OpenType Font Driver Vulnerability
Determine if Adobe Type Manager Font Driver is disabled (https://technet.microsoft.com/en-us/library/security/ms15-078):
Query
select * from registry where path like 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\%' AND name = 'DisableATMFD' AND data != '1';
Additional Query Info
- Version: 2.2.1
- Interval: 3600
JSON
{
"queries": {
"OpenType Font Driver Vulnerability": {
"query": "select * from registry where path like 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\%' AND name = 'DisableATMFD' AND data != '1';",
"interval": "3600",
"platform": "",
"version": "2.2.1",
"description": "Determine if Adobe Type Manager Font Driver is disabled (https://technet.microsoft.com/en-us/library/security/ms15-078)",
"value": ""
}
}
}