Oval Definition:	oval:org.cisecurity:def:466
Revision Date: 2016-05-27 Version: 40 Title: Internet Explorer Memory Corruption Vulnerability - CVE-2016-0159 (MS16-037) Description: Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability." Family: windows Class: vulnerability Status: ACCEPTED Reference(s): CVE-2016-0159 Platform(s): Microsoft Windows Server 2008 Microsoft Windows Vista Product(s): Microsoft Internet Explorer 9 Definition Synopsis Microsoft Internet Explorer 9 is installed AND vulnerable windows OS + vulnerable file version Vista/2008 32bit + vulnerable file version Vista/2008 32bit Microsoft Windows Vista (32-bit) Service Pack 2 is installed OR Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed AND Check for vulnerable file version Check if the version of mshtml.dll is less than 9.0.8112.16773 OR Check for LDR Check if the version of mshtml.dll is less than 9.0.8112.20888 AND Check if the version of mshtml.dll is greater than or equal to 9.0.8112.20000 OR Vista/2008 64bit + vulnerable file version Vista/2008 64bit Microsoft Windows Vista x64 Edition Service Pack 2 is installed OR Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed AND Check for vulnerable file version Check if the version of mshtml.dll is less than 9.0.8112.16770 OR Check for LDR Check if the version of mshtml.dll is less than 9.0.8112.20885 AND Check if the version of mshtml.dll is greater than or equal to 9.0.8112.20000
BACK