Oval Definition:	oval:org.cisecurity:def:1602
Revision Date: 2017-01-13 Version: 18 Title: GDI Information Disclosure Vulnerability - CVE-2016-7257 (MS16-146) Description: The GDI component in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Office for Mac 2011, and Office 2016 for Mac allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "GDI Information Disclosure Vulnerability." Family: windows Class: vulnerability Status: ACCEPTED Reference(s): CVE-2016-7257 Platform(s): Microsoft Windows 7 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Product(s): Definition Synopsis Microsoft Windows Vista/Server 2008 is installed + file version Microsoft Windows Vista/Server 2008 is installed Microsoft Windows Vista (32-bit) is installed OR Microsoft Windows Vista x64 Edition is installed OR Microsoft Windows Server 2008 (32-bit) is installed OR Microsoft Windows Server 2008 (64-bit) is installed OR Microsoft Windows Server 2008 (ia-64) is installed AND Check for file version Check if Gdi32.dll version is less than 6.0.6002.19712 OR Check for Limited Distribution Release (LDR) file version Check if Gdi32.dll version is greater than or equal to 6.0.6002.24000 AND Check if Gdi32.dll version is less than 6.0.6002.24034 OR Microsoft Windows 7/Server 2008 R2 is installed + file version Microsoft Windows 7/Server 2008 R2 is installed Microsoft Windows 7 (32-bit) is installed OR Microsoft Windows 7 x64 Edition is installed OR Microsoft Windows Server 2008 R2 x64 Edition is installed OR Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed AND Check if Gdi32.dll version is less than 6.1.7601.23591
BACK