You Can Only Use Trusted Documents to Open Other Documents in the My Computer Zone (330913)



The information in this article applies to:

  • Microsoft Internet Explorer 6.0 SP1, when used with:
    • the operating system: Microsoft Windows XP
    • the operating system: Microsoft Windows 2000
    • the operating system: Microsoft Windows NT 4.0
    • the operating system: Microsoft Windows 98 Second Edition

This article was previously published under Q330913

SUMMARY

For security reasons, Internet Explorer 6 Service Pack 1 has changed from Internet Explorer 6 or previous versions when you move from an untrusted zone to the "My Computer" zone. As a result, some programs may no longer work correctly with Internet Explorer after you upgrade to Internet Explorer 6 SP1. The following examples illustrate such scenarios:
  • Example 1 : You cannot display HTML documents that are saved on your hard disk.

    When you save an HTML document to a local drive, Internet Explorer adds a "mark of the Web" string in the saved HTML document. Because Internet Explorer assigns a document that has the "mark of the Web" to the Internet zone, you cannot move from this document in the Internet Zone to a document in the My Computer zone.
  • Example 2 : A java applet uses the showDocument function to open a local document.

    A Java applet that uses the showDocument function to open a local document in the Internet zone does not load the document in the My Computer zone.

MORE INFORMATION

Internet Explore 6 Service Pack 1 includes new security code checks that help to prevent zone elevation.

NoteZone elevation is the attempt to gain access to a more secured zone from a less secured zone. For example, a malicious user tries to gain access to the My Computer zone from the Internet zone.

Because of the new security code checks, documents in the Internet zone cannot have access through hypertext reference (HREF) links or scripting to documents in the My Computer zone. Only documents located in the Trusted sites zone or the My Computer zone can access documents in the My Computer zone. Therefore, if you want to permit untrusted documents to access documents in the My Computer zone, you must add the source URL in the Trusted sites zone. Do so with caution and careful thought to prevent a potential security weakness.

Modification Type:MinorLast Reviewed:9/15/2006
Keywords:kbinfo KB330913