Oval Definition:	oval:org.mitre.oval:def:13299
Revision Date: 2014-08-18 Version: 49 Title: Cross-Domain Information Disclosure Vulnerability in Internet Explorer Description: Microsoft Internet Explorer 6 and 7 does not properly determine the domain or security zone of origin of web script, which allows remote attackers to bypass the intended cross-domain security policy and obtain sensitive information via a crafted HTML document, aka "Cross-Domain Information Disclosure Vulnerability." Family: windows Class: vulnerability Status: ACCEPTED Reference(s): CVE-2008-3474 Platform(s): Microsoft Windows 2000 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Vista Microsoft Windows XP Product(s): Microsoft Internet Explorer 6 Microsoft Internet Explorer 7 Definition Synopsis IE 6 and Win 2KSo4 Microsoft Windows 2000 is installed AND Microsoft Internet Explorer 6 is installed AND Mshtml.dll version is less than 6.0.2800.1615 OR Win XP X86 and IE6 Microsoft Windows XP (32-bit) is installed AND Mshtml.dll version is less than 6.0.2900.3429 AND Microsoft Internet Explorer 6 is installed OR Win XP X86 and IE6 Microsoft Windows XP (32-bit) is installed AND Mshtml.dll version is less than 6.0.2900.5659 AND Microsoft Internet Explorer 6 is installed OR IE7 and Win XP or Win 2K3 Microsoft Internet Explorer 7 is installed AND Win XP or Win 2K3 Microsoft Windows XP is installed OR Microsoft Windows Server 2003 (32-bit) is installed OR Microsoft Windows Server 2003 (x64) is installed OR Microsoft Windows Server 2003 (ia64) Gold is installed AND Check for LDR / GDR Mshtml.dll version is less than 7.0.6000.16735 OR Check for LDR Mshtml.dll version is greater than 7.0.6000.20000 AND Check if the version of mshtml.dll is less than 7.0.6000.20900 OR IE6 and Win 2K3 or Win XP X64 Microsoft Internet Explorer 6 is installed AND Mshtml.dll version is less than 6.0.3790.3194 AND Win XP X64 or Win 2K3 Microsoft Windows XP x64 is installed OR Microsoft Windows Server 2003 (32-bit) is installed OR Microsoft Windows Server 2003 (x64) is installed OR Microsoft Windows Server 2003 (ia64) Gold is installed OR Win 2K3 or Win XP X64 and IE6 Microsoft Internet Explorer 6 is installed AND Mshtml.dll version is less than 6.0.3790.4357 AND Win 2K3 or Win XP X64 Microsoft Windows Server 2003 (32-bit) is installed OR Microsoft Windows Server 2003 (x64) is installed OR Microsoft Windows Server 2003 (ia64) Gold is installed OR Microsoft Windows XP x64 is installed OR IE7 and Vista Microsoft Windows Vista is installed AND Check for LDR/GDR Mshtml.dll version is less than 7.0.6000.16757 OR Check for LDR Mshtml.dll version is greater than 7.0.6000.20000 AND Mshtml.dll version is less than 7.0.6000.20927 OR Win 2K8 / Vista and IE7 Win 2K8 / Vista Microsoft Windows Vista (32-bit) is installed OR Microsoft Windows Vista x64 Edition is installed OR Microsoft Windows Server 2008 (32-bit) is installed OR Microsoft Windows Server 2008 (64-bit) is installed AND Check for LDR / GDR Mshtml.dll version is less than 7.0.6001.18148 OR Check for LDR Mshtml.dll version is greater than or equal to 7.0.6001.22000 AND Mshtml.dll version is less than 7.0.6001.22260 AND Microsoft Internet Explorer 7 is installed OR Win 2K8 ia 64 Microsoft Windows Server 2008 (ia-64) is installed AND Check for LDR / GDR Check if the version of mshtml.dll is less than 7.0.6001.18137 OR Check for LDR Mshtml.dll version is less than 7.0.6001.22260 AND Mshtml.dll version is greater than or equal to 7.0.6001.22000 AND Microsoft Internet Explorer 7 is installed
BACK