June 2014 Internet Explorer Updates


Microsoft Security Bulletin MS14-035 – CriticalThis security update resolves two publicly disclosed vulnerabilities and fifty-seven privately reported vulnerabilities in Internet Explorer. The most severe vulnerabilities could allow remote code execution if a user views a specially crafted Web page using Internet Explorer. An attacker who successfully exploited the most severe of these vulnerabilities could gain the same user rights as the current user. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.

This security update is rated Critical for Internet Explorer 6, Internet Explorer 7, Internet Explorer 8, Internet Explorer 9, Internet Explorer 10, and Internet Explorer 11 on Windows clients, Moderate for Internet Explorer 6, Internet Explorer 7, Internet Explorer 8, Internet Explorer 9, Internet Explorer 10, and Internet Explorer 11 on Windows servers. For more information, see the full bulletin.

Recommendation. Most customers have automatic updating enabled and will not need to take any action because this security update will be downloaded and installed automatically. Customers who have not enabled automatic updating need to check for updates and install this update manually. For information about specific configuration options in automatic updating, see Microsoft Knowledge Base Article 294871.

For administrators and enterprise installations, or end users who want to install this security update manually, Microsoft recommends that customers apply the update immediately using update management software, or by checking for updates using the Microsoft Update service.

Security Update for Flash Player (2966072)

On June 10th, a security update for Adobe Flash Player in Internet Explorer 10 and 11 on supported editions of Windows 8, Windows 8.1 and Windows Server 2012 and Windows Server 2012 R2 is also available. The details of the vulnerabilities are documented in Adobe security bulletin APSB14-16. This update addresses the vulnerabilities in Adobe Flash Player by updating the affected Adobe Flash binaries contained within Internet Explorer 10 and Internet Explorer 11. For more information, see the advisory.

Most customers have automatic updating enabled and will not need to take any action because this update will be downloaded and installed automatically. Customers who have not enabled automatic updating need to check for updates and install this update manually. For information about specific configuration options in automatic updating, see Microsoft Knowledge Base Article 294871.

— Wilson Guo, Program Manager, Internet Explorer

Comments (15)

  1. poo says:

    IE 11.0.9

  2. InfiniteGlitter says:

    Hi, I want to suggest you to build IE's UI with WPF in the next version of IE.

    IE’s UI interactive response speed is too slow especially compare to Google Chrome and has no animate effects. Bad user experience! It’s time to improve the UI. I think WPF(Windows Presentation Foundation) is the good solution. I have been experienced IE Mobile which in Windows Phone, fast and fluid! I have been experienced Modern IE which in Windows 8, fast and fluid! They are awesome! They are proving WPF could bring us fast and fluid experience!

    You may say “you can use Modern IE in Windows 8”, well, I have to say, Modern IE’s functionality is not powerful enough.

    So, I hope you guys improve and enhance IE’s UI speed and experience. I know you need to consider about compatibility of various IE Toolbar Add-ons, but I have to say, most of those Toolbar Add-ons are trash! And I believe you guys have the ability to solve non-toolbar add-ons compatibility. Although you can use another way to achieve GPU accelerated UI(by using Direct2D maybe?), I still prefer to WPF.

    Look at the new Apple Safari in Mac OS X 10.10 Yosemite, awesome! What are you waiting for? It’s time to change! And look at the new Apple Safari again, it improved tab management. And you guys cut off Quick Tabs feature in IE11! What Apple doing is enhance, and you, degrade?! Don’t tell me to use Windows Taskbar preview to switch between tabs! It’s worst when plenty of tabs opened!

    Another problem, IE use too much User Objects, if I open plenty webpages, I think it may hit the whole session limit. You’d better optimize User Objects and GDI Objects usage. And I have to complain about User Objects and GDI Objects limit in Windows! Why not relax those limit? I have much hardware resource! Never say those limit is enough unless all people in the world did not hit that limit! In fact, many high-end people complained about it! Well, I know this is Windows Team’s job, I just complain at here.

