This is a read-only archive. No new posts or registrations. Privacy Page
Discussion

MS Delays IE's ActiveX D-Day

2 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

FYI…

- http://www.eweek.com/article2/0,1895,1943847,00.asp
March 28, 2006
"Microsoft is moving full steam ahead with a plan to permanently modify the way Internet Explorer renders multimedia content on Web pages, but in what amounts to an admission that the changes could be disruptive, the software maker plans to give Web developers an extra 60 days to continue making preparations. The IE update, which results from a multimillion-dollar patent spat with Eolas Technologies, changes the way the browser handles ActiveX controls and could have a significant impact on how online advertising and streaming media content is delivered over the Internet. According to information reaching eWEEK, Microsoft announced the plans for a one-time 60-day extension during a conference call with industry partners on March 28 wherein Redmond officials reiterated the need for Web pages to be completely re-authored to avoid possible disruptions… At this stage it's optional, but when it becomes a "security" patch, the source argued that millions of people will not understand what is happening when multimedia content loads in a different way. Some widely deployed programs that use ActiveX controls within the browser include Adobe Reader and Flash, Apple's QuickTime Player, Microsoft's Windows Media Player, RealNetworks' RealPlayer and Sun's JVM (Java Virtual Machine). A white paper* detailing the ActiveX changes has been published on the MSDN (Microsoft Developer Network)."

Activating ActiveX Controls
* http://msdn.microsoft.com/library/?url=/wo…ing_activex.asp

:(
FYI…

Microsoft Altering ActiveX in Next Set of Patches
- http://isc.sans.org/diary.php?storyid=1228
Last Updated: 2006-03-30 10:43:03 UTC
"We've gotten several e-mails from diligent readers… about Microsoft's plans to alter the way ActiveX controls work in a non-security related update associated with some legal imbroglio. According to Microsoft:

"So [On April 11] when we release the next cumulative IE security update [which will also include the non-security update associated with ActiveX], customers will only be able to interact with Microsoft ActiveX controls loaded in certain web pages after manually activating their user interfaces by clicking on it or using the TAB key and ENTER key."

…What does this mean to you? On April 11, some of your ActiveX controls may stop working. You can test this new IE voodoo by downloading an optional patch for IE from Windows Update. Microsoft will have a tool (a retro-patch?) for making IE behave like it does now, but that tool will only be supported through the June updates. For more information, check out this advisory* for the details, or the newly added section to the FAQ (as of yesterday) to this advisory**, and read this blog posting*** from a Microsoft employee working this issue. The blog posting includes specific advice for enterprise users [WinXP Pro] (in summary… test!) and for consumers [WinXP Home edition]…"

* http://www.microsoft.com/technet/security/…ory/912945.mspx

** http://www.microsoft.com/technet/security/…ory/917077.mspx

*** http://blogs.technet.com/msrc/archive/2006/03/29/423560.aspx

:scratch: