MS07-057: Cumulative security update for Internet Explorer

Microsoft has released security bulletin MS07-057. The security bulletin contains all the relevant information about the security update. This information includes file manifest information and deployment options. To view the complete security bulletin, visit one of the following Microsoft Web sites:

•	Home users: http://www.microsoft.com/protect/computer/updates/bulletins/200710.mspx (http://www.microsoft.com/protect/computer/updates/bulletins/200710.mspx) Skip the details: Download the updates for your home computer or laptop from the Microsoft Update Web site now: http://update.microsoft.com/microsoftupdate/ (http://update.microsoft.com/microsoftupdate/)
•	IT professionals: http://www.microsoft.com/technet/security/bulletin/ms07-057.mspx (http://www.microsoft.com/technet/security/bulletin/ms07-057.mspx)

Back to the top

Known issues with this security update

•	You may receive an error message that resembles the following when you try to visit a Web page in Windows Internet Explorer 7: Webpage cannot be displayed For more information about this issue, click the following article number to view the article in the Microsoft Knowledge Base: 942818 (http://support.microsoft.com/kb/942818/) Error message after you install a Windows Internet Explorer 7 update from Windows Update or from Microsoft Update: "Webpage cannot be displayed"
•	When you browse from one Web site to a different Web site in Microsoft Internet Explorer 6 in Windows XP, Internet Explorer 6 may crash. For more information about this issue, click the following article number to view the article in the Microsoft Knowledge Base: 940072 (http://support.microsoft.com/kb/940072/) When you browse from one Web site to a different Web site in Internet Explorer 6 on a Windows XP-based computer, Internet Explorer 6 crashes
•	ActiveX controls that prompt before they are loaded. Note This issue occurs on Web sites that do not use the recommended techniques. This issue is resolved by using the techniques that are described on the following Microsoft Web site: http://msdn2.microsoft.com/en-us/library/ms537508.aspx (http://msdn2.microsoft.com/en-us/library/ms537508.aspx) When certain controls are loaded on a Web page, the controls are not correctly masked by the functionality of this update. These controls include controls that are used in Macromedia Shockwave Director, in QuickTime Player, and in Virtools Web Player. When Windows determines that a control is inactive, the system prompts the user before the control is loaded.
•	The use of monikers is no longer supported in Internet Explorer. For more information about this issue, click the following article number to view the article in the Microsoft Knowledge Base: 906294 (http://support.microsoft.com/kb/906294/) The use of monikers is no longer supported in Internet Explorer after installing the security updates provided by cumulative security update 896727 (MS05-038)
•	You create a custom administrative template file to customize Microsoft Win32 Internet (WinINet) settings on a computer that is running Windows XP Service Pack 2 (SP2). When you do this, WinINet ignores the policies that you set. For more information about this issue, click the following article number to view the article in the Microsoft Knowledge Base: 904710 (http://support.microsoft.com/kb/904710/) WinINet ignores the policies that you set when you create a custom administrative template file in Windows XP with Service Pack 2

Back to the top

Non-security-related fixes that are included in this security update

Individual updates may be installed, depending on the operating system and affected application versions. Please view the individual articles to determine your update status.

General distribution release (GDR) fixes

•	918961 (http://support.microsoft.com/kb/918961/) FIX: Internet Explorer 6 may exit with an access violation when the JavaScript garbage collector runs and you have dynamically removed a TBODY, THEAD, or TFOOT HTML tag from a table in Windows XP
•	934014 (http://support.microsoft.com/kb/934014/) FIX: Windows Internet Explorer 7 does not download an ActiveX control that is referenced in a CODEBASE attribute when you open a Web page that contains the OBJECT element and the CLSID attribute is missing
•	935729 (http://support.microsoft.com/kb/935729/) You cannot open a Web page by using Windows Internet Explorer 7 if the URL of the Web page contains non-ASCII characters
•	941896 (http://support.microsoft.com/kb/941896/) You cannot log on to an FTP site or you are redirected to the root folder of the FTP site in Internet Explorer 7

Hotfixes

Security update 939653 packages for Windows XP and for Windows Server 2003 include Internet Explorer hotfix files and general distribution release (GDR) files. If no existing Internet Explorer files are from the hotfix environment, security update 939653 will install the GDR files. Hotfixes are intended to correct only the problems that are described in the Microsoft Knowledge Base articles that are associated with the hotfixes. Apply hotfixes only to systems that are experiencing these specific problems. These hotfixes may receive additional testing. Therefore, if you are not severely affected by this problem, we recommend that you wait for the next service pack that contains these hotfixes. For more information about how to install the hotfixes that are included in security update 939653, click the following article number to view the article in the Microsoft Knowledge Base:

Note In addition to installing hotfix files, review the Microsoft Knowledge Base article that is associated with the specific hotfix that you have to install to determine the registry modification that is required to enable that specific hotfix.

For more information about how to determine whether your existing Internet Explorer files are from the hotfix or from the GDR environment, click the following article number to view the article in the Microsoft Knowledge Base: The third-party products that this article discusses are manufactured by companies that are independent of Microsoft. Microsoft makes no warranty, implied or otherwise, about the performance or reliability of these products.

Back to the top

File information

The English (United States) version of this security update has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.

Back to the top