Oval Definition:	oval:org.cisecurity:def:1470
Revision Date: 2016-12-23 Version: 17 Title: Scripting Engine Memory Corruption Vulnerability - CVE-2016-7208 (MS16-129) Description: The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-7200, CVE-2016-7201, CVE-2016-7202, CVE-2016-7203, CVE-2016-7240, CVE-2016-7242, and CVE-2016-7243. Family: windows Class: vulnerability Status: ACCEPTED Reference(s): CVE-2016-7208 Platform(s): Microsoft Windows 10 Microsoft Windows Server 2016 Product(s): Microsoft Edge Definition Synopsis Microsoft Edge is installed AND Windows OS is installed + file version Microsoft Windows 10 is installed + file version Microsoft Windows 10 is installed Microsoft Windows 10 (32-bit) is installed OR Microsoft Windows 10 (64-bit) is installed AND Check if chakra.dll version is less than 11.0.10240.17184 OR Microsoft Windows 10 Version 1511 is installed + file version Microsoft Windows 10 Version 1511 is installed Microsoft Windows 10 Version 1511 (32-bit) is installed OR Microsoft Windows 10 Version 1511 (64-bit) is installed AND Check if chakra.dll version is less than 11.0.10586.672 OR Microsoft Windows 10 Version 1607/Windows Server 2016 is installed + file version Microsoft Windows 10 Version 1607/Windows Server 2016 is installed Microsoft Windows 10 Version 1607 (32-bit) is installed OR Microsoft Windows 10 Version 1607 (64-bit) is installed OR Microsoft Windows Server 2016 is installed AND Check if chakra.dll version is less than 11.0.14393.447
BACK