    Sorry for my poor English.

  3. fr says:

    In my WSUS update KB2963950 seems to be detected as needed on all my Windows 7 IE11 PCs, but the kb article says it should only apply when KB2929437 isn't present.  Update 2957689 is also detected as needed which would be the correct one since they all do already have 2929437.  Is there a problem with 2963950 in WSUS, or is the kb information wrong?

  4. ThiloL says:

    After installing 2957689 on IE10, IE opens a additional tab "Your browser has been upgraded" on first run. How to prevent this?

  5. Acryion says:

    We sure need an update of when we can expect a build of IE12 …. IE11 is 10 months old now.

  6. RitikaV [MSFT] says:

    @ThiloL

    >>After installing 2957689 on IE10, IE opens a additional tab "Your browser has been upgraded" on first run. How to prevent this?

    This is a one time notification of turning on search suggestions in the address bar. It should not appear again.

  7. Yannick says:

    @Acryion, 8 months, actualy. Through I agree on your point: come on Microsoft, show us some IE12!

  8. NumbStill says:

    @Acryion, @Yannick –

    While the version has not changed, it was updated. The number does not matter, the features and bug fixes do and in April, an updated Internet Explorer 11 was released. Same version, new features and bug fixes. That works for me, I could not care less about the version number.

  9. Terry says:

    What happened to answering question at #AskIE the new motto of IE team ?

    Is it already rendered as another orphaned Connect ?

    Come'on guys atleast answer a SINGLE question there!

    Otherwise, please don't make promises that you can't keep :failed:

  10. NumbStill says:

    @Terry –

    I think the #AskIE thing was a one off, two hour Twitter special and not a regular thing.

    Where did you see it advertised as a constant approach?

    The next one will be hosted at JSConf, July 29th, 2014.

    See blogs.msdn.com/…/launching-status-modern-ie-amp-internet-explorer-platform-priorities.aspx for details.

  11. Charles Morris [MSFT] says:

    @Terry, NumbStill – Thanks for the questions. Some clarifications on #AskIE:

    It definitely still on! We have done two monthly #AskIE sessions on Twitter since announcing it in April. We did the last one on May 29th from JSConf (that was a typo in the blog post about July 29). We answered over 100 questions last time around!

    Stay tuned to @IEDevChat and the blog. We'll be announcing the #AskIE date for June soon. :)

  12. Peter says:

    @Charles Morris,

    Thank you for conversing back sir! This is the most precious thing that an IE team member is reading what we have to say!! A dream of any web developer of any era! 😉

    There is one little bug nagging me in IE 7 till IE 11:

    It happens randomly so please read till the end, maybe because I only use IE and use it too much that once in a while I am able to reproduce this bug:

    "Sometimes when you refresh the page, the page URL becomes http://http//<rest-of-the-URL&gt; with Page Not Found error."

    Now, if this is surprising, shocking or new for you (the IE developer with access to IE code), I would suggest you to kindly search for the term "http//" (with no colon : before forward-slash /) and replace with "http://&quot;.

    Thanks in anticipation and all the large work you have done for my favorite browser.

  13. LS says:

    Can anyone explain why MSFT thought it was a good idea to almost no color differentiation between the backcolor of a scrollbar and the color of the scroll thumb?  Are all of your developers 19 years old and have better than 20/20 vision?

    For the first time in my life, I have decided to ditch IE and go with Chrome.

  14. Martijn says:

    Security blahblah. How about some bugfixes?

    How about allowing reading mode on desktop, and on Windows 7?

  15. Martijn says:

    @LS not only that, but scrollbars in IE are not stylable. They used to be in times that IE was a misbahving piece of sheit, but now it behaves and that functionality is (correctly) gone. But I didn't see it begint brought back in a proper manner using the -ms- prefix.