Microsoft KB Archive/894926

= After you install security update 867282 that is included with Security Bulletin MS05-014, Internet Explorer crashes when you copy images from Web sites that use the tag =

Article ID: 894926

Article Last Modified on 2/6/2007

-

APPLIES TO


 * Microsoft Internet Explorer 5.01 Service Pack 4
 * Microsoft Internet Explorer 5.01 Service Pack 3
 * Microsoft Internet Explorer 5.5
 * Microsoft Internet Explorer 6.0 Service Pack 1
 * Microsoft Windows Server 2003, Datacenter Edition (32-bit x86)
 * Microsoft Windows Server 2003, Enterprise Edition (32-bit x86)
 * Microsoft Windows Server 2003, Standard Edition (32-bit x86)
 * Microsoft Windows Server 2003, Web Edition
 * Microsoft Windows Server 2003, Datacenter Edition for Itanium-Based Systems
 * Microsoft Windows Server 2003, Enterprise Edition for Itanium-based Systems
 * Microsoft Windows 2000 Advanced Server
 * Microsoft Windows 2000 Advanced Server
 * Microsoft Windows 2000 Service Pack 3
 * Microsoft Windows 2000 Professional Edition
 * Microsoft Windows 2000 Service Pack 3
 * Microsoft Windows 2000 Service Pack 4
 * Microsoft Windows XP Home Edition
 * Microsoft Windows XP Professional
 * Microsoft Windows XP Professional x64 Edition
 * Microsoft Windows XP Home Edition
 * Microsoft Windows XP Professional

-





SYMPTOMS
After you install security update 867282 that is included with Microsoft Security Bulletin MS05-014, Microsoft Internet Explorer crashes when you copy images from Web sites that use the tag.



CAUSE
A change was included in security update 867282 that helps to block a specific, potentially malicious scenario of dragging a Microsoft Excel spreadsheet that looks similar to an image to your desktop. The code that was changed to help block this scenario is used for drag-and-drop operations and for image copy operations. Because of the change, a logic error was introduced that can cause Internet Explorer to crash when you copy images from the tag.



RESOLUTION
To resolve this problem, install security update 890923 (MS05-020). For more information about security update 890923, click the following article number to view the article in the Microsoft Knowledge Base:

890923 MS05-020: Cumulative security update for Internet Explorer



Workaround for Web developers
If you have a site that uses the tag, you can do the following things to work around this issue:  To display an image, you can use the img element, for example , instead of using the input element with a type attribute that specifies an image.  To submit the coordinates of the image that the user clicked on, you can use the element and an handler to capture the coordinates and to submit them through the control. For example, use the following code. function ClickHandler(e) { document.all.form1.imgx.value = e.offsetX; document.all.form1.imgy.value = e.offsetY; document.all.form1.submit; }     

We are working on a software update to resolve this issue. This update will be included in the next Internet Explorer security update.

Workaround for Web users
To work around this issue, follow these steps:
 * 1) Right-click the image that uses the tag, and then click Save Picture As to save the image file to the desktop.
 * 2) Click Start, click Run, type mspaint in the Open box, and then click OK.
 * 3) In Microsoft Paint, click Open on the File menu.
 * 4) Click to select the image file that you saved to the desktop, and then click Open.
 * 5) On the Edit menu, click Select All to select the image.
 * 6) On the Edit menu, click Copy.

You can now paste the image to other applications.

<div class="references_section">