0 Replies Latest reply on May 5, 2014 2:55 PM by malware-alerts

    Unregistering VGX.dll (0-day IE MS14-021) prevents graphs in ePO queries from being displayed

    malware-alerts

      This post might be kinda late, but I wanted to raise awareness for those of you who had unregistetred VGX.DLL on their workstations as a workaround when the Microsoft security advisory came out and are working with ePO 4.6 and 5.0 (haven't tested on ePO 5.1 yet).

       

      When using IE (all vulnerable versions) graphs in queries are not displayed (Bar charts / Pie charts / bubble charts / line charts), as ePO uses deprecated VML to render graphics.

       

      VGX.DLL does not get re-registered when you apply MS14-021

       

      To solve the issue: re-register VGX.DLL (Microsoft provides step-by step instructions):

       

      FROM: https://technet.microsoft.com/en-us/library/security/ms14-021.aspx

      How to undo this workaround. The security update does not re-register vgx.dll. To re-register vgx.dll follow these steps:

      Note The following commands must be entered from an elevated command prompt.

      For 32-bit Windows systems, from an elevated command prompt, enter the following command:

       

      "%SystemRoot%\System32\regsvr32.exe" "%CommonProgramFiles%\Microsoft Shared\VGX\vgx.dll"

       

      A dialog box should appear after the command is run to confirm that the re-registration process has succeeded. Click OK to close the dialog box. Close and reopen Internet Explorer for the changes to take effect. Note that the -s command line switch can be used to suppress the dialog box in order to allow this command to be scripted.

       

      For 64-bit Windows systems, from an elevated command prompt, enter the following commands:

       

      "%SystemRoot%\System32\regsvr32.exe" "%CommonProgramFiles%\Microsoft Shared\VGX\vgx.dll"
      "%SystemRoot%\System32\regsvr32.exe" "%CommonProgramFiles(x86)%\Microsoft Shared\VGX\vgx.dll"

       

      A dialog box should appear after each command is run to confirm that the re-registration process has succeeded. Click OK to close the dialog box. Close and reopen Internet Explorer for the changes to take effect. Note that the -s command line switch can be used to suppress the dialog box in order to allow these commands to be scripted.

       

      May I remind everyone (especially ePO development)  that VML is deprecated since IE9 ? : http://msdn.microsoft.com/en-us/library/bb263898.aspx

       

      SVG is the way to go now.

       

      Attached are some snapshots of what query results look like with the graphs missing

       

      Message was edited by: malware-alerts on 5/5/14 2:54:07 PM CDT

       

      Message was edited by: malware-alerts on 5/5/14 2:55:25 PM CDT