Internet Explorer active scripting is enabled

Risk Level: Low risk vulnerability  Low

Check or Attack Name: IE active scripting

Platforms: Windows NT, Windows 95, Windows NT: 4.0
Description:

The web browser has active scripting enabled. This option allows ActiveX controls to be scripted within HTML pages. The web browser may automatically execute potentially malicious scripts.

Remedy:
  • In Internet Explorer 3.x, from the Options dialog box, go to Security and disable Run ActiveX Scripts.

    1. Open Internet Explorer 3.x.
    2. From the View menu, select Options.
    3. Click the Security tab.
    4. Disable the Run ActiveX Scripts option.
    5. Click OK to apply the changes.

  • In Internet Explorer 5.x, from the Internet Options dialog box, go to Security and disable the appropriate settings under Scripts.

    1. Open Internet Explorer 5.x.
    2. From the Tools menu, select Internet Options.
    3. Click the Security tab, and then click Custom Level.
    4. From the Scripts folder, locate the advanced feature and set it to the recommended value.
    5. Click OK to apply the changes.

References:

X-Force Logo
Know Your Risks