August 2013 Internet Explorer Updates

Microsoft Security Bulletin MS13-059 – Critical

This security update resolves eleven privately reported vulnerabilities in Internet Explorer. The most severe vulnerabilities could allow remote code execution if a user views a specially-crafted Web page using Internet Explorer. An attacker who successfully exploited the most severe of these vulnerabilities could gain the same user rights as the current user. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.

This security update is rated Critical for Internet Explorer 6, Internet Explorer 7, Internet Explorer 8, Internet Explorer 9 and Internet Explorer 10 on Windows clients and Moderate for Internet Explorer 6, Internet Explorer 7, Internet Explorer 8, Internet Explorer 9 and Internet Explorer 10 on Windows servers. For more information, see the  full bulletin.

Recommendation. Most customers have automatic updating enabled and will not need to take any action because this security update will be downloaded and installed automatically. Customers who have not enabled automatic updating need to check for updates and install this update manually. For information about specific configuration options in automatic updating, see Microsoft Knowledge Base Article 294871.

For administrators and enterprise installations, or end users who want to install this security update manually, Microsoft recommends that customers apply the update immediately using update management software, or by checking for updates using the Microsoft Update service.

— Wilson Guo, Program Manager, Internet Explorer

Comments (41)

  1. konbi says:

    now IE10 Version is 10.0.8..

  2. MQ says:

    Even if you use the latest stable version of IE, you're still subject to vulnerabilities from older versions! What?!

  3. ant says:

    Please release in full package .

    can you insert new option for add old tab browsing in new IE .

    Address bar and tab controls in next to are very discordant ! both are small for Pro works .


  4. Yannick says:

    @ant – ever since IE9 RC, there is an awesome option that appear when you do a right-click that says "Display tabs on seperate row".

  5. IE man says:

    I installed IE11 but can not revert back to IE10.

  6. ant says:


    in Desktop.

  7. Mathew says:

    OMG! Its so unfair! Microsoft can't have a YouTube application on their Windows Phone **BECAUSE** get this… Microsoft won't build it in HTML5!!!…/the-limits-of-google-s-openness.aspx

    What's the matter Microsoft?… does your browser not support FREE, OPEN, HTML5 VIDEO CODECS that we've been **BEGGING** you to support BY DEFAULT, out of the box since you first announced that you would support the HTML5 VIDEO tag?

    I hate to laugh but it serves you right! You talked up a bunch of bullony reasons why you weren't supporting new and open formats but guess what… that egg is all over your face!

    Next time Microsoft – when we say FULLY SUPPORT DRM-FREE OPEN CODECS for the OPEN WEB… Please Flippin listen!!!!!

  8. pmbAustin says:

    No, Mathew, it's because Google is being a bunch of jerks (making demands of MS that they don't make of other client developers).  And that's on WP8 anyway, not Windows 8 (IE11 supports HTML5 as well as anyone).

    Put down the Kool-Aid.

  9. Pam says:

    @Mathew, Windows Phone OS supports more codec than iOS. So the problem is not with Codecs. The problem is what pmbAustin reporting.

    Google is doing dirty business. First they argued that Windows Store and Windows Phone Store are not worthy markets to submit google branded apps and investing for them doesn't make sense… Investment is a big word for cross platform phone apps when freelance developers (individuals) single handedly delivering apps supported in all platforms. So when corporation like Google, (whose primary business is minting money by tracking your clicks, profile your activity and selling to higher bidders) call porting their app to other platform an investment, it means that Microsoft doesn't let them track their consumers private data which Goolge sells.

    Do the mathematics, how else they are making top dollars when all the software products they have to offer are free of cost? Other company are selling stuff, while those Google jerks are profiling your activity and ripping off your privacy in the name of advertisement. Wake up! Google is NOT your friend.

  10. Steve says:

    @pmbAustin, @Pam – Google's actions aside Microsoft embarked on making an HTML5 app for YouTube for Windows8 and gave up due to "technical challenges".

    Since the HTML5 version of YouTube works on my browser, on my desktop, that only means 1 thing.  The Microsoft attempt to build an HTML5 YouTube app failed due to 1 of 2 reasons – take your pick.

