Re: internet explorer "update check"

[TJ Jablonowski <t.jablonowski () MAIL-2-GO COM>]

IE 5.x (and I think 4.x) have the option to go to a special .asp page to
check for product updates upon startup. On a default installation this is
enable with the url being located on a microsoft site. With the Internet
Explorer Administrators Kit (IEAK) you have the option to either leave it as
is, change the url to one of your own choosing (large corporations, ISPs),
or disable it. The IEAK also has example scripts on how to build a custom
page.  Don't remember the particulars right now but basically your browser
gets the latest version (5.50.4134.0600) from the page then compares it to
the version your running.  If the server number is higher then it then opens
a url embedded in the page.  You can also disable this feature by going to
"tools" - "internet options" - "advanced" and unchecking the "Automatically
check for Internet Explorer updates" box.
----- Original Message -----
From: "Chico" <chico () SUMMITPRO COM>
To: <VULN-DEV () SECURITYFOCUS COM>
Sent: Thursday, October 26, 2000 12:21
Subject: internet explorer "update check"


> just recently someone posted some nfo about internet explorer contacting
> it's update site upon load up..
>
> could someone forward me that if they gotit or know what i'm talking
about..
> i'm dumb.. and i lost it.. :(
>
> thx. in advance.. ;-]