Oval Definition:	oval:org.cisecurity:def:1498
Revision Date: 2017-01-06 Version: 17 Title: VHD Driver Elevation of Privilege Vulnerability – CVE-2016-7224 (MS16-138) Description: Virtual Hard Disk Driver in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 does not properly restrict access to files, which allows local users to gain privileges via a crafted application, aka "VHD Driver Elevation of Privilege Vulnerability." Family: windows Class: vulnerability Status: ACCEPTED Reference(s): CVE-2016-7224 Platform(s): Microsoft Windows 10 Microsoft Windows 8.1 Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2 Microsoft Windows Server 2016 Product(s): Definition Synopsis Microsoft Windows 8.1/Server 2012 R2 is installed + file version Microsoft Windows 8.1/Server 2012 R2 is installed Microsoft Windows 8.1 (x86) is installed OR Microsoft Windows 8.1 (x64) is installed OR Microsoft Windows Server 2012 R2 is installed AND Check if Vhdmp.sys version is less than 6.3.9600.18512 OR Microsoft Windows Server 2012 is installed + file version Microsoft Windows Server 2012 (64-bit) is installed AND Check if Vhdmp.sys version is less than 6.2.9200.22006 OR Microsoft Windows 10 is installed + file version Microsoft Windows 10 is installed Microsoft Windows 10 (32-bit) is installed OR Microsoft Windows 10 (64-bit) is installed AND Check if Vhdmp.sys version is less than 10.0.10240.17184 OR Microsoft Windows 10 Version 1511 is installed + file version Microsoft Windows 10 Version 1511 is installed Microsoft Windows 10 Version 1511 (32-bit) is installed OR Microsoft Windows 10 Version 1511 (64-bit) is installed AND Check if Vhdmp.sys version is less than 10.0.10586.672 OR Microsoft Windows 10 Version 1607/Windows Server 2016 is installed + file version Microsoft Windows 10 Version 1607/Windows Server 2016 is installed Microsoft Windows 10 Version 1607 (32-bit) is installed OR Microsoft Windows 10 Version 1607 (64-bit) is installed OR Microsoft Windows Server 2016 is installed AND Check if Vhdmp.sys version is less than 10.0.14393.447
BACK