Zone file download

Risk Level: Low risk vulnerability  Low

Check or Attack Name: Zone file download

Platforms: Windows NT, Internet Explorer
Description:

The security zone settings allow files to be downloaded directly from the URL security zone of the HTML page containing the download link. A potentially malicious or virus-infected program may be received without the user's knowledge.

Remedy:

Depending on your version, select one of the following choices in Internet Explorer:

  • For Internet Explorer 4.x:

    1. Open Internet Explorer 4.x.
    2. From the View menu, select Internet Options.
    3. Click the Security tab.
    4. Select the appropriate Zone.
    5. Click Custom (for expert users).
    6. Click Settings.
    7. Disable File Download.
    8. Click OK twice to apply the changes.

  • For Internet Explorer 5.x:

    1. Open Internet Explorer 5.x.
    2. From the Tools menu, select Internet Options.
    3. Click the Security tab.
    4. Select the appropriate Zone.
    5. Click Custom Level.
    6. In the Downloads area, disable File Downloads.
    7. Click OK twice to apply the changes.

References:

X-Force Logo
Know Your Risks