Microsoft Windows 10: Pop-up Blocker (Edge)

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winedgepopupblocker.nasl 10989 2018-08-15 14:57:51Z emoss $ Check value for Configure Pop-up Blocker Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

Microsoft Windows: Turn off Data Execution Prevention for Explorer

Disabling data execution prevention can allow certain legacy plug-in applications to function without terminating Explorer. C Microsoft Corporation 2015. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Microsoft Windows: Plug and Play device redirection (Remote Desktop Services)

This policy setting lets you control the redirection of supported Plug and Play and RemoteFX USB devices, such as Windows Portable Devices, to the remote computer in a Remote Desktop Services session. By default, Remote Desktop Services does not allow redirection of supported Plug and Play and...

Microsoft Windows: Temporary folders per session (Remote Desktop Services)

This policy setting allows you to prevent Remote Desktop Services from creating session-specific temporary folders. You can use this policy setting to disable the creation of separate temporary folders on a remote computer for each session. By default, Remote Desktop Services creates a separate...

Microsoft Windows: Do not allow drive redirection

This policy setting specifies whether to prevent the mapping of client drives in a Remote Desktop Services session drive redirection. By default, an RD Session Host server maps client drives automatically upon connection. Mapped drives appear in the session folder tree in File Explorer or Compute...

Microsoft Windows: Configure Watson events

This policy setting allows you to configure whether or not Watson events are sent. If you enable or do not configure this setting, Watson events will be sent. If you disable this setting, Watson events will not be sent. C Microsoft Corporation 2015. SPDX-FileCopyrightText: 2018 Greenbone AG Some...

Microsoft Windows: Prevent the computer from joining a homegroup

This policy setting specifies whether users can add computers to a homegroup. By default, users can add their computer to a homegroup on a private network. If you enable this policy setting, users cannot add computers to a homegroup. This policy setting does not affect other network sharing...

Microsoft Windows 10: Allow Extensions (Edge)

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winedgeextensions.nasl 11344 2018-09-12 06:57:52Z emoss $ Check value for Allow Extensions Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you...

Microsoft Windows 10: Allow Adobe Flash (Edge)

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winedgeadobeflash.nasl 11344 2018-09-12 06:57:52Z emoss $ Check value for Allow Adobe Flash Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; yo...

Microsoft Windows: Client connection encryption level (Remote Desktop Services)

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winrdhostclientencrlevel.nasl 11363 2018-09-12 13:46:05Z emoss $ Check value for Set client connection encryption level Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This...

Microsoft Windows: COM port redirection (Remote Desktop Services)

This policy setting specifies whether to prevent the redirection of data to client COM ports from the remote computer in a Remote Desktop Services session. You can use this setting to prevent users from redirecting data to COM port peripherals or mapping local COM ports while they are logged on t...

Microsoft Windows: LPT port redirection (Remote Desktop Services)

This policy setting specifies whether to prevent the redirection of data to client LPT ports during a Remote Desktop Services session. You can use this setting to prevent users from mapping local LPT ports and redirecting data from the remote computer to local LPT port peripherals. By default,...

Microsoft Windows: Allow indexing of encrypted files

This policy setting allows encrypted items to be indexed. If you enable this policy setting, indexing will attempt to decrypt and index the content access restrictions will still apply. If you disable this policy setting, the search service components including non-Microsoft components are expect...

Microsoft Windows 10: Windows Defender SmartScreen prompts for files (Edge)

This policy setting lets you decide whether employees can override the Windows Defender SmartScreen warnings about downloading unverified files. If you enable this setting, employees can SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources,...

CVE-2018-0598

Untrusted search path vulnerability in Self-extracting archive files created by IExpress bundled with Microsoft Windows allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

Design/Logic Flaw

Untrusted search path vulnerability in Self-extracting archive files created by IExpress bundled with Microsoft Windows allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

Microsoft Windows 10: Allow Use of Camera

This test checks the setting for policy OpenVAS Vulnerability Test $Id: wincamerause.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Allow Use of Camera Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you c...

Microsoft Windows: Event Log behavior when log file reaches its max size (App)

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winappretention.nasl 10989 2018-08-15 14:57:51Z emoss $ Check value for Control Event Log behavior when the log file reaches its maximum size Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

Microsoft Windows: Require additional authentication at startup (TPM startup key)

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winaddauthtpmstartupkey.nasl 11363 2018-09-12 13:46:05Z emoss $ Check value for Require additional authentication at startup: Configure TPM startup key Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH...

CVE-2018-0598

The CVE-2018-0598 issue concerns self-extracting archive files created by IExpress bundled with Microsoft Windows. Affected component is the IExpress self-extracting archive mechanism, where an untrusted search path can lead to DLL planting and privilege escalation by loading a Trojan horse DLL f...