- Quick specs
- Price: Free
- Operating system:
- Date added: September 17, 2002
- Total Downloads: 7,844
- Downloads last week: 5
- See full specifications
- Average user rating: stars out of 1 votes
See all user reviews
Publisher's description
From Microsoft :All versions of Windows ship with an ActiveX control known as the Certificate Enrollment Control, the purpose of which is to allow Web-based certificate enrollments. The control contains a flaw that could enable a Web page, through an extremely complex process, to invoke the control in a way that would delete certificates on a user?s system. An attacker who successfully exploited the vulnerability could corrupt trusted root certificates, EFS encryption certificates, e-mail signing certificates, and any other certificates on the system, thereby preventing the user from using these features.
A new version of the control is available that corrects the vulnerability and can be installed via the patch. As discussed in the Caveats section, customers who operate Web sites that use the Certificate Enrollment Control will need to make minor revisions to their Web applications in order to use the new control. Microsoft Knowledge Base article Q323172 details how to do this. In addition, the patch addresses a similar, but less serious vulnerability discovered in the SmartCard Enrollment control. This control ships with Windows 2000 and Windows XP. A new version of this control is also provided.
More popular Encryption Software downloads
- 34,431 downloads 1. Hotspot Shield
- 11,215 downloads 2. RoboForm
- 8,899 downloads 3. Computer Use Reporter
- 6,431 downloads 4. Folder Lock
- 4,399 downloads 5. RAR Password Cracker
- See all Encryption Software downloads
User reviews
- Average user rating: 0 stars Not yet available
- My rating: 0 stars Write review
-
Showing 1 of 1 user reviewSee 1 user review
This software version | All versions -
Version: Windows Certificate Enrollment Control Vulnerability Patch (Windows XP) 5.131.3659.0
- See 1 user review Write review
Submit your review
- See more CNET content tagged:
- Microsoft Corp.,
- Microsoft Windows,
- certificate,
- control,
- vulnerability
%20-%20Free%20software%20downloads%20and%20software%20reviews%20-%20CNET%20Download.com&srcUrl=http://download.cnet.com/Windows-Certificate-Enrollment-Control-Vulnerability-Patch-Windows-XP/3000-2092_4-10150463.html){kind=small}