    1.) Microsoft couldn't get an HTML5 player working on their device because IE was incapable of handling HTML5 Video content/codecs

    2.) Microsoft can't build a decent HTML5 app

    Either way you look at it it doesn't shine well on Microsoft.  Google can't be blamed for this failing – their HTML5 app works just fine thanks.

  11. @Steve says:

    Please read the link above and you will see that Google YouTube application on Android is not HTML5 neither is the one on the iPhone.  The HTML5 version on you desktop is only the video and audio tags, which by the way IE 9,10, 11 have no trouble doing.  Google wants the entire application in HTML5 not just the video and audio tags.

  12. Don't be evil says:

    Would you look at that, IE9+ is supported.  This information was really hard to look up too, took a whole 5 seconds.

    The question isn't really if they can make an html5 app, they obviously could, but if they made it in html5 then it would be harder to make and end up with less features than the iphone/android apps that aren't in html5.

  13. @mathew says:

    Show me HTML 5 youtube app built by google on android and ios.

  14. Rob says:

    Google is actually blocking Windows Phones from accessing Youtube trough HTML5:

    It is clear that Google sends different pages to Windows Phone users preventing them from accesssing the Mobile HTML5 version of the site that iPhone and android users are getting.

    Sickening behaviour from Google.

  15. Hold On says:

    There are 2 issues at hand here:

    1.) Microsoft's inability to make an HTML5 YouTube app.

    2.) Google not letting Windows Phone devices access YouTube videos

    We've discussed #1 above at length and its obvious that Microsoft needs to learn to "eat their own dogfood" when it comes to HTML5 Video and codecs.

    #2 Is the more interesting one. Did Google block Microsoft because they told Microsoft to do #1 (the HTML5 app) and since Microsoft didn't comply they don't get service? -OR- Does Google's userAgent sniffing accidentally block Windows Phone? (PS proper sniffing of Windows 8 Ex-"Metro" vs. Desktop is impossible *ExtremeSideRant*) so it wouldn't surprise me that trying to accurately detect WindowsPhone8 might be tricky -OR- is Google just sticking it to Microsoft to get back at them for something else?

    It would be interesting to see if the blockage is purely due to not following the requested steps of building an HTML5 app like they were told to do.

  16. Stanley says:

    "It is because you have your settings in desktop mode rather than mobile.

    As far as I know it has always behaved like this. Youtube is assuming you have flash installed because it thinks it's a desktop environment. I don't think there is any malicious intent in this instance. Simple solution is to change to mobile in settings, the site works fine for me."

    Exactly! Stop blaming Google for your own device/vendor/browser issue!

    If Microsoft's "Desktop" mode of their browser "claims" to be real windows that supports an Adobe Flash player (but doesn't!) then that is MICROSOFT's FAULT! not Google's.

    Switch your browser back to the mobile settings (where they should be) and carry on.

    If the site(s) you visit can't handle the mobile userAgent your device sends out then contact those sites and have them fix their UA sniffing don't compound the problem by making your device try to fake what it is and what it can handle – cause it can't!

  17. Hold On says:

    Oh I am a complete idiot. I totally missed this article:

    It wasn't happening 3 months ago! Something was definitely changed on YouTube server-side. Vimeo and all other HTML5 video websites work just fine in Windows Phone (IE10 mobile) and even IE9 mobile on WP7!!

    Google with its outrageously spiteful fanboys lot need to grow up!

  18. Steve says:

    The F12 developer tools absolutely suck and handling popup windows. Just shy of useless.

    Uninstalling IE11 Alpha. Soooo not ready for developers to even start testing on.

  19. Steve says:

    Loving F12 developer tools in the latest preview.

    – Google sux

  20. A developer says:

    IE is the worst browser ever made.

  21. Vasil Dinkov says:

    Wanted to post this in the comments for the previous post but I saw comments are closed there so I'll post here.

