CVE-2013-3900 WinVerifyTrust Signature Validation Vulnerability

Question

Hi All

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2013-3900

To remediate the vulnerability CVE-2013-3900 is to add the below registry values.

[HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\Wintrust\Config] "EnableCertPaddingCheck"="1"

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Cryptography\Wintrust\Config] "EnableCertPaddingCheck"="1"

On my Windows servers 10 i dont see the folders Wintrust\Config in registries. And when i do as said in the link, which is to put the command in a .reg file and double click it. I get the error as seen in the image attached

Answer 1

Hello.

Open the .reg file using Notepad. To do this: Right-click on the .reg file and choose ‘Edit’.

Remove the blank line at the top of the file.

Cannot import file: The specified file is not a registry script (thewindowsclub.com)

Best Regards,

Hania Lian

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.

Answer 2

Is CVE-2013-3900 really affecting windows 10/ windows 11? Do we really need to create that registry key to fix a 2013 cve?

Please advise.