Oval Definition:oval:org.cisecurity:def:1651
Revision Date:2017-01-27Version:12
Title:Windows Uniscribe Remote Code Execution Vulnerability - CVE-2016-7274 (MS16-147)
Description:Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows remote attackers to execute arbitrary code via a crafted web site, aka "Windows Uniscribe Remote Code Execution Vulnerability."
Family:windowsClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2016-7274
MS16-147
Platform(s):Microsoft Windows 10
Microsoft Windows 7
Microsoft Windows 8.1
Microsoft Windows Server 2008
Microsoft Windows Server 2008 R2
Microsoft Windows Server 2012
Microsoft Windows Server 2012 R2
Microsoft Windows Server 2016
Microsoft Windows Vista
Product(s):
Definition Synopsis
  • Vista/2008 + file version
  • Vista/2008
  • Microsoft Windows Vista (32-bit) Service Pack 2 is installed
  • OR Microsoft Windows Vista x64 Edition Service Pack 2 is installed
  • OR Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed
  • OR Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed
  • OR Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed
  • AND file version
  • Check if the version of Usp10.dll is less than 1.626.6002.19707
  • OR LDR
  • Check if the version of Usp10.dll is less than 1.626.6002.24030
  • AND Check if the version of Usp10.dll is greater than or equal to 1.626.6002.24000
  • OR Win7/2008 R2 + file version
  • Win7/2008 R2
  • Microsoft Windows 7 (32-bit) Service Pack 1 is installed
  • OR Microsoft Windows 7 x64 Service Pack 1 is installed
  • OR Microsoft Windows Server 2008 R2 x64 Service Pack 1 is installed
  • OR Microsoft Windows Server 2008 R2 Itanium-Based Edition Service Pack 1 is installed
  • AND file version
  • Check if the version of Usp10.dll is less than 1.626.7601.23585
  • OR 2012 + file version
  • Microsoft Windows Server 2012 is installed
  • AND Check if the version of Gdi32.dll is less than 6.2.9200.22024
  • OR Win8.1/2012 R2 + file version
  • Win8.1/2012 R2
  • Microsoft Windows 8.1 (x86) is installed
  • OR Microsoft Windows 8.1 (x64) is installed
  • OR Microsoft Windows Server 2012 R2 is installed
  • AND file version
  • Check if the version of Gdi32.dll is less than 6.3.9600.18525
  • OR Win10 + file version
  • Win10
  • Microsoft Windows 10 (x86) is installed
  • OR Microsoft Windows 10 (x64) is installed
  • AND file version
  • Check if the version of Gdi32.dll is less than 10.0.10240.17202
  • OR 1511 + file version
  • Win10
  • Microsoft Windows 10 Version 1511 (32-bit) is installed
  • OR Microsoft Windows 10 Version 1511 (64-bit) is installed
  • AND file version
  • Check if the version of Gdi32.dll is less than 10.0.10586.713
  • OR 1607/2016 + file version
  • 1607/2016
  • Microsoft Windows 10 Version 1607 (32-bit) is installed
  • OR Microsoft Windows 10 Version 1607 (64-bit) is installed
  • OR Microsoft Windows Server 2016 is installed
  • AND file version
  • Check if the version of Gdi32.dll is less than 10.0.14393.206
    • BACK