Zone Java scripting

Risk Level: Low risk vulnerability  Low

Check or Attack Name: Zone java scripting

Platforms: Windows NT, Internet Explorer
Description:

The security zone settings allow script code embedded in HTML pages within the URL security zone to be able to use Java applets, provided that the applets expose properties, methods, and events. The web browser may automatically execute potentially malicious Java applets or scripts.

Remedy:

Depending on your version, select one of the following choices in Internet Explorer:

  • For Internet Explorer 4.x:

    1. Open Internet Explorer 4.x.
    2. From the View menu, select Internet Options.
    3. Click the Security tab.
    4. Select the appropriate Zone.
    5. Click Custom (for expert users).
    6. Click Settings.
    7. Disable Scripting of Java applets.
    8. Click OK twice to apply the changes.

  • For Internet Explorer 5.x:

    1. Open Internet Explorer 5.x.
    2. From the Tools menu, select Internet Options.
    3. Click the Security tab.
    4. Select the appropriate Zone.
    5. Click Custom Level.
    6. In the Scripting area, disable Scripting of Java applets.
    7. Click OK twice to apply the changes.

References:

X-Force Logo
Know Your Risks