Oval Definition:	oval:org.cisecurity:def:1629
Revision Date: 2017-01-20 Version: 15 Title: Scripting Engine Memory Corruption Vulnerability - CVE-2016-7202 (MS16-144) Description: The scripting engines in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," as demonstrated by the Chakra JavaScript engine, a different vulnerability than CVE-2016-7200, CVE-2016-7201, CVE-2016-7203, CVE-2016-7208, CVE-2016-7240, CVE-2016-7242, and CVE-2016-7243. Family: windows Class: vulnerability Status: ACCEPTED Reference(s): CVE-2016-7202 MS16-144 Platform(s): Microsoft Windows 10 Microsoft Windows 7 Microsoft Windows 8.1 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2 Microsoft Windows Server 2016 Microsoft Windows Vista Product(s): Microsoft Internet Explorer 10 Microsoft Internet Explorer 11 Microsoft Internet Explorer 9 Definition Synopsis IE9 + Vista/2008 + file version Microsoft Internet Explorer 9 is installed AND Vista/2008 Microsoft Windows Vista (32-bit) Service Pack 2 is installed OR Microsoft Windows Vista x64 Edition Service Pack 2 is installed OR Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed OR Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed OR Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed AND file version Check if the version of Mshtml.dll is less than 9.0.8112.16845 OR LDR Check if the version of Mshtml.dll is less than 9.0.8112.20962 AND Check if the version of mshtml.dll is greater than or equal to 9.0.8112.20000 OR IE10 + 2012 + file version Microsoft Internet Explorer 10 is installed AND Microsoft Windows Server 2012 is installed AND Check if the version of Mshtml.dll is less than 10.0.9200.22028 OR IE11 + vulnerable OS + file version Microsoft Internet Explorer 11 is installed AND vulnerable windows OS + vulnerable file version Win7/2008 R2/2012/Win8.1/2012 R2 + file version Win7/2008 R2/2012/Win8.1/2012 R2 Microsoft Windows 7 (32-bit) Service Pack 1 is installed OR Microsoft Windows 7 x64 Service Pack 1 is installed OR Microsoft Windows Server 2008 R2 x64 Service Pack 1 is installed OR Microsoft Windows Server 2008 R2 Itanium-Based Edition Service Pack 1 is installed OR Microsoft Windows Server 2012 is installed OR Microsoft Windows 8.1 (x86) is installed OR Microsoft Windows 8.1 (x64) is installed OR Microsoft Windows Server 2012 R2 is installed AND file version Check if the version of Mshtml.dll is less than 11.0.9600.18538 OR Win10 + file version Win10 Microsoft Windows 10 (x86) is installed OR Microsoft Windows 10 (x64) is installed AND file version Check if the version of Mshtml.dll is less than 11.0.10240.17202 OR 1511 + file version Win10 Microsoft Windows 10 Version 1511 (32-bit) is installed OR Microsoft Windows 10 Version 1511 (64-bit) is installed AND file version Check if the version of Mshtml.dll is less than 11.0.10586.713 OR 1607/2016 + file version 1607/2016 Microsoft Windows 10 Version 1607 (32-bit) is installed OR Microsoft Windows 10 Version 1607 (64-bit) is installed OR Microsoft Windows Server 2016 is installed AND file version Check if the version of Mshtml.dll is less than 11.0.14393.576
BACK