Microsoft KB Archive/822914

= XML HTTP allows untrusted Web page to access local files =

Article ID: 822914

Article Last Modified on 5/27/2005

-

APPLIES TO


 * Microsoft Windows CE .NET 4.2

-





SYMPTOMS
An untrusted Web page can gain read access to local files by using an XML document data member.



Hotfix Information
A supported software update is now available from Microsoft as Windows CE 4.2 Core OS QFE 822914. To resolve this problem immediately, click the following article number for information about obtaining Windows CE Platform Builder and core operating system software updates:

837392 How to locate core operating system fixes for Microsoft Windows CE Platform Builder products

Prerequisites
This hotfix is supported only when all previously issued fixes for this product have also been installed. This update is supported only if all previously issued updates for this product have also been installed.

Restart requirement
After you install this hotfix, you must perform a clean build of the whole platform. On the Build menu, click Clean, and then click Build Platform on the Build menu.

Hotfix replacement information
This hotfix does not replace any other hotfixes.

File information
The English version of this package has the file attributes (or later) that are listed in the following table.   Date         Time   Version            Size    File name --  20-Dec-2003  01:57  4.21            2,247,408  Wincepb42-031219-kb822914-armv4.exe 20-Dec-2003 01:57  4.21            2,247,408  Wincepb42-031219-kb822914-armv4i.exe 20-Dec-2003 01:57  4.21            2,292,464  Wincepb42-031219-kb822914-mipsii.exe 20-Dec-2003 01:57  4.21            2,292,464  Wincepb42-031219-kb822914-mipsii_fp.exe 20-Dec-2003 01:57  4.21            2,321,136  Wincepb42-031219-kb822914-mipsiv.exe 20-Dec-2003 01:57  4.21            2,321,136  Wincepb42-031219-kb822914-mipsiv_fp.exe 20-Dec-2003 01:57  4.21            2,177,776  Wincepb42-031219-kb822914-sh3.exe 20-Dec-2003 01:57  4.21            2,177,776  Wincepb42-031219-kb822914-sh4.exe 20-Dec-2003 01:57  4.21            1,927,920  Wincepb42-031219-kb822914-x86.exe The English version of this hotfix has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in coordinated universal time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time tool in Control Panel.   Date         Time   Version            Size    File name --

Path: Public\Ie\Oak\Lib\Armv4\Debug 04-Dec-2003 18:34                  3,064,276  Urlmon.lib

Path: Public\Ie\Oak\Lib\Armv4\Retail 04-Dec-2003 18:33                  2,525,836  Urlmon.lib

Path: Public\Ie\Oak\Lib\Armv4i\Debug 04-Dec-2003 18:35                  3,071,680  Urlmon.lib

Path: Public\Ie\Oak\Lib\Armv4i\Retail 04-Dec-2003 18:34                  2,531,136  Urlmon.lib

Path: Public\Ie\Oak\Lib\Mipsii\Debug 04-Dec-2003 18:36                  3,077,590  Urlmon.lib

Path: Public\Ie\Oak\Lib\Mipsii\Retail 04-Dec-2003 18:36                  2,588,040  Urlmon.lib

Path: Public\Ie\Oak\Lib\Mipsii_fp\Debug 04-Dec-2003 18:38                  3,078,192  Urlmon.lib

Path: Public\Ie\Oak\Lib\Mipsii_fp\Retail 04-Dec-2003 18:37                  2,588,634  Urlmon.lib

Path: Public\Ie\Oak\Lib\Mipsiv\Debug 04-Dec-2003 18:39                  3,109,390  Urlmon.lib

Path: Public\Ie\Oak\Lib\Mipsiv\Retail 04-Dec-2003 18:38                  2,607,034  Urlmon.lib

Path: Public\Ie\Oak\Lib\Mipsiv_fp\Debug 04-Dec-2003 18:40                  3,109,990  Urlmon.lib

Path: Public\Ie\Oak\Lib\Mipsiv_fp\Retail 04-Dec-2003 18:40                  2,607,622  Urlmon.lib

Path: Public\Ie\Oak\Lib\Sh3\Debug 04-Dec-2003 18:42                  2,803,868  Urlmon.lib

Path: Public\Ie\Oak\Lib\Sh3\Retail 04-Dec-2003 18:41                  2,366,224  Urlmon.lib

Path: Public\Ie\Oak\Lib\Sh4\Debug 04-Dec-2003 18:43                  2,803,818  Urlmon.lib

Path: Public\Ie\Oak\Lib\Sh4\Retail 04-Dec-2003 18:43                  2,363,548  Urlmon.lib

Path: Public\Ie\Oak\Lib\X86\Debug 04-Dec-2003 18:32                  2,476,280  Urlmon.lib

Path: Public\Ie\Oak\Lib\X86\Retail 04-Dec-2003 18:32                  2,187,012  Urlmon.lib



STATUS
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the &quot;Applies to&quot; section.



MORE INFORMATION
For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

824684 Description of the standard terminology that is used to describe Microsoft software updates

Keywords: kbbug kbfix kbqfe KB822914

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.