Internet Explorer, the gift that keeps on giving. Looks like we have a brand new JScript bug. According to ADV200001: A remote code execution vulnerab
[See the full post at: Yet another JScript vulnerability]
![]() |
Patch reliability is unclear. Unless you have an immediate, pressing need to install a specific patch, don't do it. |
-
Yet another JScript vulnerability
Home » Forums » Newsletter and Homepage topics » Yet another JScript vulnerability
- This topic has 20 replies, 13 voices, and was last updated 2 years, 3 months ago.
AuthorTopicViewing 8 reply threadsAuthorReplies-
abbodi86
AskWoody_MVPJanuary 17, 2020 at 5:24 pm #2086433Yes, let’s hope they don’t repeat September debacle 🙂
2 users thanked author for this post.
-
fernlady
AskWoody LoungerJanuary 17, 2020 at 7:55 pm #2086474I’m a home user with one windows7 computer and have Firefox 72.0.1 as my default browser, should I disable JScript in IE11?
Under Scripting there are 3 areas that are enabled, Active scripting, Enable XSS filter & Scripting of Java applets. Allow Programmatic clipboard access which is set to Prompt. Disable all???
Windows 7 Home Premium x64 AMD Group A Realtek PCLe GBE Family Controller
-
This reply was modified 2 years, 4 months ago by
fernlady.
-
This reply was modified 2 years, 4 months ago by
-
anonymous
GuestJanuary 18, 2020 at 4:00 am #2086540I would open Control Panel and go to Programs and Features. Then on the top left click on “Turn Windows Features on or off”.
Next find Internet Explorer 11 and uncheck the box.
I did this a couple of years ago and it hasn’t affected other programs or websites for me.
Consider using NoScript with Firefox and although there is a bit of a learning curve any inconvenience will give you a more secure system as payback. Also HTTPS Everywhere is another secure option.
1 user thanked author for this post.
-
Microfix
AskWoody MVPJanuary 18, 2020 at 4:57 am #2086555Looks like MSFT has issued a temporary workaround for the IE vulnerability with instructions how to implement and undo for when a hot-fix-patch is released.
https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/ADV200001
MSFT catalog patch for Windows 7 only? dunno, time will tell..
"-rw-rw-rw-" extreme computing1 user thanked author for this post.
-
woody
Manager -
anonymous
Guest -
EstherD
AskWoody LoungerJanuary 18, 2020 at 6:53 pm #2086857It also causes “sfc” on Win7 to emit a cryptic error message, something about files it tried to restore but couldn’t, presumably because “sfc” also can no longer read the jscript.dll files after the workaround is implemented. Since the logfile generated by “sfc” is effectively unparsable by mere mortals, it is difficult to determine exactly what “sfc” is complaining about. Therefore, you may not want to implement this workaround if you rely on “sfc” to validate the health of your Win7 system.
Moonbear
AskWoody LoungerAmbularD
AskWoody PlusJanuary 18, 2020 at 9:34 pm #2086921Interesting. I disabled jscript per the advisory, and Internet Explorer still worked fine (not that I use it much anymore,) but Firefox crashed at startup until I enabled it again. Waterfox, Pale Moon, and IceDragon, however, did not seem to be affected.
Disabling jscript may also have broken Panda Dome, though I’m not sure about that, as this as a possible cause of the issues it was having did not occur to me until after I’d already given up in frustration and replaced it with Avast.
i7-10700k - ASROCK Z590 Pro4 - 1TB 970 EVO Plus M.2 - DDR4 3200 x 32GB - GeForce RTX 3060 Ti FTW - Windows 10 Pro
Mitja Kolsek
AskWoody PlusJanuary 19, 2020 at 7:29 am #2087082We @0patch are planning to issue a micropatch for this next week which will prevent Internet Explorer from loading jscript.dll. This will not affect the permissions on jscript.dll and will likely keep the sfc command unaffected. It would be nice to learn from other users implementing Microsoft’s workaround what else that workaround breaks.
-
PKCano
Manager -
Mitja Kolsek
Guest
Grargfar
AskWoody LoungerMrToad28
AskWoody Lounger-
Paul T
AskWoody MVP
PKCano
ManagerJanuary 29, 2020 at 11:29 am #2111606@Mitja-Kolsek
There are some other consequenses of the JavaScript bug posted here.
Viewing 8 reply threads -
Welcome to our unique respite from the madness.
It's easy to post questions about Windows 11, Windows 10, Win8.1, Win7, Surface, Office, or browse through our Forums. Post anonymously or register for greater privileges. Keep it civil, please: Decorous Lounge rules strictly enforced. Questions? Contact Customer Support.

