DATABASE RESOURCES PRICING ABOUT US

{"id": "OPENVAS:1361412562310109519", "type": "openvas", "bulletinFamily": "scanner", "title": "Microsoft Windows: Notify antivirus programs when opening attachments", "description": "This policy setting allows you to manage the behavior for\nnotifying registered antivirus programs. If multiple programs are registered, they will all be\nnotified. If the registered antivirus program already performs on-access checks or scans files as\nthey arrive on the computer", "published": "2018-06-28T00:00:00", "modified": "2019-12-13T00:00:00", "cvss": {"score": 0.0, "vector": "NONE"}, "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310109519", "reporter": "Copyright (c) 2018 Greenbone Networks GmbH", "references": ["https://www.microsoft.com/en-us/download/confirmation.aspx?id=25250"], "cvelist": [], "lastseen": "2019-12-13T20:20:44", "viewCount": 25, "enchantments": {"dependencies": {}, "score": {"value": 0.3, "vector": "NONE"}, "backreferences": {}, "exploitation": null, "vulnersScore": 0.3}, "pluginID": "1361412562310109519", "sourceData": "# Copyright (C) 2018 Greenbone Networks GmbH\n#\n# Text descriptions excerpted from a referenced source are\n# Copyright (C) of the respective author(s)\n#\n# SPDX-License-Identifier: GPL-2.0-or-later\n#\n# This program is free software; you can redistribute it and/or\n# modify it under the terms of the GNU General Public License\n# as published by the Free Software Foundation; either version 2\n# of the License, or (at your option) any later version.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.109519\");\n script_version(\"2019-12-13T11:11:18+0000\");\n script_tag(name:\"last_modification\", value:\"2019-12-13 11:11:18 +0000 (Fri, 13 Dec 2019)\");\n script_tag(name:\"creation_date\", value:\"2018-06-28 16:22:17 +0200 (Thu, 28 Jun 2018)\");\n script_tag(name:\"cvss_base\", value:\"0.0\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:L/AC:H/Au:S/C:N/I:N/A:N\");\n script_tag(name:\"qod\", value:\"97\");\n\n script_name(\"Microsoft Windows: Notify antivirus programs when opening attachments\");\n\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (c) 2018 Greenbone Networks GmbH\");\n script_family(\"Policy\");\n script_dependencies(\"smb_reg_service_pack.nasl\");\n script_mandatory_keys(\"Compliance/Launch\");\n\n script_add_preference(name:\"Value\", type:\"radio\", value:\"3;1\");\n\n script_xref(name:\"URL\", value:\"https://www.microsoft.com/en-us/download/confirmation.aspx?id=25250\");\n\n script_tag(name:\"summary\", value:\"This policy setting allows you to manage the behavior for\nnotifying registered antivirus programs. If multiple programs are registered, they will all be\nnotified. If the registered antivirus program already performs on-access checks or scans files as\nthey arrive on the computer's email server, additional calls would be redundant.\n\nIf you enable this policy setting, Windows tells the registered antivirus program to scan the file\nwhen a user opens a file attachment. If the antivirus program fails, the attachment is blocked from\nbeing opened.\n\nIf you disable this policy setting, Windows does not call the registered antivirus programs when\nfile attachments are opened.\n\nIf you do not configure this policy setting, Windows does not call the registered antivirus programs\nwhen file attachments are opened.\n\n(C) Microsoft Corporation 2015.\");\n\n exit(0);\n}\n\ninclude(\"smb_nt.inc\");\ninclude(\"policy_functions.inc\");\ninclude(\"host_details.inc\");\ninclude(\"version_func.inc\");\n\ntarget_os = \"Microsoft Windows 7 or later\";\nwin_min_ver = \"6.1\";\ntitle = \"Notify antivirus programs when opening attachments\";\nsolution = \"Set following UI path accordingly:\nUser Configuration/Administrative Templates/Windows Components/Attachment Manager/\" + title;\ntype = \"HKU\";\nitem = \"ScanWithAntiVirus\";\nkey = \"Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Attachments\";\nreg_path = type + \"\\[SID]\\\" + key + \"!\" + item;\ntest_type = \"RegKey\";\ndefault = script_get_preference(\"Value\");\n\nif(!policy_verify_win_ver(min_ver:win_min_ver))\n results = policy_report_wrong_os(target_os:target_os);\nelse if(!sids = registry_hku_subkeys())\n results = policy_report_empty_hku();\nelse\n results = policy_match_exact_dword_profiles(key:key, item:item, default:default, sids:sids);\n\nvalue = results[\"value\"];\ncomment = results[\"comment\"];\ncompliant = results[\"compliant\"];\n\npolicy_reporting(result:value, default:default, compliant:compliant, fixtext:solution,\n type:test_type, test:reg_path, info:comment);\npolicy_set_kbs(type:test_type, cmd:reg_path, default:default, solution:solution, title:title,\n value:value, compliant:compliant);\n\nexit(0);", "naslFamily": "Policy", "immutableFields": [], "cvss2": {}, "cvss3": {}, "_state": {"dependencies": 1645401781}}

{}