마이크로소프트 실버라이트 이중 역참조 원격 코드 실행 취약점 (CVE-2013-0074)

# 실버라이트 설치 여부 및 버전 확인
Get-ItemProperty HKLM:\Software\Microsoft\Windows\CurrentVersion\Uninstall\* | Where-Object { $_.DisplayName -like '*Silverlight*' } | Select-Object DisplayName, DisplayVersion, UninstallString

# 실버라이트 자동 제거 실행 (Silent Uninstall)
$silverlight = Get-WmiObject -Class Win32_Product | Where-Object { $_.Name -like '*Silverlight*' }
if ($silverlight) {
    Write-Host 'Uninstalling Microsoft Silverlight...'
    $silverlight.Uninstall()
    Write-Host 'Uninstall Complete.'
} else {
    Write-Host 'Silverlight is not detected on this system.'
}

:: Silverlight ActiveX CLSID {DFEAF541-F3E1-4c24-ACAC-99C071D7730A}에 대한 Kill-Bit 설정
reg add "HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{DFEAF541-F3E1-4c24-ACAC-99C071D7730A}" /v "Compatibility Flags" /t REG_DWORD /d 0x00000400 /f
reg add "HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{DFEAF541-F3E1-4c24-ACAC-99C071D7730A}" /v "Compatibility Flags" /t REG_DWORD /d 0x00000400 /f

# Silverlight 핵심 DLL 파일 버전 점검
$paths = @("${env:ProgramFiles}\Microsoft Silverlight", "${env:ProgramFiles(x86)}\Microsoft Silverlight")
foreach ($path in $paths) {
    $dllPath = Join-Path $path 'agcore.dll'
    if (Test-Path $dllPath) {
        $versionInfo = (Get-Item $dllPath).VersionInfo
        Write-Host "Found: $dllPath [Version: $($versionInfo.FileVersion)]"
        if ([version]$versionInfo.FileVersion -lt [version]'5.1.20125.0') {
            Write-Warning 'VULNERABLE: This version is susceptible to CVE-2013-0074.'
        } else {
            Write-Host 'Secure: Version is patched.' -ForegroundColor Green
        }
    }
}