 answers
75k views

Is there an SSL / TLS Certificate state-cache on Windows, IE, and Outlook and how it it managed?

Today I changed the SSL certificate that 3,000+ Outlook clients are using. In doing this I changed the certificate to an "older" one that had the same subject name, expiration and everything else. ...
10 votes
3 answers
520 views

Do I have to harden IE if I'm only using Firefox?

Assume a Windows 7 system (probably whatever home version comes with the machine), with the latest OS patches, latest IE and latest Firefox. Also assume that the user uses only Firefox for browsing, ...
2 votes
2 answers
197 views

Browser Updated, yet still vulnerable to POODLE

So here's a situation, some of my company's partners notified us that they will be entirely disable their server's SSLv3 support. This prompts my superior to take this chance to update our operation ...
2 votes
1 answer
3k views

What benefit does the IE setting "Block unsecured images with other mixed content" provide?

Internet Explorer has the security setting shown in below screen shot. My understanding is that "unsecured images" are images that are not transmitted over HTTPS. What I am curious about is why does ...