With the update in place, Internet Explorer 6 won't run some ActiveX controls until they've been explicitly enabled by the user.
Microsoft Tuesday updated Internet Explorer 6 for Windows XP SP2 and Windows Server 2003 SP1, but denied that the changes were security related.
"The update is labeled as 'non-security' given that it does not include any new updates that affect the security of IE," said a company spokesman Tuesday afternoon.
With the update in place, IE 6 won't run some ActiveX controls until they've been explicitly enabled by the user. Last December, Microsoft posted a note to Web site and ActiveX developers warning them that the change was coming. In that note, the Redmond, Wash.-based developer said that controls loaded by the APPLET, EMBED, or OBJECT elements would be disabled unless the user turned them on.
Although Microsoft says this is not a security update, its connection with ActiveX is reminiscent of several security fixes during 2005 that covered the browser and the control technology. Microsoft has struggled to firm up ActiveX security, particularly in denying controls that have no reason to access the Internet from doing so.
IE 7, which is in beta testing, actually disables most ActiveX controls out of the gate in an attempt to protect users.
The correction comes two weeks after Microsoft released its last patch for IE, a fix for IE 5.01 running on Windows 2000. Microsoft made a point to stress this update has nothing to do with the patch unveiled earlier in the month.
Tuesday's update is available from Microsoft's Download Center and as an option on Windows Update.
How Enterprises Are Attacking the IT Security EnterpriseTo learn more about what organizations are doing to tackle attacks and threats we surveyed a group of 300 IT and infosec professionals to find out what their biggest IT security challenges are and what they're doing to defend against today's threats. Download the report to see what they're saying.
Infographic: The State of DevOps in 2017Is DevOps helping organizations reduce costs and time-to-market for software releases? What's getting in the way of DevOps adoption? Find out in this InformationWeek and Interop ITX infographic on the state of DevOps in 2017.
Digital Transformation Myths & TruthsTransformation is on every IT organization's to-do list, but effectively transforming IT means a major shift in technology as well as business models and culture. In this IT Trend Report, we examine some of the misconceptions of digital transformation and look at steps you can take to succeed technically and culturally.