Title

The Windows 8 Video app must be removed from the system. (Cat II impact)

Discussion

Some Windows 8 default apps provide links to external services and must be removed from the system.

Check Content

Verify the Video app has been removed from the system. Open a command prompt as an administrator. Enter "dism /online /Get-ProvisionedAppxPackages". If "DisplayName : Microsoft.ZuneVideo" is listed this, is a finding.

Fix Text

Remove the Video app from the system. Open a command prompt as an administrator. Enter "dism /online /Get-ProvisionedAppxPackages". Make note of the PackageName (e.g., Microsoft.ZuneVideo_1.0.927.0_x64__8wekyb3d8bbwe) Enter the following to remove the app package from the system: "dism /online /Remove-ProvisionedAppxPackage /PackageName:packagename" substituting "packagename" noted from the previous step. Uninstall the application from any user profiles provisioned prior to this.

Additional Identifiers

Rule ID: SV-48389r2_rule

Vulnerability ID: V-36740

Group Title: WN08-GE-000035

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.