Icon of program: Windows Certificate Enrol…

Windows Certificate Enrollment Control Vulnerability Patch (Windows 98/98 Second Edition)

Download now

Used Windows Certificate Enrollment Control Vulnerability Patch (Windows 98/98 Second Edition) for Windows?

Clicking on the Download Now (Visit Site) button above will open a connection to a third-party site. Download.com cannot completely ensure the security of the software hosted on third-party sites.

Editors’ Review

Download.com staff
This update addresses a serious flaw in Windows' Certificate Enrollment Control, preventing malicious websites from deleting vital digital certificates on your system.

  • Pros

    • Fixes a critical vulnerability affecting digital certificate security.
    • Protects against unauthorized deletion of root, EFS, and email certificates.
    • Includes a patch for a related SmartCard Enrollment control flaw.
    • Enhances overall system security for Windows users.

  • Cons

    • Web site operators may need to revise applications using the control.
    • Requires installation via a patch.
Icon of program: Windows Certificate Enrol…

Windows Certificate Enrollment Control Vulnerability Patch (Windows 98/98 Second Edition)

Download now

Used Windows Certificate Enrollment Control Vulnerability Patch (Windows 98/98 Second Edition) for Windows?

Explore More

Full Specifications

GENERAL
Release
Latest update
Version
5.131.3659.0
OPERATING SYSTEMS
Platform
Windows
Operating System
  • Windows 10
  • Windows 98
Additional Requirements
Windows 98, Internet Explorer 5.0
POPULARITY
Total Downloads
7,964
Downloads Last Week
2
Report Software

Program available in other languages

Last Updated

Developer’s Description

By Microsoft
Fix a Windows flaw to stop a Web site or HTML e-mail from deleting digital certificates on your computer.
All versions of Windows ship with an ActiveX control known as the Certificate Enrollment Control, the purpose of which is to allow Web-based certificate enrollments. The control contains a flaw that could enable a Web page, through an extremely complex process, to invoke the control in a way that would delete certificates on a user?s system. An attacker who successfully exploited the vulnerability could corrupt trusted root certificates, EFS encryption certificates, e-mail signing certificates, and any other certificates on the system, thereby preventing the user from using these features.

A new version of the control is available that corrects the vulnerability and can be installed via the patch. As discussed in the Caveats section, customers who operate Web sites that use the Certificate Enrollment Control will need to make minor revisions to their Web applications in order to use the new control. Microsoft Knowledge Base article Q323172 details how to do this. In addition, the patch addresses a similar, but less serious vulnerability discovered in the SmartCard Enrollment control. This control ships with Windows 2000 and Windows XP. A new version of this control is also provided.

Download.com
Your review for Windows Certificate Enrollment Control Vulnerability Patch (Windows 98/98 Second Edition)