Oval Definition:oval:org.cisecurity:def:429
Revision Date:2016-06-13Version:40
Title:Internet Explorer Memory Corruption Vulnerability – CVE-2015-6074 (MS15-112)
Description:Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6066, CVE-2015-6070, CVE-2015-6071, CVE-2015-6076, and CVE-2015-6087.
Family:windowsClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2015-6074
Platform(s):Microsoft Windows 10
Microsoft Windows 7
Microsoft Windows 8
Microsoft Windows 8.1
Microsoft Windows Server 2008
Microsoft Windows Server 2008 R2
Microsoft Windows Server 2012
Microsoft Windows Server 2012 R2
Microsoft Windows Vista
Product(s):Microsoft Internet Explorer 10
Microsoft Internet Explorer 11
Microsoft Internet Explorer 7
Microsoft Internet Explorer 8
Microsoft Internet Explorer 9
Definition Synopsis
  • IE7 is installed + Windows OS + file version
  • Microsoft Internet Explorer 7 is installed
  • AND Microsoft Windows Vista/Server 2008 is installed
  • Microsoft Windows Vista (32-bit) Service Pack 2 is installed
  • OR Microsoft Windows Vista x64 Edition Service Pack 2 is installed
  • OR Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed
  • OR Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed
  • OR Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed
  • AND Check for file version
  • Check if mshtml.dll version is less than 7.0.6002.19520
  • OR Check for Limited Distribution Release (LDR) file version
  • Check if mshtml.dll version is greater than or equal to 7.0.6002.23000
  • AND Check if mshtml.dll version is less than 7.0.6002.23830
  • OR IE8 is installed + Windows OS + file version
  • Microsoft Internet Explorer 8 is installed
  • AND Windows OS is installed + file version
  • Microsoft Windows Vista/Server 2008 is installed + file version
  • Microsoft Windows Vista/Server 2008 is installed
  • Microsoft Windows Vista (32-bit) Service Pack 2 is installed
  • OR Microsoft Windows Vista x64 Edition Service Pack 2 is installed
  • OR Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed
  • OR Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed
  • AND Check for file version
  • Check if mshtml.dll version is less than 8.0.6001.19698
  • OR Microsoft Windows 7/Server 2008 R2 is installed + file version
  • Microsoft Windows 7/Server 2008 R2 is installed
  • Microsoft Windows 7 (32-bit) Service Pack 1 is installed
  • OR Microsoft Windows 7 x64 Service Pack 1 is installed
  • OR Microsoft Windows Server 2008 R2 x64 Service Pack 1 is installed
  • OR Microsoft Windows Server 2008 R2 Itanium-Based Edition Service Pack 1 is installed
  • AND Check for file version
  • Check if mshtml.dll version is less than 8.0.7601.19038
  • OR IE9 is installed + Windows OS + file version
  • Microsoft Internet Explorer 9 is installed
  • AND Microsoft Windows Vista/Server 2008/7/Server 2008 R2 is installed
  • Microsoft Windows Vista (32-bit) Service Pack 2 is installed
  • OR Microsoft Windows Vista x64 Edition Service Pack 2 is installed
  • OR Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed
  • OR Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed
  • OR Microsoft Windows 7 (32-bit) Service Pack 1 is installed
  • OR Microsoft Windows 7 x64 Service Pack 1 is installed
  • OR Microsoft Windows Server 2008 R2 x64 Service Pack 1 is installed
  • AND Check for file version
  • Check if mshtml.dll version is less than 9.0.8112.16717
  • OR Check for Limited Distribution Release (LDR) file version
  • Check if mshtml.dll version is greater than or equal to 9.0.8112.20000
  • AND Check if mshtml.dll version is less than 9.0.8112.20832
  • OR IE10 is installed + Windows OS + file version
  • Microsoft Internet Explorer 10 is installed
  • AND Microsoft Windows 7/Server 2008 R2/8/Server 2012 is installed
  • Microsoft Windows 7 (32-bit) Service Pack 1 is installed
  • OR Microsoft Windows 7 x64 Service Pack 1 is installed
  • OR Microsoft Windows Server 2008 R2 x64 Service Pack 1 is installed
  • OR Microsoft Windows 8 (x86) is installed
  • OR Microsoft Windows 8 (x64) is installed
  • OR Microsoft Windows Server 2012 (64-bit) is installed
  • AND Check for file version
  • Check if mshtml.dll version is less than 10.0.9200.17556
  • OR Check for Limited Distribution Release (LDR) file version
  • Check if mshtml.dll version is greater than or equal to 10.0.9200.21000
  • AND Check if mshtml.dll version is less than 10.0.9200.21673
  • OR IE11 is installed + Windows OS + file version
  • Microsoft Internet Explorer 11 is installed
  • AND Windows OS is installed + file version
  • Microsoft Windows 7/Server 2008 R2/8.1/Server 2012 R2 is installed + file version
  • Microsoft Windows 7/Server 2008 R2/8.1/Server 2012 R2 is installed
  • Microsoft Windows 7 (32-bit) Service Pack 1 is installed
  • OR Microsoft Windows 7 x64 Service Pack 1 is installed
  • OR Microsoft Windows Server 2008 R2 x64 Service Pack 1 is installed
  • OR Microsoft Windows 8.1 (x86) is installed
  • OR Microsoft Windows 8.1 (x64) is installed
  • OR Microsoft Windows Server 2012 R2 is installed
  • AND Check if the version of mshtml.dll is less than 11.0.9600.18098
  • OR Microsoft Windows 10 is installed + file version
  • Microsoft Windows 10 is installed
  • Microsoft Windows 10 (32-bit) is installed
  • OR Microsoft Windows 10 (64-bit) is installed
  • AND Check if mshtml.dll version is less than 11.0.10240.16590
  • OR Microsoft Windows 10 Version 1511 is installed + file version
  • Microsoft Windows 10 Version 1511 is installed
  • Microsoft Windows 10 Version 1511 (32-bit) is installed
  • OR Microsoft Windows 10 Version 1511 (64-bit) is installed
  • AND Check if mshtml.dll version is less than 11.0.10586.3
  • BACK