Knowledge Base

Applies To

Ion 3.6+

Summary

McAfee ScripScan’s browser extension can cause Internet Explorer 11 to crash when using with certain features in Browsium Ion.

Details

An issue with the McAfee ScriptScan Browser Helper Object (McAfee ScriptScan version 10.7 or later) causes a crash when an loading an Ion profile that includes one or more registered ActiveX/COM objects attempting to access the virtual registry. The crash issue is caused by adding the URL to the Allowlist for the desired application. Disabling ScriptScan entirely will not cause the crash.

Until McAfee issues an updated ScriptScan BHO version to resolve the unexpected behavior, Browsium recommends customers configure Ion to disable the ScriptScan BHO ONLY for affected sites via Ion’s virtual registry feature. This will achieve the same result as setting the Allowlist for the affected URLs in ScriptScan, but ensures the managed IE instance does not crash. ScriptScan will continue to be enabled for applications that are not profiled in Ion.

This fix only needs to be applied to profiles in which the following is true:
– The “Register ActiveX/COM” feature is enabled for one or more custom file entries.
– The “Force Plugin-based Swap” feature is selected for the profile’s Java remedation.

To implement this workaround you can add the following to your existing Ion Profile:

1. Select the desired Ion profile in the Ion Configuration Manager.
2. Navigate to the Custom Registry Manager
3. Keep ‘Current User’ selected for the Hive
4. Use the following value for Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{7DB2D5A0-7241-4E79-B68D-6309F01C5231}
5. Use the following value for Value Name: Flags
6. Select ‘DWORD’ from the Type dropdown.
7. Use the following value for Value Data: 0x1