Oval Definition:oval:org.cisecurity:def:470
Revision Date:2016-05-27Version:40
Title:Internet Explorer Memory Corruption Vulnerability - CVE-2016-0166 (MS16-037)
Description:Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."
Family:windowsClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2016-0166
Platform(s):Microsoft Windows 10
Microsoft Windows 7
Microsoft Windows 8.1
Microsoft Windows Server 2008 R2
Microsoft Windows Server 2012 R2
Product(s):Microsoft Internet Explorer 11
Definition Synopsis
  • Microsoft Internet Explorer 11 is installed
  • AND vulnerable windows OS + vulnerable file version
  • R2/Win7/2012/2012 R2 Server + vulnerable file version
  • R2/Win7/2012/2012 R2 Server version
  • Microsoft Windows 7 is installed
  • OR Microsoft Windows Server 2008 R2 is installed
  • OR Microsoft Windows Server 2012 is installed
  • AND Check if the version of mshtml.dll is less than 11.0.9600.18283
  • OR Win10/1511 + vulnerable file version
  • Win10/1511
  • Microsoft Windows 10 is installed
  • OR Microsoft Windows 10 Version 1511 (32-bit) is installed
  • OR Microsoft Windows 10 Version 1511 (64-bit) is installed
  • AND Check if the version of mshtml.dll is less than 11.0.10240.16769
  • BACK