Version info StringFileInfo version string has suffix

ID PE067 Level INFO Category Configuration

Description

Version information StringFileInfo block version string (either FileVersion or ProductVersion) has the standard format MAJOR.MINOR.BUILD.REVISION, MAJOR.MINOR.BUILD or MAJOR.MINOR, where MAJOR, MINOR, BUILD and REVISION are 16-bit unsigned integers. However, the version string also has a non-standard suffix in the end.

Mitigation

  • Make sure you make FileVersion and ProductVersion strings the standard format.

Arguments

This rule has the following output arguments:

  • string_lcid - Affected VERSIONINFO StringFileInfo block language integral code
  • string_lcid_tag - Affected VERSIONINFO StringFileInfo block language tag (e.g. en, nl-NL or en-US)
  • string_lcid_location - Affected VERSIONINFO StringFileInfo block language location (e.g. Spain, neutral or process_default)
  • string_cpid - Affected VERSIONINFO StringFileInfo block code page integral code
  • string_cpid_name - Affected VERSIONINFO StringFileInfo block code page name (e.g. windows-1251 or utf-8)
  • version_string - Affected version string value