WinVerifyTrust

이 저장소에는 README가 없습니다...

Fix-WinVerifyTrustSignatureValidationVuln

Fix-WinVerifyTrustSignatureValidationVuln WinVerifyTrust 署名検証の脆弱性、CVE-2013-39001、QID-3783322 を修正します この修正は64ビット版 Windows コンピュータを対象としています このPowerShellコードは、この脆弱性を修正する方法の1つです。別の方法としては、.regファイルを作成して reg import を使用し、新しいレジストリキーをインポートする方法があります。 完全パッケージ版スクリプト:...

cve-2013-3900-remediation-report

修復レポート: CVE-2013-3900 – Windows Server 2019 Azure VM における WinVerifyTrust の脆弱性 概要 Tenable Nessus を使用した認証済み脆弱性評価の過程で、Microsoft Azure でホストされている Windows Server 2019 仮想マシンに CVE-2013-3900 が検出されました。このスキャンでは管理者資格情報を利用し、システムの構成とレジストリ設定を詳細に調査することができました。 この問題は、Windows が WinVerifyTrust...

Remediating-CVE-2013-3900-EnableCertPaddingCheck-

수정 보고서: Windows Server 2019 Azure VM에서의 CVE-2013-3900 CVE-2013-3900 EnableCertPaddingCheck 수정 Tenable/Nessus를 사용한 인증된 취약점 스캔 중 Microsoft Azure에서 호스팅되는 Windows Server 2019 Datacenter 인스턴스에서 CVE-2013-3900을 확인했습니다. 이 스캔은 유효한 관리자 자격 증명을 사용하여 심층 점검을 수행했으며, OS 수준에서 이 취약점의 존재를 확인했습니다. CVE-2013-3900은...

cve-2013-3900-winverifytrust-mitigation

CVE-2013-3900 缓解措施 WinVerifyTrust / EnableCertPaddingCheck 本仓库包含一个 PowerShell 修复与验证脚本，用于解决 Tenable/Nessus 扫描发现的问题： 插件 ID： 166555 名称： WinVerifyTrust 签名验证 CVE-2013-3900 缓解措施 EnableCertPaddingCheck 该脚本通过设置以下注册表值来强制启用 WinVerifyTrust 证书填充检查： EnableCertPaddingCheck DWORD = 1 在 64 位系统上，扫描器要求该值同时在本机注册表路径...

-WinVerifyTrust-Signature-Validation-CVE-2013-3900-Mitigation

CVE-2013-3900은 Microsoft의 WinVerifyTrust 함수가 Windows Authenticode 서명 확인을 처리하는 방식의 원격 코드 실행 취약점입니다. 이 결함으로 인해 공격자는 서명된 실행 파일의 서명을 무효화하지 않고 파일의 확인되지 않은 부분 파일의 악성 코드를 추가하여 수정할 수 있습니다. 이 취약점에 대한 완화는 특정 레지스트리 설정이 필요한 옵트인 기능입니다. 활성화되면 Windows는 Authenticode 서명을 더 엄격하게 확인하여 서명된 파일에 불필요한 데이터가 없는지 확인합니다...

vulnerability-remediation-cve-2013-3900

🛡️ CVE-2013-3900 修复：WinVerifyTrust 签名验证 📝 项目概述 本项目演示了一个真实的漏洞管理工作流程 。通过使用Azure VM，我追踪了一个高严重性的签名验证漏洞，通过PowerShell手动确认，并部署了基于注册表的修复措施，以加固系统防止未经授权的代码执行。 问题 Windows中的WinVerifyTrust 函数存在一个隐蔽漏洞（CVE-2013-3900）。攻击者可以将恶意代码“搭便车”到已签名的文件上而不会破坏数字签名。这意味着即使文件携带恶意代码，它也可能看起来是“可信的”，从而绕过安全检查。 🚨 发现 我首先在Azure...

Proactively Managing High-Risk Vulnerabilities with TruRisk Mitigate™

In late 2024, organizations faced over 65 million detections from three critical vulnerabilities—CVE-2013-2900, CVE-2024-38122, and CVE-2024-30078—underscoring the urgent need for proactive vulnerability management. Adding to these challenges, the Qualys Threat Research Unit TRU uncovered five...

The vulnerability of the WinVerifyTrust function in the Windows operating system, allowing a hacker to execute arbitrary code

The vulnerability of the WinVerifyTrust function in the Windows operating system is related to improper validation of PE files during the verification of Authenticode signatures. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created signed PE...

WinVerifyTrust Signature Validation Vulnerability

Why is Microsoft republishing a CVE from 2013? We are republishing CVE-2013-3900 in the Security Update Guide to update the Security Updates table and to inform customers that the EnableCertPaddingCheck is available in all currently supported versions of Windows 10 and Windows 11. While the forma...

Microsoft WinVerifyTrust function Remote Code Execution

A remote code execution vulnerability exists in the way that the WinVerifyTrust function handles Windows Authenticode signature verification for PE files...

Update for SIP to enable WinVerifyTrust function in Windows Server 2008 R2 SP1 to work with a later version of Windows

Update for SIP to enable WinVerifyTrust function in Windows Server 2008 R2 SP1 to work with a later version of Windows About this update Subject Interface Packages SIPs are required in order to read the digital signatures on specific file types. After you install this update, SIPs enable the...

VulnCheck KEV: CVE-2013-3900

A remote code execution vulnerability exists in the way that the WinVerifyTrust function handles Windows Authenticode signature verification for PE files...

Microsoft Windows WinVerifyTrust PE Validation Security Bypass (MS13-098; CVE-2013-3900)

A remote code execution vulnerability has been reported in Microsoft Windows. The vulnerability is due to an error in the way the WinVerifyTrust function handles Windows Authenticode signature verification for portable executable PE files. A remote attacker could trigger this flaw by sending a...

CVE-2013-3900

Why is Microsoft republishing a CVE from 2013? We are republishing CVE-2013-3900 in the Security Update Guide to update the Security Updates table and to inform customers that the EnableCertPaddingCheck is available in all currently supported versions of Windows 10 and Windows 11. While the forma...

Input validation

The WinVerifyTrust function in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not properly validate PE file digests during...

CVE-2013-3900 WinVerifyTrust Signature Validation Vulnerability

...

CVE-2013-3900

CVE-2013-3900 describes a remote code execution in the WinVerifyTrust Authenticode verification for PE files. An attacker could modify a signed executable to execute code without invalidating the signature, potentially gaining full control of the system. Microsoft republished this CVE in the Secu...

MS13-098: Vulnerability in Windows Could Allow Remote Code Execution (2893294)

The remote host contains a version of Microsoft Windows that is affected by a remote code execution vulnerability. The vulnerability exists in the method in which the WinVerifyTrust function deals with Windows Authenticode signature verification for portable executable files. An attacker could...

Microsoft WinVerifyTrust Signature Validation Vulnerability (2893294)

This host is missing an critical security update according to Microsoft Bulletin MS13-098. OpenVAS Vulnerability Test $Id: secpodms13-098.nasl 6104 2017-05-11 09:03:48Z teissa $ Microsoft WinVerifyTrust Signature Validation Vulnerability 2893294 Authors: Shashi Kiran N Copyright: Copyright C 2013...