View Source Command Is Still Available in Internet Explorer (192703)

SYMPTOMS

When you try to use a custom Setup of Internet Explorer created with the Microsoft Internet Explorer Administration Kit and you are using a profile to remove the Source command from the View menu, a user may still be able to view the Hyper Text Markup Language (HTML) source code. This is a potential security breach as it allows users to load other files on the local computer.

RESOLUTION

A supported fix that corrects this problem is now available from Microsoft, but has not been fully regression tested and should be applied only to computers experiencing this specific problem. If you are not severely affected by this specific problem, Microsoft recommends that you wait for the next version of Internet Explorer.

To resolve this problem immediately, contact Microsoft Product Support Services to obtain the fix. For a complete list of Microsoft Product Support Services phone numbers and information on support costs, please see the following Microsoft Web site:

http://support.microsoft.com/default.aspx?scid=fh;EN-US;CNTACTMS

NOTE: Before you apply this fix, you must apply Microsoft Internet Explorer 4.01 Service Pack 1 (SP1).

The English version of this fix should have the following file attributes or later:

   Date      Time    Size       File name
   ------------------------------------------------
   06/16/98  11:09a     72,784  Advpack.dll
   08/28/98  03:37p     20,480  Prebind.exe
   08/31/98  10:34a  2,171,664  Shdo95.dll
   08/31/98  11:32a  2,170,640  Shdont.dll
   09/02/98  03:15p  1,393,653  Srx980826601373.zip
   08/28/98  03:37p     21,504  Verinst.exe
   06/16/98  11:09a      2,272  W95inf16.dll
   06/16/98  11:09a      4,608  W95inf32.dll