February 2014 Internet Explorer Updates


Microsoft Security Bulletin MS14-010 – Critical

This security update resolves twenty-three privately reported and one publicly disclosed vulnerabilities in Internet Explorer. The most severe vulnerabilities could allow remote code execution if a user views a specially crafted Web page using Internet Explorer. An attacker who successfully exploited the most severe of these vulnerabilities could gain the same user rights as the current user. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.

This security update is rated Critical for Internet Explorer 6, Internet Explorer 7, Internet Explorer 8, Internet Explorer 9, Internet Explorer 10 and Internet Explorer 11 on Windows clients, Moderate for Internet Explorer 6, Internet Explorer 7 on Windows servers, and Important for Internet Explorer 8, Internet Explorer 9, Internet Explorer 10, and Internet Explorer 11 on Windows servers. For more information, see the full bulletin.

Recommendation. Most customers have automatic updating enabled and will not need to take any action because this security update will be downloaded and installed automatically. Customers who have not enabled automatic updating need to check for updates and install this update manually. For information about specific configuration options in automatic updating, see Microsoft Knowledge Base Article 294871.

For administrators and enterprise installations, or end users who want to install this security update manually, Microsoft recommends that customers apply the update immediately using update management software, or by checking for updates using the Microsoft Update service.

— Wilson Guo, Program Manager, Internet Explorer

Comments (18)

  1. versions says:

    IE11…11.0.3

    IE10…10.0.13

    Thank you.

  2. DEVARGAS3321@GMAIL.COM says:

    I NEED iNTERNET EXPLORER 10 WITH COMPATIBILITY VIEW

    I DONT KNOW HOW TO SOLVE THE PROBLEM

  3. DELIA VARGAS says:

    COMO PONGO A TRABAJAR INTERNET EXPLORE 10 CON "COMPATIBILITTY VIEW Y PAGAR POR COLECTURIA VIRTUAL????

  4. Américo says:

    Thank you. Fast and very good. IE 11.0.3, the best!

  5. S says:

    Impressive list of non-security bug fixes included with the update: support.microsoft.com/…/2909921

  6. Matt says:

    Thank you.  Now please fix this old SVG bug (living under IE's throat since IE9 days):

    If the path element of SVG has "fill-opacity" and the element is using a marker, the opacity would be inherited by marker (although marker element is NOT the child of path).

    http://jsfiddle.net/t2Fxe/

    Note that the fill-opacity property must not be inherited by marker. Hence the line must not be seen-through the marker.

    The 0.75 (or 75%) fill-opacity is inherited by marker. Hence the line is seen-through the marker.

    Try in FF, Chrome, Safari and Opera to get the correct result.

  7. fr says:

    Good to see a long list of fixes, hopefully IE11 will be a bit more reliable now.  The issue of a re-opened session with lots of tabs only using a single tab process still exists though.

  8. Patrick says:

    To IE team members responsible for printing:

    The attribute selectors in print preview incorrectly match current value of input. The change in input field renders an unintended change in look-and-feel (UI).

    Test case:

    Open newilk.com/…/attribute-selector-print-preview

    In first input-field append '1' at the end of test (so it looks like test1).

    Take a look at print-preview (alt+f+v), the text and border color of the field will be changed from none to red!

    In second input-field, remove '2' from test2 (so it looks like test).

    Take a look at print-preview again, the field will lose its green text and border color.

    Please remedy this problem to retain WYSIWYG.

  9. pmbAustin says:

    Still need to fix the "White Tab" bug, as I've come to call it.

    After a long period of use, with multiple tabs, eventually a tab will start flashing as it's scrolled or updated, and/or just go white.  IE will completely stop rendering into the tab.

    An examination of Task Manager will show a process with a large amount of memory (generally more than 500MB), and frequently that tab will be consuming 20% or more of the CPU steadily.

    The only solution I've found is to kill the process.  This causes the errant process to go away, and IE simply re-loads the tab.  Then all is fine again.

    If left long enough, the failure to render "leaks" out from the IE process to the rest of the system… common FILE OPEN or FILE SAVE dialogs, for example, will stop rendering file icons (they'll be black squares, or completely blank).  Again, killing the IE process causes an instant refresh of the dialog and rendering returns.

    This has been going on since IE9, but has gotten noticeably worse in IE10, and worse again in IE11 (as in "more frequent").  Something isn't scaling, as large pages that cause the memory for the iexplore.exe process to expand can cause this behavior.

  10. lynda says:

    no internet explorer at all v

  11. WSUS says:

    And still no official IE11 over WSUS….

