Adobe Flash Player 원격 코드 실행(RCE) 취약점 (CVE-2016-4117) 긴급 보안 권고

# Windows 내장 Flash Player 기능 비활성화 및 제거
Write-Host 'Removing Adobe Flash Player from Windows System...' -ForegroundColor Cyan

# Windows Update를 통한 Flash 제거 패치(KB4577586) 적용 상태 확인 및 제거 스크립트 예시
$FlashPath = '${env:SystemRoot}\System32\Macromed\Flash'
if (Test-Path $FlashPath) {
    Takeown /F $FlashPath /R /A
    Icacls $FlashPath /grant Administrators:F /T
    Remove-Item -Path $FlashPath -Recurse -Force
    Write-Host 'Flash Player directory removed successfully.' -ForegroundColor Green
} else {
    Write-Host 'Flash Player directory not found. Already clean.' -ForegroundColor Yellow
}

Windows Registry Editor Version 5.00

; Internet Explorer에서 Flash ActiveX 실행 차단 (Kill-Bit 설정)
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
"Compatibility Flags"=dword:00000400

; Microsoft Office에서 Flash 컨트롤 실행 차단
[HKEY_CURRENT_USER\Software\Microsoft\Office\Common\Security\AllowActiveXFiltering]
"ActiveXFiltering"=dword:00000001

# Linux 시스템 내 Flash Player 플러그인 파일 탐색
echo 'Scanning for vulnerable Adobe Flash Player binaries...'
find /usr/lib /usr/lib64 /opt -name '*libflashplayer.so*' 2>/dev/null | while read -r flash_bin; do
    echo '[!] Found Flash Binary: '$flash_bin''
    strings '$flash_bin' | grep -i 'LNX ' | head -n 1
done