Oval Definition:	oval:org.mitre.oval:def:1090
Revision Date: 2012-05-28 Version: 49 Title: Microsoft RichEdit Vulnerability Description: The RichEdit component in Microsoft Windows 2000 SP4, XP SP2, and 2003 SP1; Office 2000 SP3, XP SP3, 2003 SP2, and Office 2004 for Mac; and Learning Essentials for Microsoft Office 1.0, 1.1, and 1.5 allows user-assisted remote attackers to execute arbitrary code via a malformed OLE object in an RTF file, which triggers memory corruption. Family: windows Class: vulnerability Status: ACCEPTED Reference(s): CVE-2006-1311 Platform(s): Microsoft Windows 2000 Microsoft Windows Server 2003 Microsoft Windows XP Product(s): Definition Synopsis A vulnerable application is installed Microsoft Office 2000 is installed OR Microsoft Office XP is installed OR Microsoft Office 2003 is installed OR Microsoft Project 2000 SR1 is installed OR Microsoft Project 2002 SP1 is installed OR Microsoft Office Visio 2002 SP2 is installed OR Microsoft Word Viewer is installed OR Microsoft Excel Viewer 2003 is installed AND Win2K SP4, WinXP SP2, WinXP SP1 64-bit, Win2k3 Gold/SP1, Office 2000/2002/2003 Win2K,SP4 Microsoft Windows 2000 SP4 or later is installed AND the version of Riched20.dll is less than 5.30.23.1227 OR WinXP,SP2 Microsoft Windows XP SP2 or later is installed AND the version of Riched20.dll is less than 5.30.23.1228 OR WinXP,SP1 (64-bit) Microsoft Windows XP SP1 (64-bit) is installed AND the version of Riched20.dll is less than 5.31.23.1226 OR S03-Gold Microsoft Windows Server 2003 (x86) Gold is installed AND the version of Riched20.dll is less than 5.31.23.1224 OR S03,SP1 Microsoft Windows Server 2003 SP1 (x86) is installed AND the version of Riched20.dll is less than 5.31.23.1226 OR Office 2000 The Office 2000 (or later) version of Mso9.dll is installed. AND the version of Riched20.dll is less than 5.30.23.1227 OR Office 2002 The Office XP (or later) version of Mso.dll is installed. AND the product version of Riched20.dll equal to 4.0 AND the version of Riched20.dll is less than 5.40.11.2220 OR Office 2003 The Office 2003 (or later) version of Mso.dll is installed. AND the product version of Riched20.dll is equal to 5.0 AND the version of Riched20.dll is less than 5.50.99.2014 OR Office 2003 The Office 2003 (or later) version of Mso.dll is installed. AND the version of Shrichedit.dll is less than 5.50.99.2011
BACK