PRB: Cab Files Signed Low in VJ++ Request Full IE Permissions

ID: Q197573

The information in this article applies to:

Microsoft Visual J++, version 6.0

SYMPTOMS

When you sign a cabinet file (.cab) with Low permissions in Visual J++ and you open the Web page that calls the cabinet file, Internet Explorer displays a message that the component is signed with Full permissions.

CAUSE

When you sign a cabinet file with Low permissions in Visual J++, you are requesting that the code in the cabinet be fully trusted on the user's system. That is, you are essentially requesting the user to lower his or her Internet Explorer security level to Low to grant full access to the component. Only a security zone already set to the Low security level in Internet Explorer can grant this much access without first asking the user. Otherwise, Internet Explorer displays a message stating that the component is signed with Full permissions (that is, full access). The user has to click Yes to continue loading the specific code contained in the cabinet file.

RESOLUTION

This behavior is by design.

MORE INFORMATION

Details concerning cabinet file permission levels, Internet Explorer security zones, and how signed cabinet file permission levels act in the various Internet Explorer security zone settings, are outlined in detail in the Microsoft SDK for Java documentation:

http://www.microsoft.com/java/sdk/32/default.htm

IMPORTANT NOTE: In Internet Explorer, set your security level to Low only when you are certain that all content you might encounter in the specific zone is from a safe source (for example, your corporate intranet). In addition, when you run a component that is signed with Full permissions from a security zone that is not set as Low, make sure that you are certain it does not contain unsecure content.

REFERENCES

For the latest Knowledge Base articles and other support information on Visual J++ and the SDK for Java, please see the following pages on the Microsoft Technical Support site:

http://support.microsoft.com/support/visualj/

http://support.microsoft.com/support/java/

Additional query words:

Keywords : kbIE kbSecurity kbVJ600
Version : WINDOWS:6.0
Platform : WINDOWS
Issue type : kbprb