中文
漏洞编号 BUG-000123406
已提交 Jun 28, 2019
Modified Dec 21, 2019
严重性 Medium
应用于 ArcGIS GIS Server
找到的版本 10.7.1
程序语言 N/A
服务器平台 Windows 10.0 64 Bit
客户端平台 Windows 10.0 64 Bit
数据库 N/A
区域设置 N/A
状态 Implemented
修正版本 10.8.0
SP 修复 10.8 Approved

漏洞 BUG-000123406

摘要

Feature Service drawingInfo is missing markerGraphics information when the returnAdvancedSymbols property is true and the hosting machine has the Microsoft Windows June 2019 or later security updates installed. This causes point data to fail to render in ArcGIS Apps (Collector for ArcGIS , Explorer for ArcGIS, ArcGIS Runtime).


附加信息

Based on the debugging and some experimentation, a change to GDI32.dll in specific patches to Windows 8.1/Server 2016 and Windows 10 caused a Windows graphics device interface (GDI) function to fail where it previously worked correctly. This defect can also be experienced or reproduced by opening EMF files referencing a font even in Microsoft Paint, even with no Esri software is installed, so it seems clear that it is a system issue, not an issue in an Esri software. Based on this info and analysis, details of the bug have been provided to Microsoft Premium Support and a case with an urgent severity is started to request a resolution. This affects any machines with KB4503276 or later (for Windows 8.1 and Windows Server 2012 R2) or any machines with KB4503286 or later (Windows 10). See in the aforementioned KBs all the affected file lists that gdi32.dll is updated with this change. In the meantime, the known workarounds are either to roll back the KB fixes listed on the Windows OS, or to use the workaround of publishing from ArcGIS Pro instead of ArcMap. ArcGIS Pro uses a different code path that is not dependent on GDI, so it should be unaffected by this bug. GDI32.dll function "PlayEnhMetaFileRecord" fails, when called for "EMR_EXTCREATEFONTINDIRECTW" record. This is the function used to hydrate a font from the font file when it's referenced in a GDI stream. ArcMap uses fonts for all of its symbols, thus the reliance on this GDI function versus ArcGIS Pro, which uses vector geometries directly.


备用解决方案