Microsoft KB Archive/330913

= You Can Only Use Trusted Documents to Open Other Documents in the My Computer Zone =

Article ID: 330913

Article Last Modified on 2/1/2007

-

APPLIES TO

 Microsoft Internet Explorer 6.0 Service Pack 1, when used with:  Microsoft Windows XP Professional

 Microsoft Windows 2000 Standard Edition

 Microsoft Windows NT 4.0

 Microsoft Windows 98 Second Edition</li></ul> </li></ul>

-

<div class="notice_section">

This article was previously published under Q330913

<div class="summary_section">

SUMMARY
For security reasons, Internet Explorer 6 Service Pack 1 has changed from Internet Explorer 6 or previous versions when you move from an untrusted zone to the &quot;My Computer&quot; zone. As a result, some programs may no longer work correctly with Internet Explorer after you upgrade to Internet Explorer 6 SP1. The following examples illustrate such scenarios:
 * Example 1 : You cannot display HTML documents that are saved on your hard disk.

When you save an HTML document to a local drive, Internet Explorer adds a &quot;mark of the Web&quot; string in the saved HTML document. Because Internet Explorer assigns a document that has the &quot;mark of the Web&quot; to the Internet zone, you cannot move from this document in the Internet Zone to a document in the My Computer zone.
 * Example 2 : A java applet uses the showDocument function to open a local document.

A Java applet that uses the showDocument function to open a local document in the Internet zone does not load the document in the My Computer zone.

<div class="moreinformation_section">

MORE INFORMATION
Internet Explore 6 Service Pack 1 includes new security code checks that help to prevent zone elevation.

NoteZone elevation is the attempt to gain access to a more secured zone from a less secured zone. For example, a malicious user tries to gain access to the My Computer zone from the Internet zone.

Because of the new security code checks, documents in the Internet zone cannot have access through hypertext reference (HREF) links or scripting to documents in the My Computer zone. Only documents located in the Trusted sites zone or the My Computer zone can access documents in the My Computer zone. Therefore, if you want to permit untrusted documents to access documents in the My Computer zone, you must add the source URL in the Trusted sites zone. Do so with caution and careful thought to prevent a potential security weakness.

Additional query words: zone elevation

Keywords: kbinfo KB330913

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.