Oval Definition:	oval:org.cisecurity:def:514
Revision Date: 2016-06-13 Version: 36 Title: Microsoft Browser Memory Corruption Vulnerability - CVE-2016-0154 (MS16-037) Description: Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability." Family: windows Class: vulnerability Status: ACCEPTED Reference(s): CVE-2016-0154 Platform(s): Microsoft Windows 10 Microsoft Windows 7 Microsoft Windows 8.1 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2 Microsoft Windows Vista Product(s): Microsoft Edge Microsoft Internet Explorer 10 Microsoft Internet Explorer 11 Microsoft Internet Explorer 9 Definition Synopsis Internet Explorer 9 is installed + vulnerable windows OS + vulnerable file version Microsoft Internet Explorer 9 is installed AND vulnerable windows OS + vulnerable file version Vista/2008 32bit + vulnerable file version Vista/2008 32bit Microsoft Windows Vista (32-bit) Service Pack 2 is installed OR Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed AND Check for vulnerable file version Check if the version of mshtml.dll is less than 9.0.8112.16773 OR Vista/2008 32bit + vulnerable file version Vista/2008 32bit Microsoft Windows Vista x64 Edition Service Pack 2 is installed OR Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed AND Check for vulnerable file version Check if the version of mshtml.dll is less than 9.0.8112.16770 OR Internet Explorer 10 is installed + Windows Server 2012 + vulnerable file version Microsoft Internet Explorer 10 is installed AND Microsoft Windows Server 2012 is installed AND Check if the version of mshtml.dll is less than 10.0.9200.21811 OR Internet Explorer 11 is installed + vulnerable windows OS + vulnerable file version Microsoft Internet Explorer 11 is installed AND vulnerable windows OS + vulnerable file version R2/Win7/2012/2012 R2 Server + vulnerable file version R2/Win7/2012/2012 R2 Server version Microsoft Windows 7 is installed OR Microsoft Windows Server 2008 R2 is installed OR Microsoft Windows Server 2012 is installed AND Check if the version of mshtml.dll is less than 11.0.9600.18283 OR Win10/1511 + vulnerable file version Win10/1511 Microsoft Windows 10 is installed OR Microsoft Windows 10 Version 1511 (32-bit) is installed OR Microsoft Windows 10 Version 1511 (64-bit) is installed AND Check if the version of mshtml.dll is less than 11.0.10240.16769 OR Microsoft Edge is installed + Windows 10 + vulnerable file version Microsoft Edge is installed AND Microsoft Windows 10 is installed AND Check if the version of edgehtml.dll is less than 11.0.10240.16766 OR Microsoft Edge is installed + Windows 10 version 1511 + vulnerable file version Microsoft Edge is installed AND 1511 Microsoft Windows 10 Version 1511 (32-bit) is installed OR Microsoft Windows 10 Version 1511 (64-bit) is installed AND Check if edgehtml.dll version is less than 11.0.10586.212
BACK