PRB: Cab Files Signed Low in VJ++ Request Full IE Permissions (197573)


The information in this article applies to:

  • Microsoft Visual J++ 6.0
This article was previously published under Q197573

SYMPTOMS

When you sign a cabinet file (.cab) with Low permissions in Visual J++ and you open the Web page that calls the cabinet file, Internet Explorer displays a message that the component is signed with Full permissions.

CAUSE

When you sign a cabinet file with Low permissions in Visual J++, you are requesting that the code in the cabinet be fully trusted on the user's system. That is, you are essentially requesting the user to lower his or her Internet Explorer security level to Low to grant full access to the component. Only a security zone already set to the Low security level in Internet Explorer can grant this much access without first asking the user. Otherwise, Internet Explorer displays a message stating that the component is signed with Full permissions (that is, full access). The user has to click Yes to continue loading the specific code contained in the cabinet file.

RESOLUTION

This behavior is by design.

MORE INFORMATION

Details concerning cabinet file permission levels, Internet Explorer security zones, and how signed cabinet file permission levels act in the various Internet Explorer security zone settings, are outlined in detail in the Microsoft SDK for Java documentation. For more information, visit the following Microsoft Web site:

http://www.microsoft.com/mscorp/java/

IMPORTANT NOTE: In Internet Explorer, set your security level to Low only when you are certain that all content you might encounter in the specific zone is from a safe source (for example, your corporate intranet). In addition, when you run a component that is signed with Full permissions from a security zone that is not set as Low, make sure that you are certain it does not contain unsecure content.

REFERENCES

For support information about Visual J++ and the SDK for Java, visit the following Microsoft Web site:

http://www.microsoft.com/java



(c) Microsoft Corporation 1998, All Rights Reserved. Contributions by Brett Siedman, Microsoft Corporation.

Modification Type:MajorLast Reviewed:6/14/2006
Keywords:kbprb kbSecurity KB197573
©2004 Microsoft Corporation. All rights reserved.