Internet Explorer has low active content security enabled

Risk Level: Low risk vulnerability  Low

Check or Attack Name: IE active content

Platforms: Windows 95, Windows NT: 4.0
Description:

The web browser downloads and executes any active content embedded within HTML pages. Potentially malicious content can be downloaded and executed by the web browser.

Remedy:
  • In Internet Explorer 3.x, from the Options dialog box, go to the Security/Safety Level and disable None (Not recommended).

    1. Open Internet Explorer 3.x.
    2. From the View menu, select Options.
    3. Click the Security tab.
    4. Click Safety Level.
    5. Disable the None (Not recommended) option.

  • In Internet Explorer 5.x, from the Internet Options dialog box, go to Security and disable the appropriate settings under Miscellaneous.

    1. Open Internet Explorer 5.x.
    2. From the Tools menu, select Internet Options.
    3. Click the Security tab, and then click Custom Level.
    4. From the Miscellaneous folder, locate the advanced feature and set it to the recommended value.
    5. Click OK to apply the changes.
    6. <

References:

X-Force Logo
Know Your Risks