    Can someone [MSFT] confirm this is not supposed to happen (it's a bug?) – I downloaded the IE11 – WIN8.1 VMWare Fusion virtual machine for Mac from here:…/virtualization-tools

    and installed Visual Studio Express 2012 to get the Windows Simulator (i.e. Program FilesCommon FilesMicrosoft SharedWindows Simulator11.0Microsoft.Windows.Simulator.exe) as I wanted to test the improved touch browsing in the IE 11 preview. Unfortunately, even if I choose the touch input method from the simulator toolbar on the right, the browser still seems to produce all mouse hover events and all hover menus, tooltips, etc. on websites work as if mouse input is available when I just move the touch target circle around without even clicking to emulate a touch. This means touch browsing can actually not be tested properly in the simulator. This was not the case last time I checked the simulator on Windows 8 and IE10.

    Can someone confirm this is some kind of bug and suggest a workaround?


  22. Stephen says:

    IE11 Preview has an extremely annoying bug where the location bar (pardon me, in IE you call it the "address bar") steals the focus from the page.

    I've seen it occur just after a page load… and as well when typing in a username/password causing me to type in the clear replacing the URL of the page (and sending my password to Google) as that is the default search engine triggered when I press enter (presuming I am actually logging into a web app).

    Needless to say this is a majorly frustrating bug.

    Since I can't use this browser with this issue not fixed I'll wait until there is a beta release for IE11.

    PS To the [MSFT] staff reading on this blog feel free to file a bug in Connect (I most certainly will not)

    Now I have to uninstall IE11 preview. (mainly due to the other rendering glitches, crashing and buggy dev tools etc. but the URL focus stealing is the straw that broke the camels back)

    PPS Please for the love of god fix this annoying blog comment form! I should not have to submit comments multiple times (after remembering that I have to copy my comment to the clipboard FIRST!!!) This isn't rocket science! Every other blogging platform has solved this already! ONLY "Non-Community Server" has this bug! Seriously it is 2013 it is time to either fix this bug or move to a real blog platform that cares about their users!

  23. pmbAustin says:

    For the last time, Stephen, take two freakin' seconds to LOG IN.  You only ever have to do it once.  You stay in from that point forward.  And you'll NEVER have to post a comment multiple times again.  You're causing your OWN pain here.

    Yeah, yeah, they should fix the form blah blah blah, but why are you torturing YOURSELF in the mean-time?

    Seriously, how's that working out for you?

  24. Stephen says:

    Well this is frustrating.  In Control Panel > Uninstall programs: Internet Explorer 11 isn't listed. (on windows 7) so I can't remove it from there.

    In the "Turn Windows features on or off" there is an Internet Explorer 11 checkbox I can uncheck… but doing so removes Internet Explorer completely from my PC (e.g. typing in Start > iexplore.exe == file not found!)

    So now I re-checked it to bring IE11 back… but how do I go back to IE10 or IE9?










    *****                      WE ARE SORRY BUT WE HAVE YET TO FIGURE OUT WEB FORMS                       ****



    Seriously this is like a 5+ year old bug! Microsoft knows about it, every frequent commenter on this blog knows about it!, this bug on the IE Blog has been blogged about on OTHER BLOGS (that's how well known it is!), Community Server knows about this bug! The solution to fix the bug has been posted ON THE BLOG by dozens of readers!


    @Wilson Guo [MSFT],

    @Michael Patten [MSFT],

    @PJ Hough [MSFT],

    @Sandeep Singhal [MSFT],

    @Rob Mauceri [MSFT],

    @Paula Chuchro [MSFT],

    @Ceri Gallacher [MSFT],

    @Dinesh Chandnani [MSFT],

    @Matt Gradwohl [MSFT],

    @Rajkumar Mohanram [MSFT],

    @Dean Hachamovitch [MSFT],

    @Kevin Miller [MSFT],

    @Jatinder Mann [MSFT]

    WHO THE **** has the FTP password for this site and WHY THE **** have they not fixed it already!?!?

    Somebody has to be responsible for this blog and that person needs to stand up and do something to fix it!

    This is the **only** blog I know of that just-plain-doesn't-and-never-has-worked!

  25. @Stephan says:

    Actually it's Sean something (or at least it was a few years ago.)

  26. Chris says:

    @pmbAustin Did you ever get to the bottom of what was causing IE10 to spawn only one process and eventually stop rendering as the memory usage of that single process added up? I'm having the same issue with Windows 7/x64.