Plus Membership
Donations from Plus members keep this site going. You can identify the people who support AskWoody by the Plus badge on their avatars.
AskWoody Plus members not only get access to all of the contents of this site -- including Susan Bradley's frequently updated Patch Watch listing -- they also receive weekly AskWoody Plus Newsletters (formerly Windows Secrets Newsletter) and AskWoody Plus Alerts, emails when there are important breaking developments. Click here for details and to sign up.
Search Newsletters
Search Forums
View the Forum
Search for Topics
Recent Topics
-
chimpstatic
by
wavy
8 hours ago -
Yahoo.com freezes Firefox
by
BobStr
2 hours, 12 minutes ago -
Ensure AltSecID attribute on the krbgt account is not populated
by
Susan Bradley
3 hours, 24 minutes ago -
“Notify…” box (subscribe to topic)
by
Slowpoke47
14 hours, 5 minutes ago -
Trackers may collect data that you type even before hitting submit
by
Alex5723
8 hours, 8 minutes ago -
Report spotlights vast scale of adtech’s ‘biggest data breach’
by
Alex5723
15 hours, 22 minutes ago -
Update error message
by
Slowpoke47
4 hours, 59 minutes ago -
Note the May updates don’t protect your domain
by
Susan Bradley
1 day, 1 hour ago -
Apple security updates list and release notes
by
Alex5723
1 day, 1 hour ago -
Master Patch List of May 16, 2022 – Apple zero days fixed
by
Susan Bradley
1 day, 3 hours ago -
Windows 11: Moving Icons from Taskbar Center to Taskbar Left
by
geekdom
1 day, 6 hours ago -
Forcing Smooth Shutdowns and Restarts, Please (Because I Love Analog ClocX)
by
Mr. Austin
2 hours, 1 minute ago -
FoxFlag shows AW server in Iran
by
wavy
11 hours, 4 minutes ago -
Configure Win 11 so the User Acct files are also listed in This PC folder
by
JohnVanKirk
1 day, 16 hours ago -
Another good system info utility: CPU-X
by
Ascaris
1 day, 20 hours ago -
The twists and turns of Office Fast Account Switching
by
Peter Deegan
20 hours, 40 minutes ago -
Will Intel be a dominant chip company going forward?
by
B. Livingston
15 hours, 54 minutes ago -
WebChangeMonitor — stalk your favorite websites for changes
by
Deanna McElveen
1 day, 15 hours ago -
May updates fix risks to networks
by
Susan Bradley
5 hours, 16 minutes ago -
“Type here to search” Foolishness
by
ussrankin
1 day, 23 hours ago -
Out in the front yard watching the Blood Moon tonight.
by
Susan Bradley
1 day, 5 hours ago -
Blocked URL
by
aaron451
17 hours, 40 minutes ago -
Storage Limit for OneDrive for Business
by
Colorado_Hiker
1 day ago -
Compared: USB 3, USB 4, Thunderbolt 3, Thunderbolt 4, USB-C..
by
Alex5723
3 days, 1 hour ago -
Ewaste or usable – week 2
by
Susan Bradley
1 day, 3 hours ago -
UPGRADE FROM OFFICE 2016 TO 2019 OR 2021 ??
by
HE48AEEXX77WEN4Edbtm
2 days, 13 hours ago -
Duplicate Favorites
by
BobStr
8 hours, 13 minutes ago -
Comcast/Xfinity Android app problem
by
ibe98765
3 days, 23 hours ago -
Firefox Ending Support for Wiin 7 in Jan, 2023
by
RonE22
2 days, 10 hours ago -
Return “Green Colored Padlock” icon in Firefox 100?
by
Tex265
1 day, 10 hours ago
Recent blog posts
- Master Patch List of May 16, 2022 – Apple zero days fixed
- The twists and turns of Office Fast Account Switching
- Will Intel be a dominant chip company going forward?
- WebChangeMonitor — stalk your favorite websites for changes
- May updates fix risks to networks
- Ewaste or usable – week 2
- Master Patch List as of May 10, 2022
- Here come the May updates
Key Links
Want to Advertise in the free newsletter? How about a gift subscription in honor of a birthday? Send an email to sb@askwoody.com to ask how.
Home • About • FAQ • Posts & Privacy • Forums • My Account
Register • Free Newsletter • Plus Membership • Gift Certificates • MS-DEFCON Alerts
Copyright ©2004-2022 by AskWoody Tech LLC. All Rights Reserved.