Oval Definition:oval:org.mitre.oval:def:12382
Revision Date:2014-08-25Version:53
Title:CSS Memory Corruption Vulnerability
Description:Use-after-free vulnerability in the CSharedStyleSheet::Notify function in the Cascading Style Sheets (CSS) parser in mshtml.dll, as used in Microsoft Internet Explorer 6 through 8 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a self-referential @import rule in a stylesheet, aka "CSS Memory Corruption Vulnerability."
Family:windowsClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2010-3971
Platform(s):Microsoft Windows 7
Microsoft Windows Server 2003
Microsoft Windows Server 2008
Microsoft Windows Server 2008 R2
Microsoft Windows Vista
Microsoft Windows XP
Product(s):Microsoft Internet Explorer 6
Microsoft Internet Explorer 7
Microsoft Internet Explorer 8
Definition Synopsis
  • Internet Explorer 6 on XP x86
  • Microsoft Windows XP (32-bit) is installed
  • AND Microsoft Internet Explorer 6 is installed
  • AND Mshtml.dll version is less than 6.0.2900.6058
  • OR Internet Explorer 6 on XP x64, Server 2003 x86/x64/ia64
  • XP x64, Server 2003 x86/x64/ia64
  • Microsoft Windows XP x64 is installed
  • OR Microsoft Windows Server 2003 (32-bit) is installed
  • OR Microsoft Windows Server 2003 (x64) is installed
  • OR Microsoft Windows Server 2003 for Itanium is installed
  • AND Microsoft Internet Explorer 6 is installed
  • AND Mshtml.dll version is less than 6.0.3790.4807
  • OR Internet Explorer 7 on XP x86/x64, Server 2003 x86/x64/ia64
  • XP x86/x64, Server 2003 x86/x64/ia64
  • Microsoft Windows XP (32-bit) is installed
  • OR Microsoft Windows XP x64 is installed
  • OR Microsoft Windows Server 2003 (32-bit) is installed
  • OR Microsoft Windows Server 2003 (x64) is installed
  • OR Microsoft Windows Server 2003 for Itanium is installed
  • AND Microsoft Internet Explorer 7 is installed
  • AND GDR or QFE Service branch
  • Mshtml.dll version is less than 7.0.6000.17095
  • OR QFE
  • Mshtml.dll version is greater than 7.0.6000.20000
  • AND Mshtml.dll version is less than 7.0.6000.21297
  • OR Internet Explorer 7 on Vista x86/x64, Server 2008 x86/x64/ia64
  • Vista x86/x64, Server 2008 x86/x64/ia64
  • Microsoft Windows Vista (32-bit) is installed
  • OR Microsoft Windows Vista x64 Edition is installed
  • OR Microsoft Windows Server 2008 (32-bit) is installed
  • OR Microsoft Windows Server 2008 (64-bit) is installed
  • OR Microsoft Windows Server 2008 (ia-64) is installed
  • AND Microsoft Internet Explorer 7 is installed
  • AND GDR or LDR Service branch
  • Mshtml.dll version is less than 7.0.6001.18565
  • OR LDR
  • Mshtml.dll version is greater than 7.0.6001.20000
  • AND Mshtml.dll version is less than 7.0.6001.22816
  • OR Internet Explorer 7 on Vista x86/x64, Server 2008 x86/x64/ia64
  • Vista x86/x64, Server 2008 x86/x64/ia64
  • Microsoft Windows Vista (32-bit) is installed
  • OR Microsoft Windows Vista x64 Edition is installed
  • OR Microsoft Windows Server 2008 (32-bit) is installed
  • OR Microsoft Windows Server 2008 (64-bit) is installed
  • OR Microsoft Windows Server 2008 (ia-64) is installed
  • AND Microsoft Internet Explorer 7 is installed
  • AND GDR or LDR Service branch
  • Mshtml.dll version is less than 7.0.6002.18357
  • OR LDR
  • Mshtml.dll version is greater than 7.0.6002.22000
  • AND Mshtml.dll version is less than 7.0.6002.22551
  • OR Internet Explorer 8 on XP x64/x86, Server 2003 x86/x64/ia64
  • XP x64,XP x86, Server 2003 x86/x64/ia64
  • Microsoft Windows XP (32-bit) is installed
  • OR Microsoft Windows XP x64 is installed
  • OR Microsoft Windows Server 2003 (32-bit) is installed
  • OR Microsoft Windows Server 2003 (x64) is installed
  • AND Microsoft Internet Explorer 8 is installed
  • AND GDR or QFE Service branch
  • Mshtml.dll version is less than 8.0.6001.19019
  • OR QFE
  • Mshtml.dll version is greater than 8.0.6001.22000
  • AND Mshtml.dll version is less than 8.0.6001.23111
  • OR Internet Explorer 8 on all Vista x86/x64, all Server 2008 x86/x64
  • Vista x86/x64, all Server 2008 x86/x64
  • Microsoft Windows Vista (32-bit) is installed
  • OR Microsoft Windows Vista x64 Edition is installed
  • OR Microsoft Windows Server 2008 (32-bit) is installed
  • OR Microsoft Windows Server 2008 (64-bit) is installed
  • AND Microsoft Internet Explorer 8 is installed
  • AND GDR or LDR Service branch
  • Mshtml.dll version is less than 8.0.6001.19019
  • OR LDR
  • Mshtml.dll version is greater than 8.0.6001.22000
  • AND Mshtml.dll version is less than 8.0.6001.23111
  • OR Internet Explorer 8 on Windows 7 x86/x64, Server 2008 R2 x64/ia64
  • Windows 7 x86/x64, Server 2008 R2 x64/ia64
  • Microsoft Windows 7 (32-bit) is installed
  • OR Microsoft Windows 7 x64 Edition is installed
  • OR Microsoft Windows Server 2008 R2 x64 Edition is installed
  • OR Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed
  • AND Microsoft Internet Explorer 8 is installed
  • AND GDR or LDR Service branch
  • Mshtml.dll version is less than 8.0.7600.16722
  • OR LDR
  • Mshtml.dll version is greater than or equal 8.0.7600.20000
  • AND Mshtml.dll version is less than 8.0.7600.20861
  • OR Internet Explorer 8 on Windows 7 x86/x64, Server 2008 R2 x64/ia64
  • Windows 7 x86/x64, Server 2008 R2 x64/ia64
  • Microsoft Windows 7 (32-bit) is installed
  • OR Microsoft Windows 7 x64 Edition is installed
  • OR Microsoft Windows Server 2008 R2 x64 Edition is installed
  • OR Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed
  • AND Microsoft Internet Explorer 8 is installed
  • AND GDR or LDR Service branch
  • Mshtml.dll version is less than 8.0.7601.17537
  • OR LDR
  • Mshtml.dll version is greater than or equal 8.0.7601.20000
  • AND Mshtml.dll version is less than 8.0.7601.21636
    • BACK