"This page contains an unspecified potential securty flaw."

[JD]

When I click on a Desktop shortcut to my TIF folder, I get the message:
"This page contains an unspecified potential security flaw. Would you like
to continue?" I've never seen this before.
I cleared the cache, deleted the cookies, and cleared the history. I even
deleted and recreated the shortcut. The same message pops up.
I've run virus scan, Spybot, and Ad-aware. All came up clean. Event Viewer
shows nothing untoward.
Could this be related to the most recent batch of Windows Security Updates,
installed on August 8?
I can open the folder directly from Documents and Settings/Owner/Local
Settings/Temporary Internet Files.
I also note that the pop-up refers to a "page," though the shorcut leads to
a folder. I don't know if that is significant.
What advice can anyone offer?
Thanks for any help.

[JustUs]

I too am experiencing the same problem. It started after the last batch of
updates. Another fix needed for a fix. Sounds like the domino effect :-)

[FH]

I am having the exact same problem. Hopefully Microsoft will provide a fix.

[jjoh...@pdxinc.com]

We're having the same problem on certain machines when a user tries to
open the My Documents folder from the desktop. If they open My
Computer and then click My Documents in the left hand task pane they
don't get the message, only when clicking to open it from the Desktop.
Same thing if they right-click the icon first.

Error is an Internet Explorer dialog box with the message "This page
has an potential security flaw. Do you want to continue?" and a
"Continue" or "Cancel" button.

This is a Windows XP SP2 machine that was just patched with the August
2006 updates.

[jbeene]

I am having same problem. Where I noticed was when I go to clear the Temp
files. So far not noted other places but could be and just not run into it. I
can click on yes to continue but then have to click again to open the
file/folder. I delete the files then as always and have noted no ill affects.
Just creates an unnecessary step. I'd be interested in what it means and when
Microsoft will respond with an answer and a fix.

[andy....@gmail.com]

This has been caused by Security Update for Windows XP (KB921398). It
was one of the batch of updates that came down this week. It will
affect anyone who gets all updates (not just the critical ones). You
can uninstall it using Add/Remove Program with the "Show update" box
ticked. I'm hoping MS patches the update to fix this ASAP.

[JD]

I always take ONLY the critical updates.
Are you recommending uninstalling 921398--or just waiting for MS to correct
the issue with a future update?
<andy....@gmail.com> wrote in message
news:1155360768.3...@h48g2000cwc.googlegroups.com...

[jbeene]

Just wanted to post follow up on this issue for a few reasons.
1) My problem, in case I might have, stated incorrectly by me was when I was
doing my Disk Clean up of files. The extra pop up screen appeared.
2) As JD wrote "I ONLY take critical updates" also.
3) This is strange part. When I first logged in this AM I went to Disk
Cleanup to do my almost daily clean up of files. As was happening the "This
page contains an unspecified potential security flaw, Would you like to
continue?" appeared. As sometimes happens I could not clear the files, so I
shut down my messanger programs and restarted my PC, which normally allows
complete clearing of files on Dish Cleanup.
4) When it restarted I then went to Disk Cleanup and low and behold the Pop
up screen did not appear????? I could clear out the files as before by just
clicking open?? No Pop up?
5) I don't know if this screen has disappeared for good or just temporarly.
I'll moniter and advise.

[sak]

Same problem here, and I also just download this weeks batch of security
updates. About eight in all.

[jbeene]

Guess it was wishful thinking that this problem would go away. It hasn't and
still pops up sometimes. I hope that it will be fixed soon.

[VicMax]

I called MS and it took them the better part of a week to "resolve" the
problem. The update in question (KB921398 -- MS06-045) deals with "drag &
drop" and FOLDERS with GUID (Globally Unique IDs) extensions. (You may recall
a patch that dealt with FILES with GUIDs as extensions.)

In my case, the problem did not occur when I "navigated" to the folder but
ONLY when I used a "shortcut" to get there. When MS called with the
resolution, I asked if this had anything to do with the internals of how the
OS handles the Content.IE5 folders (and we all know what a pain in the "A"
Microsoft has made of their OSes as far as accessing those folders!). The
tech confirmed that this is the case.

IMHO, the ultimate solution is for MS to begin treating these folders like
all other folders (i.e., via "standard security mechanisms"), but that is too
easy! After all, MS knows what is good for me and I just have to believe
them. (My apologies for the sarcasm if anyone finds it offensive.)

At any rate, the solution they provided simply turns off messages from being
issued to the user for the specific security zone involved.

My case number is/was SRX060809600084 if anyone wants to ask for the
solution. I personally am hesitant to pass it along for three reasons:
1) The solution only masks the problem of the patch being buggy
2) MS has caused this problem because they insist they know better than I do
as far as what is good for me, how my system should be administered, and what
I should be allowed to access (almost as if it were THEIR system!)
3) I am not entirely pleased with the solution (although it certainly
provides relief from the messagebox popping up) and do not particularly
recommend it because I am not certain that it will not negate the value of
the patch itself.

