Microsoft Internet Explorer 권한 상승 및 원격 코드 실행 취약점 (CVE-2014-4123, MS14-056)

# Windows Update 모듈 설치 및 MS14-056 관련 패치 확인 (PowerShell)
Install-Module PSWindowsUpdate -Force -Verbose
Get-WindowsUpdate -KBArticleID KB2987107 -Install -AcceptAll -AutoReboot

# Internet Explorer 향상된 보호 모드(EPM) 강제 활성화 레지스트리 설정
Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Isolation"="PMEM"
"EnhancedSecurityFlow"=dword:00000001

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3]
"2500"=dword:00000000

# Internet Explorer 설치 버전 및 관련 DLL 버전 확인 스크립트
$ieVersion = (Get-ItemProperty -Path 'HKLM:\SOFTWARE\Microsoft\Internet Explorer').Version
$mshtmlPath = "$env:SystemRoot\System32\mshtml.dll"
$mshtmlVersion = (Get-Item $mshtmlPath).VersionInfo.FileVersion

Write-Host "Installed IE Version: $ieVersion"
Write-Host "MSHTML.dll Version: $mshtmlVersion"

# MS14-056 패치 적용 여부 확인 (KB2987107)
$patchInstalled = Get-HotFix -Id KB2987107 -ErrorAction SilentlyContinue
if ($patchInstalled) {
    Write-Host 'SUCCESS: MS14-056 (KB2987107) patch is applied.' -ForegroundColor Green
} else {
    Write-Host 'WARNING: MS14-056 patch is MISSING. System is vulnerable.' -ForegroundColor Red
}