Microsoft KB Archive/941835

= A registry entry is available to turn off processing of metafiles =

Article ID: 941835

Article Last Modified on 10/11/2007

-

APPLIES TO

 Microsoft Windows Server 2003 SP1, when used with:  Microsoft Windows Server 2003, Standard Edition (32-bit x86)

 Microsoft Windows Server 2003, Enterprise Edition

 Microsoft Windows Server 2003, Datacenter Edition (32-bit x86)

 Microsoft Windows Server 2003, Web Edition</li></ul>

 Microsoft Windows Server 2003, Enterprise Edition for Itanium-based Systems</li></ul>

 Microsoft Windows Server 2003, Datacenter Edition for Itanium-Based Systems</li></ul> </li> Microsoft Windows Server 2003, Standard x64 Edition</li> Microsoft Windows Server 2003, Enterprise x64 Edition</li> Microsoft Windows Server 2003, Datacenter x64 Edition</li> Microsoft Windows XP Professional x64 Edition</li> Microsoft Windows XP Service Pack 2, when used with:  Microsoft Windows XP Professional</li></ul>

 Microsoft Windows XP Home Edition</li></ul> </li> Microsoft Windows 2000 Service Pack 4, when used with:  Microsoft Windows 2000 Server</li></ul>

<ul> <li>Microsoft Windows 2000 Advanced Server</li></ul>

<ul> <li>Microsoft Windows 2000 Datacenter Server</li></ul>

<ul> <li>Microsoft Windows 2000 Professional Edition</li></ul> </li></ul>

-

<div class="notice_section">

Important This article contains information about how to modify the registry. Make sure that you back up the registry before you modify it. Make sure that you know how to restore the registry if a problem occurs. For more information about how to back up, restore, and modify the registry, click the following article number to view the article in the Microsoft Knowledge Base:

256986 Description of the Microsoft Windows registry

<div class="summary_section">

SUMMARY
To provide more flexibility in meeting the needs of customers who have specialized security requirements, Microsoft has provided a way to turn off all processing of metafiles system-wide by setting a flag in a registry key setting. This setting is available to all customers who are running Windows Vista and to customers who have applied security update 925902. Security update 925902 is described by security bulletin MS07-017.

Turning off processing of metafiles may cause the appearance of software or of system components to decrease in quality. Turning off processing of metafiles may also cause the software or the system components to fail completely. Examples include the following:
 * You cannot print on the computer.
 * Some applications on the computer may be unable to display clip art.
 * Some scenarios that involve OLE rendering may break. In particular, this problem occurs when the object server is not active.

Important This is intended only as an emergency measure if the latest GDI security update cannot be deployed quickly enough during an active attack. Turning off all processing of metafiles has not been fully tested. You should change this setting back to zero (0) as soon as possible and install the latest GDI security update to help increase security and to regain full functionality. For more information about how to set the DisableMetaFiles registry key, see the &quot;More Information&quot; section.

<div class="moreinformation_section">

MORE INFORMATION
Warning Serious problems might occur if you modify the registry incorrectly by using Registry Editor or by using another method. These problems might require that you reinstall the operating system. Microsoft cannot guarantee that these problems can be solved. Modify the registry at your own risk.

Turn off processing of GDI metafiles
To turn off processing of GDI metafiles, set the value of the DisableMetaFiles registry entry to one (1). This entry of type REG_DWORD is located in the following registry subkey:

Note If this registry entry is set to any value other than zero, it turns off processing of GDI metafiles.

To set the value of this entry, follow these steps: <ol> <li>Click Start, click Run, type Regedit in the Open box, and then click OK.</li> <li>Locate and then click the following registry subkey:

</li> <li>On the Edit menu, point to New, and then click DWORD.</li> <li>Type DisableMetaFiles, and then press ENTER.</li> <li>On the Edit menu, click Modify to modify the DisableMetaFiles registry entry.</li> <li>In the Value data box, type 1, and then click OK.</li> <li>Exit Registry Editor.</li></ol>

Turn on processing of GDI metafiles
To turn on processing of GDI metafiles, set the value of the DisableMetaFiles registry entry to zero (0). This entry of type REG_DWORD is located in the following registry subkey:

To set the value of this entry, follow these steps: <ol> <li>Click Start, click Run, type Regedit in the Open box, and then click OK.</li> <li>Locate and then click the following registry subkey:

</li> <li>In the details pane, double-click .</li> <li>In the Value data box, type 0, and then click OK.</li> <li>Exit Registry Editor.</li></ol>

Additional query words: security_patch security_update bug flaw malicious attacker exploit registry unauthenticated buffer overrun overflow specially-formed scope specially-crafted denial of service DoS TSE Win2000

Keywords: kbbug kbfix kbsecvulnerability kbqfe kbsecurity kbsecbulletin kbpubtypekc kbwin2000presp5fix kbexpertiseinter kbexpertisebeginner KB941835

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.