Important: This article contains information about modifying the registry. Before modifying the registry, you must back up the registry and must know how to restore the registry when there is a problem. For information on how to back up, restore, and edit the registry, click the article number below to view the article in the Microsoft Knowledge Base:
256986
Microsoft Windows Registry Description
This page
The ADO stream object contains methods for reading and writing binary files and text files. When the ADO Stream Object is combined with known security vulnerabilities in Microsoft Internet Explorer, the web site can perform scripts from this domain. To help protect your computer from such an attack, you can manually modify your registry.
Introduction
ADO stream object refers to a file in memory. This stream contains several methods for reading and writing binary files and text files. When this specially designed function is combined with known security vulnerabilities in Microsoft Internet Explorer, the Internet Web site can perform scripts from this domain. This problem occurs that when there is an AdoDB.Stream object in Internet Explorer, the Adodb.Stream object allows you to access your hard drive.
More information
Any business process web application that needs to be loaded or saved to your hard drive may use AdoDb.Stream objects in Internet Explorer. For example, if there is a table that requires employees to download and fill in a table, the AdoDb.Stream object is used to get the file and save it locally. When the user has edited the file locally and submit it back to the server, the AdoDB.Stream object is used to read the file from the local hard disk and send it back to the server. It is highly recommended that you provide this feature using other methods. For example, you can use an application or control that needs to be cautiously accessing your hard disk.
Software update information
WARNING: "Registry Editor" can cause serious problems and may need to reinstall the operating system. Microsoft does not guarantee that you can solve problems caused by improper use of the Registry Editor. Use Registry Editor at your own risk. Microsoft offers three ways to disable adoDb.stream objects in Internet Explorer. You can use Microsoft Windows Update to update your computer, you can download update files from the Microsoft Download Center, or manually disable the AdoDb.Stream object. These methods work by creating the following registry keys:
HKEY_LOCAL_MACHINE / SOFTWARE / Microsoft / Internet Explorer / ActiveX Compatibility / {00000566-0000-0010-8000-00AA006D2EA4}
The registry key has a GUID of the Adodb.Stream object. When Internet Explorer identifies this registry key, Internet Explorer does not allow this component to be launched in your browser.
Windows update
To install this update, visit the Microsoft Web site below:
Http://v4.windowsupdate.microsoft.com/zhcn/default.asp
Microsoft Download Center Update
To disable the AdoDb.Stream object using the registry key update provided by Microsoft Download Center, visit one of the following Microsoft Web sites, depending on your operating system: Windows XP, Windows Server 2003
http://www.microsoft.com/downloads/details.aspx?displaylang=zh-cn&familyid=4d056748-c538-46f6-b7c8-2fbfd0d237e3windows 9x, Windows Me
http://www.microsoft.com/downloads/details.aspx?displaylang=zh-cn&familyid=fe2a5b1c-ff30-40a0-8e70-c9f1f4dcd8c2
Windows XP Version 2003 64-bit version, Windows Server 2003 64-bit version
http://www.microsoft.com/downloads/details.aspx?familyid=e7576b19-de8b-41b0-bbd9-06c39591cecf&displaylang=en
Other information on the Microsoft Download Center Web site and download instructions.
Manual treatment
To disable the AdoDb.Stream object by manually creating a registry key, follow these steps:
1. Turn off all open Internet Explorer browser windows. 2. Click Start, and then click Run. 3. In the Open box, type regedit, and then click OK. 4. In the Registry Editor, find the following registry key:
HKEY_LOCAL_MACHINE / SOFTWARE / Microsoft / Internet Explorer / ActiveX Compatibility
5. Right-click "ActiveX Compatibility", point to "New", and then click "Item". 6. Type the following name for the new item:
{00000566-0000-0010-8000-00Aa006d2ea4}
7. Right-click this new item, point to "New", and then click DWORD Value. 8. Name the value as Compatibility Flags. 9. In the right pane, right-click "Compatory Flags" and click Modify. 10. In the Edit Dword Value dialog box, make sure the "Hex" option is selected, type 400 in the "Numerical Data" box, and then click OK. 11. Close the Registry Editor.
After setting the compatibility tag, AdoDb.Stream objects cannot access your computer hard drive in Internet Explorer. However, AdoDb.stream objects can also access your hard drive outside Internet Explorer.
important
After adding this registry key, only the AdoDb.Stream object in Internet Explorer is affected. Other ADO objects will not be affected by this change. After using this update, you will receive the following error message when you try to use the ADO stream object from the HTML page of Internet Explorer:
ActiveX Component Can't create Object: 'adodb.stream'
If you run an application in an enterprise intranet environment, the Enterprise Intranet environment is currently using AdoDB.Stream objects in Internet Explorer, which can cause this update to cause the application to stop running. To restore the application function, Microsoft recommends setting your Internet Explorer browser security level to "high", then you must clear the compatibility tag of AdoDb.Stream objects.
1. To set your Internet Explorer browser to a high security level, follow these steps:
a. In Internet Explorer, click Internet Options in the Tools menu. b. Click the Security tab. Click "Internet" under the "Web Contents for Different Areas". c. Click "Default Level" and move the slider to "high". d. Click Apply, and then click OK to close the Internet Options dialog. 2. Set the value to zero (0x0) to clear the compatibility tag of the Internet Explorer AdoDDDEAM object. Set the value to zero (0x0) to disable the item and restore the function. To manually set the compatibility tag to zero, follow these steps: a. Click Start, and then click Run. b. In the Open box, type regedit, and then click OK. c. In the Registry Editor, find the following registry key:
HKEY_LOCAL_MACHINE / SOFTWARE / Microsoft / Internet Explorer / ActiveX Compatibility / {00000566-0000-0010-8000-00AA006D2EA4}
d. In the right pane, double click "Compatibility Flags". e. In the Edit Dword Value dialog box, make sure the "Hex" option is selected, type 0 in the "Numerical Data" box, and then click OK. f. Close the Registry Editor.
Note: The Internet Explorer must be restarted to make changes.
reference
For additional information about how to enhance this field domain in Internet Explorer, click the article number below to view the article in the Microsoft Knowledge Base:
833633
How to strengthen the security settings of this field in Internet Explorer
For more information on Internet Security, please visit the Microsoft Web site below:
http://www.microsoft.com/china/security/incident/settings.asp
For additional information on how to prohibit ActiveX controls on your system, click the article number below to see the article in the Microsoft Knowledge Base:
240797
How to prohibit ActiveX controls to run in Internet Explorer
The information in this article applies to:
• Microsoft Internet Explorer 5.01 Service Pack 2 • Microsoft Internet Explorer 5.01 Service Pack 3 • Microsoft Internet Explorer 5.01 Service Pack 3 • Microsoft Internet Explorer 6.0 Service Pack 1 • Microsoft Internet Explorer 6.0 Service Pack 1 • Microsoft Data Access Components 2.5 Service Pack 3 • Microsoft Data Access Components 2.6 Service Pack 2 • Microsoft Data Access Components 2.7 Service Pack 1 • Microsoft Data Access Components 2.8
Keywords: kbinfo kb870669
