A cross-site scripting

#!/usr/bin/env python3
# check_sketchup_cve_2026_9264.py
# Detect likely exposure to CVE-2026-9264 on Windows/macOS SketchUp endpoints.
# Exit codes: 0=PATCHED, 1=VULNERABLE, 2=UNKNOWN

import os
import sys
import platform
import plistlib


def parse_version(v):
    parts = []
    for p in str(v).strip().split('.'):
        try:
            parts.append(int(p))
        except ValueError:
            num = ''.join(ch for ch in p if ch.isdigit())
            parts.append(int(num) if num else 0)
    return tuple(parts)


def cmp_ver(a, b):
    la = list(a)
    lb = list(b)
    n = max(len(la), len(lb))
    la.extend([0] * (n - len(la)))
    lb.extend([0] * (n - len(lb)))
    return (la > lb) - (la < lb)


def check_windows():
    try:
        import winreg
    except Exception:
        return None, 'winreg unavailable'

    uninstall_roots = [
        (winreg.HKEY_LOCAL_MACHINE, r'SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall'),
        (winreg.HKEY_LOCAL_MACHINE, r'SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall'),
        (winreg.HKEY_CURRENT_USER, r'SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall'),
    ]

    findings = []
    for root, path in uninstall_roots:
        try:
            with winreg.OpenKey(root, path) as k:
                for i in range(winreg.QueryInfoKey(k)[0]):
                    try:
                        subname = winreg.EnumKey(k, i)
                        with winreg.OpenKey(k, subname) as sk:
                            display_name = winreg.QueryValueEx(sk, 'DisplayName')[0] if True else ''
                            try:
                                display_version = winreg.QueryValueEx(sk, 'DisplayVersion')[0]
                            except FileNotFoundError:
                                display_version = ''
                            if display_name and 'SketchUp' in display_name and '2026' in display_name:
                                findings.append((display_name, display_version))
                    except FileNotFoundError:
                        continue
                    except OSError:
                        continue
        except FileNotFoundError:
            continue
        except OSError:
            continue

    if not findings:
        return None, 'SketchUp 2026 not found in uninstall registry'

    # Windows fixed version from vendor release notes: 26.1.256
    fixed = parse_version('26.1.256')

    for name, ver in findings:
        pv = parse_version(ver)
        if not pv:
            continue
        if cmp_ver(pv, parse_version('26.0.0')) >= 0 and cmp_ver(pv, fixed) < 0:
            return True, f'{name} {ver} < 26.1.256'
        if cmp_ver(pv, fixed) >= 0:
            return False, f'{name} {ver} >= 26.1.256'

    return None, 'SketchUp 2026 found but version could not be classified'


def check_macos():
    app_path = '/Applications/SketchUp 2026/SketchUp.app/Contents/Info.plist'
    if not os.path.exists(app_path):
        return None, 'SketchUp 2026 app bundle not found'
    try:
        with open(app_path, 'rb') as f:
            info = plistlib.load(f)
        ver = info.get('CFBundleShortVersionString') or info.get('CFBundleVersion')
        if not ver:
            return None, 'Version not found in Info.plist'
        pv = parse_version(ver)
        fixed = parse_version('26.1.257')
        if cmp_ver(pv, parse_version('26.0.0')) >= 0 and cmp_ver(pv, fixed) < 0:
            return True, f'SketchUp 2026 macOS {ver} < 26.1.257'
        if cmp_ver(pv, fixed) >= 0:
            return False, f'SketchUp 2026 macOS {ver} >= 26.1.257'
        return None, f'Unclassified version: {ver}'
    except Exception as e:
        return None, f'Failed to read Info.plist: {e}'


def main():
    system = platform.system().lower()
    if system == 'windows':
        vulnerable, detail = check_windows()
    elif system == 'darwin':
        vulnerable, detail = check_macos()
    else:
        print('UNKNOWN - Unsupported OS for this check')
        sys.exit(2)

    if vulnerable is True:
        print(f'VULNERABLE - {detail}')
        sys.exit(1)
    elif vulnerable is False:
        print(f'PATCHED - {detail}')
        sys.exit(0)
    else:
        print(f'UNKNOWN - {detail}')
        sys.exit(2)


if __name__ == '__main__':
    main()