Microsoft Windows Adobe Type Manager 라이브러리 원격 코드 실행 취약점 (CVE-2020-0938)

# Windows Update 에이전트를 통한 패치 검색 및 설치
Install-Module PSWindowsUpdate -Force -Verbose
Get-WindowsUpdate -AcceptAll -Install -AutoReboot

# 1. ATMFD (Adobe Type Manager Font Driver) 비활성화 레지스트리 등록
reg add 'HKLM\Software\Microsoft\Windows NT\CurrentVersion\Windows' /v DisableATMFD /t REG_DWORD /d 1 /f

# 2. WebClient 서비스 중지 및 시작 유형 '사용 안 함' 설정 (원격 공격 벡터 차단)
Stop-Service -Name WebClient -Force
Set-Service -Name WebClient -StartupType Disabled

# ATMFD 비활성화 여부 확인 (결과값이 1이어야 안전함)
$atmfdStatus = Get-ItemProperty -Path 'HKLM:\Software\Microsoft\Windows NT\CurrentVersion\Windows' -Name DisableATMFD -ErrorAction SilentlyContinue
if ($atmfdStatus -and $atmfdStatus.DisableATMFD -eq 1) {
    Write-Host 'ATMFD Mitigation is ENABLED (Secure)' -ForegroundColor Green
} else {
    Write-Host 'WARNING: ATMFD Mitigation is NOT enabled!' -ForegroundColor Red
}

# WebClient 서비스 상태 확인
$webClient = Get-Service -Name WebClient -ErrorAction SilentlyContinue
if ($webClient.Status -eq 'Stopped' -or $webClient -eq $null) {
    Write-Host 'WebClient Service is STOPPED (Secure)' -ForegroundColor Green
} else {
    Write-Host 'WARNING: WebClient Service is RUNNING!' -ForegroundColor Red
}