April 2014 Internet Explorer Updates


Microsoft Security Bulletin MS14-018 – Critical

This security update resolves six privately reported vulnerabilities in Internet Explorer. The most severe vulnerabilities could allow remote code execution if a user views a specially crafted Web page using Internet Explorer. An attacker who successfully exploited the most severe of these vulnerabilities could gain the same user rights as the current user. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.

This security update is rated Critical for Internet Explorer 6, Internet Explorer 7, Internet Explorer 8, Internet Explorer 9 and Internet Explorer 11 on Windows clients, Moderate for Internet Explorer 6, Internet Explorer 7, Internet Explorer 8, Internet Explorer 9, and Internet Explorer 11 on Windows servers. Internet Explorer 10 is not affected. For more information, see the full bulletin.

Recommendation. Most customers have automatic updating enabled and will not need to take any action because this security update will be downloaded and installed automatically. Customers who have not enabled automatic updating need to check for updates and install this update manually. For information about specific configuration options in automatic updating, see Microsoft Knowledge Base Article 294871.

For administrators and enterprise installations, or end users who want to install this security update manually, Microsoft recommends that customers apply the update immediately using update management software, or by checking for updates using the Microsoft Update service.

Security Update for Flash Player (2942844)

On April 8th, a security update for Adobe Flash Player in Internet Explorer 10 and 11 on supported editions of Windows 8, Windows 8.1 and Windows Server 2012 and Windows Server 2012 R2 is also available. The details of the vulnerabilities are documented in Adobe security bulletin APSB14-09. This update addresses the vulnerabilities in Adobe Flash Player by updating the affected Adobe Flash binaries contained within Internet Explorer 10 and Internet Explorer 11. For more information, see the advisory

Most customers have automatic updating enabled and will not need to take any action because this update will be downloaded and installed automatically. Customers who have not enabled automatic updating need to check for updates and install this update manually. For information about specific configuration options in automatic updating, see Microsoft Knowledge Base Article 294871.

— Wilson Guo, Program Manager, Internet Explorer

Comments (22)

  1. Anonymous says:

    Since IE9/10, the browser fails 7 tests on Ecma test 262 (http://test262.ecmascript.org/).

    Any plans on fixing those seven before IE12?

    Thanks for your efforts.

  2. Anonymous says:

    @Wayne: It still performs better than both Chrome and Firefox.

  3. Anonymous says:

    Just curious, isn't this the final update for IE6?

  4. Anonymous says:

    So…  Will these be the last updates to IE6-8?  I mean, XP end-of-life and all that jazz.  I was hoping this article would have "BTW UPGRADE NOW, GUYS" in big impact text with lolcats.  🙁

  5. Hexaae says:

    There's a big bug in IE11 on Windows 7 (x64) when Windows DPI = 125%+ (typically laptops): Accelerators pop-up button gets misplaced and is unclickable, and Gadgets look corrupt too. Now, I know Gadgets have been abandoned, but at least could you fix the bug with Accelerators misplaced pop-up button?

    Repro steps:

    1. set Windows to 125% DPI

    2. highlight a word on a website an try to click on the Accelerators blue pop-up button

  6. Anonymous says:

    @CnEY: IE7 was a part of Windows Server 2008 and thus is supported until 2018. IE8 came with Windows 7 and thus it (and IE9) are around until 2020.

  7. Anonymous says:

    No news on EMIE on Windows 7 yet? Thought it was supposed to be released on April 8th. Really need that feature!

  8. Anonymous says:

    Two questions:

    1) Why is MS updating Flash? Adobe already does that.

    2) Why is there (a preinstalled?) Flash on a server in the first place?

  9. Anonymous says:

    Seems the scrollbar bug has been not fixed since the last update. You still can't scroll on zoomed-in pages or images using middle click, unless the page/image was originally big enough to cause scrollbars.

    @Hexaae: Additionally to that, the Web Slices highlight frame and icon is also misplaced if you do as much as zoom in to a page…. but only visually: you can only click on it on where it SHOULD appear, not the misplaced location. huh.

  10. Anonymous says:

    Martijn – because Windows 8 and RT come with Flash pre-installed, Microsoft distributes the Flash updates directly. If you don't want Flash, use ActiveX filtering in IE to turn it off

  11. Anonymous says:

    One reason to me for don't use IE is small tabs in many open tabs.

    can you add options in IE to change old model.(like IE 8 or firfox and chrome) ?

  12. Anonymous says:

    @Dariush – You mean that the tabs are displayed on a second row? That feature is in Internet Explorer since IE9 RC. Right mouseclick on tabbar and "Show on separate row".

  13. Anonymous says:

    @Yannick

    excellent :).

  14. Anonymous says:

    @IE6 – you forget Windows Server 2003 and the XP Embedded editions still under support. The Zombie lives on, for now.

  15. Anonymous says:

    UPgrades are annoying.  I like the old fashioned Enternet explorer 8 and Windows XP operating system.. Leave it all alone….

  16. Anonymous says:

    Sorry to bother with something out of topic, but seriously, is hard to find a place where to put suggestions and feedback of certain Microsoft programs like IE, and I think this can be a place where the developers of IE can listen.

    I just want to ask for something simple: please, allows users to sort and manage pinned sites and favorites in Modern UI. There is a serious lack of organization options in this new version of the browser, and I just want something that Desktop IE can do just fine.

