Oval Definition:oval:org.cisecurity:def:1429
Revision Date:2016-12-23Version:19
Title:Scripting Engine Memory Corruption Vulnerability - CVE-2016-7203 (MS16-129)
Description:The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-7200, CVE-2016-7201, CVE-2016-7202, CVE-2016-7208, CVE-2016-7240, CVE-2016-7242, and CVE-2016-7243.
Family:windowsClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2016-7203
Platform(s):Microsoft Windows 10
Microsoft Windows Server 2016
Product(s):Microsoft Edge
Definition Synopsis
  • Microsoft Edge is installed
  • AND Windows OS is installed + file version
  • Microsoft Windows 10 is installed + file version
  • Microsoft Windows 10 is installed
  • Microsoft Windows 10 (32-bit) is installed
  • OR Microsoft Windows 10 (64-bit) is installed
  • AND Check if chakra.dll version is less than 11.0.10240.17184
  • OR Microsoft Windows 10 Version 1511 is installed + file version
  • Microsoft Windows 10 Version 1511 is installed
  • Microsoft Windows 10 Version 1511 (32-bit) is installed
  • OR Microsoft Windows 10 Version 1511 (64-bit) is installed
  • AND Check if chakra.dll version is less than 11.0.10586.672
  • OR Microsoft Windows 10 Version 1607 is installed + file version
  • Microsoft Windows 10 Version 1607 is installed
  • Microsoft Windows 10 Version 1607 (32-bit) is installed
  • OR Microsoft Windows 10 Version 1607 (64-bit) is installed
  • OR Microsoft Windows Server 2016 is installed
  • AND Check if chakra.dll version is less than 11.0.14393.447
  • BACK