Microsoft XML Core Services (MSXML) 초기화되지 않은 메모리 참조 취약점 (CVE-2012-1889) 분석 및 대응 가이드

# Windows Update 에이전트를 통해 MS12-043 관련 패치(KB2722162 등) 설치 여부 확인
Get-HotFix -Id KB2722162 -ErrorAction SilentlyContinue

# 패치가 없을 경우 Windows Update 서비스 시작 및 업데이트 강제 확인
Set-Service -Name wuauserv -StartupType Automatic
Start-Service -Name wuauserv
(New-Object -ComObject Microsoft.Update.Session).CreateUpdateSearcher().Search('IsInstalled=0 and Type=\'Software\'').Updates | Where-Object { $_.Title -like '*MSXML*' }

# MSXML 3.0 및 4.0 ActiveX 컨트롤에 대한 Kill Bit 설정 레지스트리 스크립트
$registryPaths = @(
    'HKLM:\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{f5078f35-c551-11d3-89b9-0000f81fe221}',
    'HKLM:\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{f5078f35-c551-11d3-89b9-0000f81fe221}'
)

foreach ($path in $registryPaths) {
    if (-not (Test-Path $path)) {
        New-Item -Path $path -Force | Out-Null
    }
    New-ItemProperty -Path $path -Name 'Compatibility Flags' -Value 0x00000400 -PropertyType DWord -Force | Out-Null
}
Write-Host 'MSXML ActiveX Kill Bit has been successfully applied.' -ForegroundColor Green

# 시스템 디렉터리 내 msxml3.dll 및 msxml4.dll 버전 점검
$dlls = @('C:\Windows\System32\msxml3.dll', 'C:\Windows\System32\msxml4.dll', 'C:\Windows\SysWOW64\msxml3.dll', 'C:\Windows\SysWOW64\msxml4.dll')

foreach ($dll in $dlls) {
    if (Test-Path $dll) {
        $versionInfo = (Get-Item $dll).VersionInfo
        Write-Host "File: $dll" -ForegroundColor Cyan
        Write-Host "Product Version: $($versionInfo.ProductVersion)" -ForegroundColor Yellow
        Write-Host "File Version: $($versionInfo.FileVersion)"`n
    } else {
        Write-Host "File not found: $dll" -ForegroundColor Gray
    }
}