The MS tech indicated that the patch also made changes to shell32.dll and
assured me that those changes would "protect me". I guess I have chosen to
believe him, but I cannot recommend others have the same level of confidence
that I do.

I hope this helps.

[JD]

Did you possibly mean to refer to MS06-042? My problem began with the August
8 downloads.
I, too, can access the TIF folder through Windows Explorer without getting
the popup warning. It happens only when I use a shortcut to the TIF.
Since I'm experiencing no other anomalous behavior, I think I'll wait for MS
to issue the "cure" on August 22 as per this post from Pa Bear:
"A new version of security update 918899 is currently in development and
will be released to all Microsoft Internet Explorer 6 Service Pack 1
customers by August 22, 2006. The new update will be available on the
Microsoft Download Center and by using Windows Update. Customers who are
using any version of Internet Explorer other than Internet Explorer 6
Service Pack 1 together with any Windows version are not affected by this
release and do not have to take any action. We recommend that customers who
are not experiencing this issue continue to deploy security update 918899 in
their environments to receive protection from the vulnerabilities that are
documented in security bulletin MS06-042. Customers who experience this
issue should apply the new security update when it is available. Customers
who want to avoid the issue before the new security update is available may
apply hotfix 923762.
Source: MS06-042: Cumulative security update for Internet Explorer
http://support.microsoft.com/?kbid=918899
Robear Dyer (PA Bear)
MS MVP-Windows (IE/OE, Shell/User, Security), Aumha.org VSOP, DTS-L.org"

"VicMax" <Vic...@discussions.microsoft.com> wrote in message
news:10A70ED7-CBAD-48FC...@microsoft.com...

[VicMax]

JD:

Yes, I am sure. KB921398 / MS06-045. Remove the update and the problem
goes away; reapply it and it comes back. As far as I can tell, it is only
when you use shortcuts to access the subfolders of ("under") the TIF folder.
That includes the Content.IE5 folder, all the "alpha-numeric" folders, and
the OLK2 folder.

You can wait if you like -- I sure won't tell you how to administer your
system (just as I wish MS wouldn't insist on administering mine!).

You can get the fix I received from MS support -- it's a "free support"
call. Refer them to SRX060809600084. (It'll probably save you some time.)

I elected to go with this solution because my system is pretty much locked
down and I do not browse "dangerously". You may not make the same choice --
that is up to you.

As before, "I hope this helps".

[Richard Lowen]

Thanks, VicMax and JD. I think I'll await the Aug 22nd "fix", too.
If you can't trust MS to get it right the 1st time, can you trust them
to get it right in an interim patch? Hoo, boy.

*TimDaniels*

[JD]

I guess my mistake was in assuming that the culprit was 918899, since it was
the only one identified as a security update for Internet Explorer 6.
I appreciate your sharing your experience and your "advice."

"VicMax" <Vic...@discussions.microsoft.com> wrote in message

news:3A97B358-9D49-46AA...@microsoft.com...

[Verma@discussions.microsoft.com Arvind Verma]

- I've installed Patch MS06-045 (KB921398).
- Created a shortcut of Temporary Internet Files.
- When tried to access this shortcut gets an error "This page has an

unspecified potential security flaw. Would you like to continue?"

- If I click yes it opens the Folder otherwise it doesn't open the folder.
- Created the shortcut again and reproduce the problem, it was same.
- Ran the shortcut from run prompt and we were able to access the folder
without any problem.
- Checked the value of
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet
Settings\Zones\3]
- Select the Value 1806. Double Click on it and change the value from 1 to 0.
- Reproduce the issue but same results.
- Disable the Antivirus and tried again to no avail.
- Uninstall the patch MS06-045 (KB921398) still the update reoffers and
after installation gets the same problem.
- Compared the key with good machine
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\VolumeCaches\Internet Cache Files
- The key seems to be fine.
- Go to
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet
Settings\Zones and took the backup of the key.
- Changed the value of zones 0,1,2,3,4 and the dword value 1806 to 0.
- But the same results.
- Go to HKEY_Current_User\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet
Settings\Zones and took the backup of the key.
- Changed the value of zones 0,1,2,3,4 and the dword value 1806 to 0 and
reproduced the issue but same results.
- Uninstalled the Patch MS06-045 and restarted the computer.
- Download the patch MS06-045 and install on the computer.
- Restart the computer.
- Reproduce the problem, It was successful.
- The problem was resolved.

[jbeene]

Apparently Microsoft has not issed a fix for this problem. I have down loaded
all the most recent critial updates and no change noted. I wonder what the
hold up is?