Oval Definition:oval:org.cisecurity:def:454
Revision Date:2016-05-14Version:11
Title:Windows Journal DoS Vulnerability – CVE-2015-2516 (MS15-098)
Description:Windows Journal in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 allows remote attackers to cause a denial of service (data loss) via a crafted .jnt file, aka "Windows Journal DoS Vulnerability."
Family:windowsClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2015-2516
Platform(s):Microsoft Windows 10
Microsoft Windows 7
Microsoft Windows 8
Microsoft Windows 8.1
Microsoft Windows Server 2008
Microsoft Windows Server 2008 R2
Microsoft Windows Server 2012
Microsoft Windows Server 2012 R2
Microsoft Windows Vista
Product(s):
Definition Synopsis
  • Vista/2008 + journal.dll version
  • Vista/2008
  • Microsoft Windows Vista is installed
  • OR Microsoft Windows Server 2008 is installed
  • AND vulnerable journal.dll version
  • Check if the version of journal.dll is less than 6.0.6002.19465
  • OR Check for LDR
  • Check if the version of journal.dll is less than 6.0.6002.23774
  • AND Check if the version of journal.dll is greater than or equal to 6.0.6002.23000
  • OR Win7/2008 R2 + journal.dll version
  • Win7/2008 R2
  • Microsoft Windows 7 is installed
  • OR Microsoft Windows Server 2008 R2 is installed
  • AND vulnerable journal.dll version
  • Check if the version of journal.dll is less than 6.1.7601.18951
  • OR Check for LDR
  • Check if the version of journal.dll is less than 6.1.7601.23154
  • AND Check if the version of Journal.dll is greater than or equal to 6.1.7601.23000
  • OR Win8/2012 + journal.dll version
  • Win8/2012
  • Microsoft Windows 8 is installed
  • OR Microsoft Windows Server 2012 is installed
  • AND vulnerable journal.dll version
  • Check if the version of journal.dll is less than 6.2.9200.17467
  • OR Check for LDR
  • Check if the version of journal.dll is less than 6.2.9200.21581
  • AND Check if the version of Journal.dll is greater than or equal to 6.2.9200.21000
  • OR Win8.1/2012 R2 + journal.dll version
  • Win8.1/2012 R2
  • Microsoft Windows 8.1 is installed
  • OR Microsoft Windows Server 2012 R2 is installed
  • AND Check if the version of journal.dll is less than 6.3.9600.18005
  • OR Win10 + journal.dll version
  • Microsoft Windows 10 is installed
  • AND Check if the version of journal.dll is less than 10.0.10240.16485
  • BACK