Internet Explorer has Java enabled

Risk Level: Low risk vulnerability  Low

Check or Attack Name: IE java enabled

Platforms: Windows 95, Windows NT: 4.0
Description:

The web browser has Java enabled. This option allows script code embedded in HTML pages to use Java applets, provided that the applets expose properties, methods, and events. The web browser may automatically execute potentially malicious scripts or Java applets.

Remedy:

Depending on your version, select one of the following choices in Internet Explorer:

  • In Internet Explorer 3.x, from the Options dialog box, go to Security and disable Enable Java Programs.

    1. Open Internet Explorer 3.x.
    2. From the View menu, select Options.
    3. Click the Security tab.
    4. Disable the Enable Java Programs option.
    5. Click OK to apply the changes.

  • In Internet Explorer 4.x, from the Internet Options dialog box, go to Advanced and disable the appropriate Java settings.

    1. Open Internet Explorer 4.x.
    2. From the View menu, select Internet Options.
    3. Click the Advanced tab.
    4. Go to the Java VM section and disable the appropriate options.
    5. Click OK to apply the changes.

  • In Internet Explorer 5.x, from the Internet Options dialog box, go to Security and disable the appropriate settings under Java.

    1. Open Internet Explorer 5.x.
    2. From the Tools menu, select Internet Options.
    3. Click the Security tab, and then click Custom Level.
    4. From the Java folder, locate the advanced feature and set it to the recommended value.
    5. Click OK to apply the changes.

References:

X-Force Logo
Know Your Risks