CVE-2013-3900 WinVerifyTrust Signature Validation Vulnerability

Question

CVE-2013-3900 WinVerifyTrust Signature Validation Vulnerability

Abdul Aremu 5

Hi All

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2013-3900

To remediate the vulnerability CVE-2013-3900 is to add the below registry values.

[HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\Wintrust\Config] "EnableCertPaddingCheck"="1"

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Cryptography\Wintrust\Config] "EnableCertPaddingCheck"="1"

On my Windows servers 10 i dont see the folders Wintrust\Config in registries. And when i do as said in the link, which is to put the command in a .reg file and double click it. I get the error as seen in the image attached

WinVerify

Anonymous

2024-09-02T08:03:46.88+00:00

Hello,

I have not heard from you for a few days. Please let me know if there is anything that I can help here.

Best Regards,

Hania Lian

3 answers

Your answer

Anonymous

2024-09-02T08:03:46.88+00:00

Hello,

I have not heard from you for a few days. Please let me know if there is anything that I can help here.

Best Regards,

Hania Lian

Answer 1

Albion Cela 0

Hi , i already checked and the value under the specific directory is "1" but on scanning my machine is still showing as vulnerable.

Thank you

0 comments

Answer 2

Guillaume Genest 0

Is CVE-2013-3900 really affecting windows 10/ windows 11? Do we really need to create that registry key to fix a 2013 cve?

Please advise.

0 comments

Answer 3

Anonymous

Hello.

Open the .reg file using Notepad. To do this: Right-click on the .reg file and choose ‘Edit’.

Remove the blank line at the top of the file.

Cannot import file: The specified file is not a registry script (thewindowsclub.com)

Best Regards,

Hania Lian

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.

Manuel Ricardo Rojas Salazar 0 Reputation points

2025-04-07T16:21:14.89+00:00

Ive asked to copilot and give me this code.

# Define the registry paths and values

$regPath1 = "HKLM:\Software\Microsoft\Cryptography\Wintrust\Config"

$regPath2 = "HKLM:\Software\Wow6432Node\Microsoft\Cryptography\Wintrust\Config"

$regName = "EnableCertPaddingCheck"

$regValue = "1"

# Create the registry paths if they do not exist

if (-not (Test-Path $regPath1)) {

New-Item -Path $regPath1 -Force

}

if (-not (Test-Path $regPath2)) {

New-Item -Path $regPath2 -Force

}

# Set the registry values

Set-ItemProperty -Path $regPath1 -Name $regName -Value $regValue -Type String

Set-ItemProperty -Path $regPath2 -Name $regName -Value $regValue -Type String

Write-Output "Registry values set successfully."

Share via

CVE-2013-3900 WinVerifyTrust Signature Validation Vulnerability

3 answers

Your answer