VBScript MSXML Policy Bypass

Discussion in 'News Aggregator' started by Packet Storm, 20 Dec 2018.

  1. Packet Storm

    Packet Storm Guest

    Starting from Windows 10 Fall Creators Update, VBScript execution in IE 11 should be disabled for websites in the Internet Zone and the Restricted Sites Zone by default. However, the VBScript execution policy does not appear to cover VBScript code in MSXML xsl files which can still execute VBScript, even when loaded from the Internet Zone.

    Continue reading...
     

Share This Page

Loading...