none
Internet Explorer begins blocking out-of-date ActiveX controls RRS feed

All replies

  • Thank you for the update, Mark.

    Cheers,

    Vincenzo Di Russo
    Microsoft® MVP Windows Internet Explorer, Windows & Security Expert - since 2003.
    Moderator in the Microsoft Community and TechNet Forums
    My MVP Profile

    Tuesday, August 12, 2014 5:11 AM
  • Hello Mark,

    Can you provide some guidance on how large the VersionAuditLog.csv is going to be when permanently enabled? Will the file just grow or start overwriting itself when reached a certain size. We are concerned about the file continuously growing. Also why does the same site get logged multiple times?

    Thanks

    Alex

    P.s the possibility to have the results logged to a central location would be a nice option for enterprises. I am now about to brew a solution to pull log files from 12000 clients globally :-)


    Please remember to click "Mark as Answer" or "Vote as Helpful" on the post that answers your question (or click "Unmark as Answer" if a marked post does not actually answer your question). This can be beneficial to other community members reading the thread.


    This forum post is my own opinion and does not necessarily reflect the opinion or view of my employer, Microsoft, its employees, or MVPs.

    Twitter: @alexverboon | Blog: Anything About IT

    Tuesday, August 26, 2014 6:37 PM
  • Hi. Is there a way to specify the location of the versionlist.xml? I would like to locate it on a server, similar to what we do with PAC file. Thank you!

    Mat

    Friday, September 5, 2014 6:33 PM
  • Hello,

    There seems to be an entry missing in the versionlist.xml file.

    There is an entry missing for wsdetect.dll (isInstalled Class ActiveX Control) from Java 1.7, I believe (there is an entry for 1.6, 1.5, 1.4 but 1.7 is missing).

    Here is the relevant portion of the XML file:

       <blocklistentry key="{5852f5ed-8bf4-11d4-a245-0080c6f74284}" entrytype="2">
          <versionentries numberofelements="4">
            <versionentry groupname="Java(TM) 1.6.0_81" filename="wsdetect.dll" productversion="6.0.810.0-6.65535.65535.65535" fileversion="6.0.810.0-6.65535.65535.65535" />
            <versionentry groupname="Java(TM) 1.5.0_71" filename="JavaWebStart.dll" productversion="5.0.710.0-5.65535.65535.65535" fileversion="5.0.710.0-5.65535.65535.65535" />
            <versionentry groupname="Java(TM) 1.4.2_43" filename="JavaWebStart.dll" productversion="1.4.2.430-1.4.65535.65535.65535" fileversion="1.4.2.430-1.4.65535.65535.65535" />
            <versionentry groupname="Java(TM)" filename="*" productversion="*" fileversion="*" />
          </versionentries>

    This causes the alert prompt to appear when using Java 1.7 update 67 even though it's allowed by XML.

    To reproduce, please go to a site that uses wsdetect.dll like Wikipedia (like here http://commons.wikimedia.org/wiki/File:Example.ogg) and check if the prompt appears for you.


    • Edited by Emkay1001 Wednesday, September 10, 2014 5:19 PM Improving readability
    Wednesday, September 10, 2014 5:15 PM
  • Thanks for the report Emkay1001. We're investigating.

    Mark.


    Mark Feetham Senior Program Manager Internet Explorer Product Quality

    Thursday, September 11, 2014 2:55 PM
  • Emkay1001, once again thanks for information. The product group has processed a change, a revised list has been published and is propagating.

    Regards

    Mark.


    Mark Feetham Senior Program Manager Internet Explorer Product Quality

    Thursday, September 11, 2014 7:17 PM
  • Hello,

    Thank you very much for the quick fix!

    I can already tell that it's working fine for me.

    Thursday, September 11, 2014 7:32 PM
  • On Wednesday 6th August 2014, we announced that as part of our ongoing commitment to delivering a more secure browser, starting September 9th Internet Explorer will block out-of-date ActiveX controls. (Note: The original post stated that the ActiveX blocking would begin on August 12th. Please refer to the addendum for further details).

    Please take a look at this important update via the blog post as well as the FAQ contained therein and commence testing within your domain.

    Thanks and Regards

    Mark

    http://blogs.msdn.com/b/ie/archive/2014/08/06/internet-explorer-begins-blocking-out-of-date-activex-controls.aspxvv


    Mark Feetham Senior Supportability Program Manager, Internet Explorer.



    Sorry but that link does not work buddy,

    https://technet.microsoft.com/library/security/ms14-sep

    http://technet.microsoft.com/en-us/security/cc998259.aspx
    • Edited by ThrashZone Thursday, September 18, 2014 7:03 PM
    Thursday, September 18, 2014 7:02 PM
  • uggh! fixed it...

    http://blogs.msdn.com/b/ie/archive/2014/08/06/internet-explorer-begins-blocking-out-of-date-activex-controls.aspx


    Mark Feetham Senior Program Manager Internet Explorer Product Quality

    Wednesday, October 8, 2014 5:44 PM