  27. Jake says:


    Can we get info on how to uninstall the IE11 preview? Its a bit concerning when there isn't an obvious way to do it without re-installing Windows 7 from scratch.

    IMHO If you create an installer and don't have an uninstaller delivered with it you've failed software delivery 101.

  28. Surface Woes says:

    There are many video sites that don't work on My surface yet work on every other browser.

    e.g. this live leak video

  29. @Jake – it should be under Programs and Features. You need to click "View installed updates".

  30. Amileo says:

    @Surface Woes, That is fixed in IE11 modern app, which you can get after 55 days from now (by Oct 17).

  31. @Jake says:

    In 3 seconds I found this article…/uninstall-internet-explorer-11-revert-ie10-ie9-windows-7 on Bing..

    Guess Bing is a way to go after all!

  32. pmbAustin says:

    @Chris:  "@pmbAustin Did you ever get to the bottom of what was causing IE10 to spawn only one process and eventually stop rendering as the memory usage of that single process added up? I'm having the same issue with Windows 7/x64."

    No.  It still happens.  In fact, I saw the worst example just recently:  One dozen tabs all loaded in a single process that was over 1.3 GB in size.  It just seems like over time, some tabs "restart" silently, and when they restart, they reuse an existing iexplorer.exe process, until over time, they all end up in just a couple or even one.  And when this happens, performance NOSEDIVES, it becomes very unresponsive, and most of the time (though not always), rendering stops… tabs will appear empty (they never redraw), common dialogs will not show icons, etc.  This happens regularly.  Like, once a week.

    I assume that people who aren't technical and who don't use TaskManager a lot just get frustrated and switch to another browser.  I don't understand why something like this is persisting across versions.  It's so easy (if time-consuming) to reproduce.  It happens over time, any time I have multiple tabs open and leave them open for hours or days.

  33. Pseudo-Anonymous says:


    I'm not sure either about the memory leak issue but I believe it may have something to do with how IE "suspends" tabs when not in issue, mentioned somewhere on another post. Correct me if I'm wrong, though.

  34. Joe says:

    @"@Jake" (PS your @OP usernames are really annoying) yeah I Google it too and found that exact article.

    However if "Internet Explorer" doesn't show up in the list of installed programs (which is happening to a lot of users) then you are SOL and can not uninstall.

    What we would like is instructions from the software vendor (ie Microsoft) to uninstall.

  35. @pmbAustin I've tried to reproduce the bug. There seem to be a number of different ways, and they all seem to relate to the bug occuring after around 60 tabs being opened (not necessarily all at once, just since at least one IE process was started).

    The easiest way to explain how to reproduce the bug is as follows:

    1. Close all instances of IE and verify none are left running using Process Explorer.

    2. Start one new instance of IE. This will be kept running and won't be closed.

    3. Start a second process e.g. by creating a new InPrivate session by right clicking the IE icon and selecting "New InPrivate Session"

    4. Open 30 new tabs in the InPrivate session, using the Ctrl+T shortcut 30 times.

    5. Close the InPrivate session.

    6. Repeat steps 3-5. Monitor the child processes being spawned by IE using Process Explorer.

    7. Repeat steps 3-5 once again. You should notice that IE stops spawning new processes at some point.

    8. Now, as long as the original instance of IE is running, IE will not spawn any more than one child process per instance of IE. This will lead to the memory of that child process growing and eventually IE will stop rendering new tabs. Flash may also stop working.

    Please let me know if you can reproduce this.

  36. hector says:

    thank  for  you cervices

  37. Actually, it can as few as one tab. One RSS feed full of images. (eteknix is best example – even with few items shown)

  38. Steven says:

    I think the latest update to IE11 broke the Chase Online banking site. I can no longer do, among other things, wireless transfers. I had to download Google Chrome to perform this action.

  39. Jake says:

    @Joe, screw Google use Bing instead, you will find what you were looking for.

    PS Google screwgurl

  40. waiting says:

    We are still waiting for someone from @Microsoft to step up and take action regarding fixing this blog comment form!

    How many years should we wait for a fix?