Ask Sawal

Discussion Forum
Notification Icon1
Write Answer Icon
Add Question Icon

How to turn off vml?

3 Answer(s) Available
Answer # 1 #

Disable the vulnerable .dll: In the security advisory posted yesterday, Microsoft suggested that users can disable the vulnerable "Vgx.dll" from the command line.

-- Click Start, choose Run, and then type

-- regsvr32 /u "%CommonProgramFiles%\Microsoft Shared\VGX\vgx.dll

-- Click OK, then click OK again in the confirmation dialog that appears.

To undo the command, use:

-- regsvr32 "%CommonProgramFiles%\Microsoft Shared\VGX\vgx.dll

Use Group Policy to propagate .dll disabling: Microsoft's workarounds don't include this time saver, but an independent researcher has posted templates for creating a pair of Group Policy objects that disable (or undo that) for all users of a Windows domain.

For the details, head to Jesper Johansson's blog, here.

Disable Binary and Script Behaviors in IE 6: Another purely defensive move recommended by Microsoft is to turn off this scripting feature within the browser. Note, however, that this only protects against the currently-known exploit, which could, of course, morph into something else entirely.

-- Select Tools|Internet Options in IE

-- Click the "Security" tab

-- Click "Internet," then "Custom Level"

-- In the "ActiveX controls and plug-ins" section, under "Binary and Script Behaviors," click "Disable," and then click OK.

Repeat the last step above, but in the "Local intranet" zone.

Use another browser: Several security researchers and organizations have recommended dumping IE 6 in similar zero-day situations, and this was no different.

"One of the easiest ways might be to use Firefox with a plug-in to allow certain sites (such as to transparently use MSIE to get back the ActiveX functionality without bothering the user over the choice and differences," said the Internet Storm Center in an online alert Wednesday.

Two such plug-ins (called "extensions" in Firefox parlance) that add IE functionality to Firefox are IE Tab and IE View.

In this case, "another browser" can also mean Internet Explorer 7, which is currently in Release Candidate 1. According to a Microsoft spokesman late Tuesday, IE 7 is not vulnerable to the VML bug.

IE 7 RC1 can be downloaded from the Microsoft site.

Answer # 2 #

This topic describes VML, a feature that is deprecated as of Windows Internet Explorer 9. Webpages and applications that rely on VML should be migrated to SVG or other widely supported standards.

Vector Markup Language (VML) is an XML-based exchange, editing, and delivery format for high-quality vector graphics on the Web that meets the needs of both productivity users and graphic design professionals. XML is an emerging simple, flexible, and open text-based language that complements HTML. (See the XML section of the MSDN Library for detailed information on XML.)

VML is currently supported by Microsoft Internet Explorer version 5.0 or later.

VML has been proposed to the W3C as a standard for vector graphics on the Web (see Vector Markup Language (VML)). Microsoft is continuing to lead the charge in the development and implementation of XML-based technologies, working with leading industry partners (AutoDesk, Hewlett-Packard, Macromedia, Visio) and the W3C to advance Web-based standards. We expect to work with the W3C to ultimately drive to one standard format for vector graphics on the Web.

VML is also supported by Microsoft Office 2000 or later. Microsoft Word, Microsoft Excel, and Microsoft PowerPoint can be used to create VML graphics.

To use VML in your web pages, use a style element to import the VML behavior, as shown in the following code.

Next, declare the VML namespace, as shown in the following code sample.

Finally, add VML elements to define visuals effects. For example, the following VML code creates a red oval.

See the links below:

Elsakazi pnzbyt
Answer # 3 #

This topic describes VML, a feature that is deprecated as of Windows Internet Explorer 9. Webpages and applications that rely on VML should be migrated to SVG or other widely supported standards.

To let the browsers know how to hand off data to a VML-specific processor, you need to type some information such as namespaces and behavior styles. You can then use VML to type graphics in the region.

In this topic:

An XML mechanism indicates the namespace that an element comes from. If you switch from parsing in HTML to parsing in XML, this mechanism indicates the switch within HTML.

Ask the vender of your VML processor what information is required for the XML namespace.

If you use Microsoft Internet Explorer to render VML, always type the following line in the tag:

This information tells Internet Explorer to switch to namespace "urn:schemas-microsoft-com:vml" when parsing an XML tag with a prefix v:, and to hand off the resulting data to the VML processor.

Back to top

VML is defined in Microsoft Internet Explorer as a default behavior.

To render VML, always type the following lines in the region:

Mohd nbuhgqm Sahil