Article ID: 896905 - View products that this article applies to.
After you install Microsoft security update 896358 (MS05-026), Web applications that use the HTML Help ActiveX control (HHCTRL) to enable cross-frame navigation may not work correctly. The content that should be displayed in a different frame may be displayed in the same frame that contains the HTML Help ActiveX control.
Note This issue is relevant only if the registry has been modified so that URLs or Microsoft Internet Explorer security zones are authorized to host the HHCTRL. Otherwise, the HHCTRL is disabled by security update 890175 (MS05-001).
Note This article contains information that is supplemental to the following Microsoft Knowledge Base articles:
(http://support.microsoft.com/kb/890175/ )MS05-001: Vulnerability in HTML Help could allow code execution
(http://support.microsoft.com/kb/892675/ )Certain Web sites and HTML Help features may not work after you install security update 896358 or security update 890175
(http://support.microsoft.com/kb/896358/ )MS05-026: A vulnerability in HTML Help could allow remote code execution
Security update 896358 disables cross-frame navigation because the feature is a potential security vulnerability. This restricted capability is an expected and intended effect of installing the security update. Depending on the URLs and Internet Explorer security zones that you have enabled to use the HHCTRL, you may want to re-enable this feature.
Warning The symptoms of this issue are an expected and intended effect of installing the security update. This workaround may make the computer more vulnerable to the threats that security update 896358 addresses. The safest course is not to use this workaround.
Important This section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following article number to view the article in the Microsoft Knowledge Base:
(http://support.microsoft.com/kb/322756/ )How to back up and restore the registry in Windows
Consumers and non-enterprise customersTo re-enable cross-frame navigation, follow these steps:
Enterprise customersTo use Group Policy to re-enable cross-frame navigation across a domain, follow these steps:
Overview and examples for system administratorsFor more information about security update 896358, click the following article number to view the article in the Microsoft Knowledge Base:
(http://support.microsoft.com/kb/896358/ )MS05-026: Vulnerability in HTML Help could allow remote code execution
Group PolicyFor more information about Group Policy, visit the following Microsoft Web sites:
Technical support for x64-based versions of Microsoft WindowsOn computers that are running x64-based versions of Microsoft Windows, you may have to adapt the instructions in the "Resolution" section about how to modify the registry. For example, you might have to modify a different part of the registry, depending on whether you want to modify the 32-bit or the 64-bit functionality. For more information, click the following article number to view the article in the Microsoft Knowledge Base:
896459Your hardware manufacturer provides technical support and assistance for x64-based versions of Windows. Your hardware manufacturer provides support because an x64-based version of Windows was included with your hardware. Your hardware manufacturer might have customized the installation of Windows with unique components. Unique components might include specific device drivers or might include optional settings to maximize the performance of the hardware. Microsoft will provide reasonable-effort assistance if you need technical help with your x64-based version of Windows. However, you might have to contact your manufacturer directly. Your manufacturer is best qualified to support the software that your manufacturer installed on the hardware.
(http://support.microsoft.com/kb/896459/ )Registry changes in x64-based versions of Windows Server 2003 and Windows XP Professional x64 Edition
For product information about Microsoft Windows XP Professional x64 Edition, visit the following Microsoft Web site:
http://www.microsoft.com/windowsxp/64bit/default.mspxFor product information about x64-based versions of Microsoft Windows Server 2003, visit the following Microsoft Web site:
(http://go.microsoft.com/fwlink/?LinkId=151500)for other considerations.
Article ID: 896905 - Last Review: July 1, 2010 - Revision: 5.0