Oval Definition:
oval:org.cisecurity:def:1378
Revision Date
:
2016-12-09
Version
:
20
Title
:
Scripting Engine Remote Code Execution Vulnerability - CVE-2016-7189 (MS16-119)
Description
:
The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code via a crafted web site, aka "Scripting Engine Remote Code Execution Vulnerability."
Family
:
windows
Class
:
vulnerability
Status
:
ACCEPTED
Reference(s)
:
CVE-2016-7189
Platform(s)
:
Microsoft Windows 10
Product(s)
:
Microsoft Edge
Definition Synopsis
Microsoft Edge is installed
AND
Windows OS is installed + file version
Microsoft Windows 10 is installed + file version
Microsoft Windows 10 is installed
Microsoft Windows 10 (32-bit) is installed
OR
Microsoft Windows 10 (64-bit) is installed
AND
Check if chakra.dll version is less than 11.0.10240.17146
OR
Microsoft Windows 10 Version 1511 is installed + file version
Microsoft Windows 10 Version 1511 is installed
Microsoft Windows 10 Version 1511 (32-bit) is installed
OR
Microsoft Windows 10 Version 1511 (64-bit) is installed
AND
Check if chakra.dll version is less than 11.0.10586.633
OR
Microsoft Windows 10 Version 1607 is installed + file version
Microsoft Windows 10 Version 1607 is installed
Microsoft Windows 10 Version 1607 (32-bit) is installed
OR
Microsoft Windows 10 Version 1607 (64-bit) is installed
AND
Check if chakra.dll version is less than 11.0.14393.321
BACK