CCE-33294-0Platform: win8.1 | Date: (C)2015-10-14 (M)2022-10-10 |
Disable binding directly to IPropertySetStorage without intermediate layers.
Changes the behavior of IShellFolder::BindToObject for IID_IPropertySetStorage to not bind directly to the IPropertySetStorage implementation, and to include the intermediate layers provided by the Property System. This behavior is consistent with Windows Vista's behavior in this scenario.
This disables access to user-defined properties, and properties stored in NTFS secondary streams.
Parameter:
Technical Mechanism:
(1) GPO: User Configuration\Administrative Templates\Windows Components\File Explorer!Disable binding directly to IPropertySetStorage without intermediate layers.
(2) REG: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!DisableBindDirectlyToPropertySetStorage
CCSS Severity: | CCSS Metrics: |
CCSS Score : | Attack Vector: |
Exploit Score: | Attack Complexity: |
Impact Score: | Privileges Required: |
Severity: | User Interaction: |
Vector: | Scope: |
| Confidentiality: |
| Integrity: |
| Availability: |
| |
References: Resource Id | Reference |
---|
SCAP Repo OVAL Definition | oval:org.secpod.oval:def:28794 |
SCAP Repo OVAL Definition | oval:org.secpod.oval:def:28794 |
SCAP Repo OVAL Definition | oval:org.secpod.oval:def:28794 |
SCAP Repo OVAL Definition | oval:org.secpod.oval:def:28794 |