  17. Anonymous says:

    Dear Jair,

    You can report issue at connect.microsoft.com/…/Feedback.

    Internet Explorer team also has account on github, you can follow the members there github.com/internetexplorer.

    Finally, if you find anyone talking please report this bug (because I tried… very very hard).

    – Open File Explorer in Windows 8.1 pro x64 Update 1 and go to some drive.

    – Open OneDrive.com in IE and sign in.

    – Drag/drop a file from file explorer on OneDrive in IE.

    – Keep both IE and FE open, now try to access the file from Visual Studio (lets say the file was xap, exe or visx in bin/Release folder of your directory and you rebuild the project). It throws access violation (IO exception) in .NET and C++.

    They basically wants us to remain dumb. IE is for dumb. IE team is dumb. I have been documenting technical issues and reporting them for over 4 years now. They don't listen, they don't care and they are either incapable or Microsoft don't want to invest anything on this freeware, which is BTW the integral part of their 20 yrs old most beloved product goes by the name "Windows". If you report issue on MS Connect, they will stall for years and finally close the issue by design with some baloney response.

    IE team is enemy of Microsoft, her shrinking fans and the entire stack of web technologies. They just try to prove what "they" have is everything there in the web, regardless of what millions of developers are asking for and what other browsers are doing: robust shell-driven browser to a full-fledge Operating Systems (FF and Chrome). In short IE IS the worst thing ever happened to Microsoft…!!!

    Die with shame IE team and let real people develop the world's greatest web browser at Microsoft.

  18. Anonymous says:

    @jair please do not file a bug on connect (unless you want to waste your time since it won't get looked at) all bugs need to be reported on the IE Blog as it is the only place where they gain visibility and get noticed.

    @Polack you're not going to earn respect calling IE the best browser and at the same time insulting the IE Team developers. Sadly the best developers on the IE team have all left Microsoft (Chris Wilson, Eric Lawrence, etc.) and Dean is unwilling to listen to developers. Yes I'm now guilty of negative talk but let's get real here the heart and soul of IE has fizzled.

    We need more confidence in IE starting with better dev tools and better IE behavior in general.  Fix IE so that typing into the address bar "localhost" or "192.168.xxx.yyy" doesn't force developers to Google instead of loading our dev sites!!!!!

    For this reason alone I REFUSE TO DEVELOP IN IE!!!!!

    Then fix the dev tools so they can handle more than one site and one tab at a time… There's nothing more frustrating than pressing F12 and wondering where the darn tools are… Or focusing the tools and realizing it isn't even in sync with the last active IE window.

    @post-author I thought IE6 was dead?! Please let it R.I.P.!

  19. Anonymous says:

    Would really love to see more effort put into the UI of IE.  For example:

    1) High DPI Display support.  Visual Studio just went through their entire UI and ensured everything looked right on High DPI displays.  Buy yourself a Yoga 2 Pro, and start running IE Desktop on it.  Notice that the Favorites Bar icons don't scale (even as the text does).  The Windows 8.1 Update made the problems even worse as the text is now even bigger, but the icons stay the same tiny size.  There are lots of areas where you need to look at High DPI support.

    2) On Desktop IE you can get to the top or bottom of long pages (Twitter and Facebook among them) easily by hitting Home/End keys, or dragging the scroll bar.  In Immersive IE, it's really tedious. The only way is constantly flicking the screen to scroll it.  This is a HUGE usability problem, and probably the biggest thing keeping me from using IE-Immersive more often.  You need a simple gesture or way to rapidly go to the top or bottom of long pages.  I'd suggest enabling "semantic zoom" to allow you to zoom all the way out, and then touch where on the zoomed out page you want to go (top, bottom, anywhere in the middle).  That kind of page navigation is both intuitive, and powerful.

    3) More customizability of the UI in general.  I know some people that reject IE *solely* because the home button can't be put where they want/expect it (to the left of the address bar).  Being able to configure these controls more flexibly would be a huge benefit and remove a huge barrier to using IE for some people.

    4) Adding a feature that indicates right on the tab if the page is generating sound would be super-useful too.  Being able to find the page that is suddenly making noise is a really nice feature.  Implement it!

    5) Adding "Reading Mode" to the desktop browser would be very useful and nice.

  20. Anonymous says:

    ayuda

  21. Anonymous says:

    After the April 2014 Windows 8 update, both IE and Chrome fail to load any web pages, while the Internet connection is working, the firewall setting is OK, and other software using Internet connection are all OK. Any other users are having the same problem of mine?

  22. Anonymous says:

    This week around Tuesday, my IE (11 I think) on Windows 8 (latest version as per Microsoft Updates)  has been experiencing right edge scroll bar issues.  Basically it appears grayed out and only with a top (uo) button on facebook.  Not all facebook pages have this problem but seems the login page and the main news feed page both have the issue.  Once I log in or go to the page, I can see the right scroll bar appearing fine (having both up and down arrows and the bar properly showing content fill) for about 2 seconds.  Then it simply 'crashes'.   However, when I view profile pages, by clicking on names those pages work fine with the scroll bar.   When the scroll bar 'crashes' I cannup use my page up/dn space bar nr the keyboard up/down arrow to scroll either.  All other websites work fine.  And I was working just fine until this week after an apparent MS update completion.   Any help ???