Zone low channel permissions

Risk Level: Low risk vulnerability  Low

Check or Attack Name: Zone low channel permissions

Platforms: Windows NT, Internet Explorer
Description:

The security zone settings allow the web browser to automatically install software updates from the URL security zone of the HTML page that contains the channel content. Potentially malicious channel content may automatically download and install without the user's knowledge.

Remedy:

Depending on your version, select one of the following choices in Internet Explorer:

  • For Internet Explorer 4.x:

    1. Open Internet Explorer 4.x.
    2. From the View menu, select Internet Options.
    3. Click the Security tab.
    4. Select the appropriate Zone.
    5. Click Custom (for expert users).
    6. Click Settings.
    7. Set Software file permissions to High safety.
    8. Click OK twice to apply the changes.

  • For Internet Explorer 5.x:

    1. Open Internet Explorer 5.x.
    2. From the Tools menu, select Internet Options.
    3. Click the Security tab.
    4. Select the appropriate Zone.
    5. Click Custom Level.
    6. In the Miscellaneous area, set Software channel permissions to High Safety.
    7. Click OK twice to apply the changes.

References:

X-Force Logo
Know Your Risks