The Windows 8 default Sound Recorder app must be updated with the latest security patches or removed from the system (Windows 8.1).

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-43313	WN08-GE-000055	SV-56066r4_rule	ECSC-1	Medium

Description
Applications must be updated as flaws are identified and remediations are made available. The default method for updating Windows 8 apps is through the Windows Store, which is required to be blocked. An alternate method must be used to maintain the default Windows 8 apps with the latest security updates if they are allowed on a system.

STIG	Date
Windows 8 / 8.1 Security Technical Implementation Guide	2015-06-16

Details

Check Text ( C-57847r2_chk )
This requirement is NA for the initial release of Windows 8, which does not include the default Sound Recorder app. It is applicable to Windows 8.1. Verify the default Sound Recorder app has been patched with the latest security related updates or removed from the system. Open a command prompt as an administrator. Enter "dism /online /Get-ProvisionedAppxPackages". If "DisplayName : Microsoft.WindowsSoundRecorder" is listed and has not been updated with the latest security related updates, this is a finding. The "PackageName" field will identify the version installed. Microsoft Article 2971128 summarizes security related updates to the default apps, including versions and release dates. http://support.microsoft.com/kb/2971128

Check Text ( C-57847r2_chk )

This requirement is NA for the initial release of Windows 8, which does not include the default Sound Recorder app.
It is applicable to Windows 8.1.

Verify the default Sound Recorder app has been patched with the latest security related updates or removed from the system.

Open a command prompt as an administrator.
Enter "dism /online /Get-ProvisionedAppxPackages".
If "DisplayName : Microsoft.WindowsSoundRecorder" is listed and has not been updated with the latest security related updates, this is a finding.

The "PackageName" field will identify the version installed.

Microsoft Article 2971128 summarizes security related updates to the default apps, including versions and release dates. http://support.microsoft.com/kb/2971128

Fix Text (F-62171r3_fix)
This requirement is NA for the initial release of Windows 8, which does not include the default Sound Recorder app. It is applicable to Windows 8.1. Maintain the Sound Recorder app with the latest security related updates or remove it from the system. Microsoft provides security related updates to default provisioned apps through the Microsoft Update Catalog for WSUS or as MSI files, as an alternate method to the Windows Store for updating. Microsoft Article 2971128 summarizes security related updates to the default apps, including versions and release dates. http://support.microsoft.com/kb/2971128 To remove the Sound Recorder app from the system: Open a command prompt as an administrator. Enter "dism /online /Get-ProvisionedAppxPackages". Make note of the PackageName (e.g., Microsoft.WindowsSoundRecorder_2013.822.1835.2133_neutral_~_8wekyb3d8bbwe). Enter the following to remove the app package from the system: "dism /online /Remove-ProvisionedAppxPackage /PackageName:packagename", substituting "packagename" noted from the previous step. Uninstall the application from any user profiles provisioned prior to this.

Fix Text (F-62171r3_fix)

This requirement is NA for the initial release of Windows 8, which does not include the default Sound Recorder app.
It is applicable to Windows 8.1.

Maintain the Sound Recorder app with the latest security related updates or remove it from the system. Microsoft provides security related updates to default provisioned apps through the Microsoft Update Catalog for WSUS or as MSI files, as an alternate method to the Windows Store for updating.

Microsoft Article 2971128 summarizes security related updates to the default apps, including versions and release dates. http://support.microsoft.com/kb/2971128

To remove the Sound Recorder app from the system:

Open a command prompt as an administrator.
Enter "dism /online /Get-ProvisionedAppxPackages".
Make note of the PackageName (e.g., Microsoft.WindowsSoundRecorder_2013.822.1835.2133_neutral_~_8wekyb3d8bbwe).
Enter the following to remove the app package from the system: "dism /online /Remove-ProvisionedAppxPackage /PackageName:packagename", substituting "packagename" noted from the previous step.
Uninstall the application from any user profiles provisioned prior to this.