Internet Explorer exploit makes Windows vulnerable - April 2019

Page 1 of 2 12 LastLast
  1. AndreTen's Avatar
    Posts : 16,952
    Windows 10 (Pro and Insider Pro)
       #1

    Internet Explorer exploit makes Windows vulnerable - April 2019


    In short, zero day exploit of Internet Explorer makes Windows vulnerable. MS won't issue a separate security update, so uninstall Internet Explorer, or change default app t open .mht and .mhtlm files.

    Betanews | Internet Explorer flaw leaves Windows users vulnerable to hackers

    A zero-day exploit found in Internet Explorer means hackers could steal files from Windows users. What's particularly interesting about this security flaw is that you don't even need to be an Internet Explorer user to be vulnerable.
      My ComputersSystem Spec

  2. Farvatten's Avatar
    Posts : 73
    Windows 10 Pro 64bit 1809 17763.437
       #2

    How to associate .mht and .mhtml files with a Non-Microsoft Store app


    For those not wanting to uninstall IE, but instead associate *.mht and *.mhtml files with say Firefox Chrome; i.e, a Non-Microsoft Store app:

    Create two text files and rename them to test.mht and test.mhtml, where you can then 'Right click > Open with > Choose another app '. Find Chrome in the list while remembering to check box [x] 'Always use this app to open'

    Some associations can not be done via 'Settings > Apps > Default Apps > Choose default apps by file type' where the only option is 'Look for an app in the Microsoft Store'

    Edit Note: removed Firefox association example and substituted Chrome
    Bree said: View Post
    Which is great - until you actually want to open an MHT file of your own. Firefox can't, in fact it offers to open it for you in IE.

    Apparently Chrome can open .mht/.mhtml files, and now so can the new Cromium-based Edge preview.

    Choose Default Apps in Windows 10


    Last edited by Farvatten; 5 Days Ago at 21:00. Reason: Removed Firefox association substitute Chrome
      My ComputersSystem Spec

  3. AndreTen's Avatar
    Posts : 16,952
    Windows 10 (Pro and Insider Pro)
    Thread Starter
       #3

    Vivaldi is capable to take association. But good tip

    Click image for larger version. 

Name:	image.png 
Views:	78 
Size:	9.2 KB 
ID:	230694
      My ComputersSystem Spec

  4. Bree's Avatar
    Posts : 10,824
    10 Home x64 (1809) (10 Pro on 2nd pc)
       #4

    Farvatten said: View Post
    Create two text files and rename them to test.mht and test.mhtml, where you can then 'Right click > Open with > Choose another app '. Find Firefox in the list while remembering to check box [x] 'Always use this app to open'
    Which is great - until you actually want to open an MHT file of your own. Firefox can't, in fact it offers to open it for you in IE.

    Apparently Chrome can open .mht/.mhtml files, and now so can the new Cromium-based Edge preview.

    Click image for larger version. 

Name:	image.png 
Views:	72 
Size:	21.2 KB 
ID:	230711

    Click image for larger version. 

Name:	image.png 
Views:	3 
Size:	31.9 KB 
ID:	230712
      My ComputersSystem Spec

  5. Farvatten's Avatar
    Posts : 73
    Windows 10 Pro 64bit 1809 17763.437
       #5

    @Bree Thanks for pointing this out!

    I've always appreciated your attention to details like this.

    It's not a file type I've heard of till today and explains why it wasn't in Firefox's default file type lists under Settings > Apps > Default Apps > Set defaults by app > Firefox > Manage.
      My ComputersSystem Spec

  6. Callender's Avatar
    Posts : 1,275
    Windows 10 Home 1809 32-bit
       #6

    Mine was already set to Vivaldi.

    Click image for larger version. 

Name:	mht_mhtml.jpg 
Views:	63 
Size:	13.5 KB 
ID:	230718

    I don't have Internet Explorer either:


    Click image for larger version. 

Name:	Windows Features.jpg 
Views:	62 
Size:	56.4 KB 
ID:	230719
      My ComputerSystem Spec

  7.    #7

    I can open .mht files in Word. Note some old programs rely on the use of IE and won't work if IE is removed. One such example is Microsoft Money c. 2005 which is extremely useful.
      My ComputersSystem Spec

  8.    #8

    I have uninstalled it and will do so every time I need to install Windows from now on.
      My ComputersSystem Spec


  9. Posts : 1,504
    Windows 10 Home x64 and Pro x86
       #9

    The BetaNews article explains that the danger lies in opening malicious mht or mhtl files sent by hackers.

    So if you don't open mht / mthl files sent by others then there is nothing to worry about.

    Denis
      My ComputerSystem Spec

  10. TairikuOkami's Avatar
    Posts : 3,666
    Home 1903 x64 10.0.18362.53
       #10

    Page said the actual vulnerable code relies on how Internet Explorer deals with CTRL+K (duplicate tab), "Print Preview," or "Print" user commands. This normally requires some user interaction, but Page said this interaction could be automated and not needed to trigger the vulnerability exploit chain. "A simple call to the window.print() Javascript function should do the trick without requiring any user interaction with the webpage," he said.
    Internet Explorer zero-day lets hackers steal files from Windows PCs | ZDNet
      My ComputerSystem Spec


 
Page 1 of 2 12 LastLast

Related Threads
Windows 10, version 1607 for Education, Enterprise, and IoT Enterprise will reach the end of servicing on April 9, 2019. This means that version 1607, for these editions, will no longer receive security updates. Customers who contact Microsoft...
https://www.howtogeek.com/fyi/windows-10-will-finally-offer-easy-access-to-linux-files/
Source: April 2015 security updates for Internet Explorer - IEBlog - Site Home - MSDN Blogs
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 15:19.
Find Us