Microsoft Windows 10: Universal Windows apps with Windows Runtime API access

2018-06-25T00:00:00
ID OPENVAS:1361412562310109369
Type openvas
Reporter Copyright (c) 2018 Greenbone Networks GmbH
Modified 2019-12-13T00:00:00

Description

This policy setting controls whether Windows Store apps with Windows Runtime API access directly from web content can be launched.

If you enable this policy setting, Windows Store apps with Windows Runtime API access directly from web content cannot be launched, Windows Store apps without Windows Runtime API access from web content are not affected.

If you disable or do not configure this policy setting, all Windows Store apps can be launched.

(C) Microsoft Corporation 2015.

                                        
                                            # Copyright (C) 2018 Greenbone Networks GmbH
#
# Text descriptions excerpted from a referenced source are
# Copyright (C) of the respective author(s)
#
# SPDX-License-Identifier: GPL-2.0-or-later
#
# This program is free software; you can redistribute it and/or
# modify it under the terms of the GNU General Public License
# as published by the Free Software Foundation; either version 2
# of the License, or (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.

if(description)
{
  script_oid("1.3.6.1.4.1.25623.1.0.109369");
  script_version("2019-12-13T11:11:18+0000");
  script_tag(name:"last_modification", value:"2019-12-13 11:11:18 +0000 (Fri, 13 Dec 2019)");
  script_tag(name:"creation_date", value:"2018-06-25 16:35:49 +0200 (Mon, 25 Jun 2018)");
  script_tag(name:"cvss_base", value:"0.0");
  script_tag(name:"cvss_base_vector", value:"AV:L/AC:H/Au:S/C:N/I:N/A:N");
  script_tag(name:"qod", value:"97");

  script_name("Microsoft Windows 10: Universal Windows apps with Windows Runtime API access");

  script_category(ACT_GATHER_INFO);
  script_copyright("Copyright (c) 2018 Greenbone Networks GmbH");
  script_family("Policy");
  script_dependencies("smb_reg_service_pack.nasl", "os_detection.nasl");
  script_mandatory_keys("Compliance/Launch");

  script_add_preference(name:"Value", type:"radio", value:"1;0");

  script_xref(name:"URL", value:"https://www.microsoft.com/en-us/download/confirmation.aspx?id=25250");

  script_tag(name:"summary", value:"This policy setting controls whether Windows Store apps with
Windows Runtime API access directly from web content can be launched.

If you enable this policy setting, Windows Store apps with Windows Runtime API access directly from
web content cannot be launched, Windows Store apps without Windows Runtime API access from web
content are not affected.

If you disable or do not configure this policy setting, all Windows Store apps can be launched.

(C) Microsoft Corporation 2015.");

  exit(0);
}

include("smb_nt.inc");
include("policy_functions.inc");
include("host_details.inc");
include("version_func.inc");

target_os = policy_microsoft_windows_target_string();
title = "Block launching Windows Store apps with Windows Runtime API access from hosted content";
solution = "Set following UI path accordingly: Windows Components/App runtime/" + title;
type = "HKLM";
key = "Software\Microsoft\Windows\CurrentVersion\Policies\System";
item = "BlockHostedAppAccessWinRT";
reg_path = type + "\" + key + "!" + item;
test_type = "RegKey";
default = script_get_preference("Value");

if(!policy_verify_win_ver())
  results = policy_report_wrong_os(target_os:target_os);
else
  results = policy_match_exact_reg_dword(key:key, item:item, type:type, default:default);

value = results["value"];
comment = results["comment"];
compliant = results["compliant"];

policy_reporting(result:value, default:default, compliant:compliant, fixtext:solution,
  type:test_type, test:reg_path, info:comment);
policy_set_kbs(type:test_type, cmd:reg_path, default:default, solution:solution, title:title,
  value:value, compliant:compliant);

exit(0);