  12. pmbAustin says:

    Still desperately need a gesture to quickly go to the top (and bottom) of very long pages.  This is most important on Modern IE/Touch, as having to flick endlessly to scroll back up or down to the bottom is extremely tedious for long pages.  This is a desperate usability issue for IE on touch tablets and on Windows Phone.  Something!  Anything!  It's been like this for too long…

  13. oscar says:

    we are in 2014 and still there are no support for "transform-style: preserve-3d".

    when a browser with no shame

    codepen.io/…/lipzc

  14. bugs says:

    Although it is IE10, it freezes frequently by Flash.

    Please carry out somehow.

    Flash version: 12.0.0.44

  15. Steve says:

    Having recently needed to strip out all kinds of spyware/malware/adware toolbars from a PC I've re-realized just how horrible the UI is for the "Manage Addons" dialog in Internet Explorer.

    1.) You have to press ALT first to even get the menu to show up, so that you can click Menu > Tools > Manage Addons…

    2.) In Firefox & Chrome the "Addons/Extensions" manager is full screen (of the browser) giving you lots of room to see everything in one shot. In IE its a dialog sized window… that can be expanded if you resize the window but the maximize toolbox button (top right) doesn't show up, and double clicking the title bar doesn't maximize like regular windows do. e.g. Very Frustrating

    3.) By default the list shows only the "currently loaded add-ons" which hides a lot of "crap" that might not currently be active yet still unwanted

    4.) THIS IS THE BIG ONE!!!! There is NO bleeping "UNINSTALL" button for ANY of the addons. I find this to be 100% completely unacceptable in 2014!!!!! Showing me a list and not providing any way to uninstall is a major tease and a massive frustration!

    5.) There is a "prevent programs from suggesting changes to my default search provider… which is good, but please add a similar feature for addons whereby NO APPLICATION can install a junkware toolbar/addon without my EXPLICIT approval (I'm staring at you Skype-memmory-hogging-useless-and-slow toolbar)

    6.) When you do pick an addon that you want to disable you need to pick it, then move all the way to the bottom right of the window to disable it – why on earth is this not inline?

    7.) Similar to mobile marketplace/app stores – Microsoft has to seriously step up their game for addons… and FORCE developers to sign their addons, and track user sentiment about them… so that when 1,000's of users tell Microsoft that the "appbario" addon is malware… and the "Search Protect" addon is malware, and any software by "Conduit" is malware… Microsoft can flag these addons, AUTOMATICALLY push updates to IE that TELL users that these addons are considered harmful, and AUTOMATICALLY DISABLE them… and provide a direct button to uninstall them.

    8.) 100% of addons should require to have the Publisher value populated – If you are not willing to identify your company, you've got something to hide.

    9.) Many addons do not list the load time/navigation time. Why not?

  16. Steve says:

    Having recently needed to strip out all kinds of spyware/malware/adware toolbars from a PC I've re-realized just how horrible the UI is for the "Manage Addons" dialog in Internet Explorer.

    1.) You have to press ALT first to even get the menu to show up, so that you can click Menu > Tools > Manage Addons…

    2.) In Firefox & Chrome the "Addons/Extensions" manager is full screen (of the browser) giving you lots of room to see everything in one shot. In IE its a dialog sized window… that can be expanded if you resize the window but the maximize toolbox button (top right) doesn't show up, and double clicking the title bar doesn't maximize like regular windows do. e.g. Very Frustrating

    3.) By default the list shows only the "currently loaded add-ons" which hides a lot of "crap" that might not currently be active yet still unwanted

    4.) THIS IS THE BIG ONE!!!! There is NO bleeping "UNINSTALL" button for ANY of the addons. I find this to be 100% completely unacceptable in 2014!!!!! Showing me a list and not providing any way to uninstall is a major tease and a massive frustration!

    5.) There is a "prevent programs from suggesting changes to my default search provider… which is good, but please add a similar feature for addons whereby NO APPLICATION can install a junkware toolbar/addon without my EXPLICIT approval (I'm staring at you Skype-memmory-hogging-useless-and-slow toolbar)

    6.) When you do pick an addon that you want to disable you need to pick it, then move all the way to the bottom right of the window to disable it – why on earth is this not inline?

    7.) Similar to mobile marketplace/app stores – Microsoft has to seriously step up their game for addons… and FORCE developers to sign their addons, and track user sentiment about them… so that when 1,000's of users tell Microsoft that the "appbario" addon is malware… and the "Search Protect" addon is malware, and any software by "Conduit" is malware… Microsoft can flag these addons, AUTOMATICALLY push updates to IE that TELL users that these addons are considered harmful, and AUTOMATICALLY DISABLE them… and provide a direct button to uninstall them.

    8.) 100% of addons should require to have the Publisher value populated – If you are not willing to identify your company, you've got something to hide.

    9.) Many addons do not list the load time/navigation time. Why not?

    And oh my gosh!… can we please fix this bleeping comment form on the IE Blog! It is insane that this has not yet been fixed!

  17. @bugs says:

    Update to IE11. It will take just few minutes..