Oval Definition:
oval:org.mitre.oval:def:1396
Revision Date
:
2014-02-24
Version
:
48
Title
:
CSS Tag Memory Corruption Vulnerability
Description
:
Unspecified vulnerability in Microsoft Internet Explorer 6 allows remote attackers to execute arbitrary code via a crafted Cascading Style Sheets (CSS) tag that triggers memory corruption.
Family
:
windows
Class
:
vulnerability
Status
:
ACCEPTED
Reference(s)
:
CVE-2007-1750
Platform(s)
:
Microsoft Windows 2000
Microsoft Windows Server 2003
Microsoft Windows Vista
Microsoft Windows XP
Product(s)
:
Microsoft Internet Explorer
Definition Synopsis
IE 6 on Win 2k, SP4
Microsoft Windows 2000 SP4 or later is installed
AND
Internet Explorer 6 Service Pack 1 is installed
AND
the version of Mshtml.dll is less than 6.0.2800.1595
OR
IE 6 on Win XP SP2
Microsoft Windows XP SP2 or later is installed
AND
Microsoft Internet Explorer 6 is installed
AND
the version of Mshtml.dll is less than 6.0.2900.3132
OR
IE 6 on Win 2k3 SP1
Microsoft Windows Server 2003 SP1 (x86) is installed
AND
Microsoft Internet Explorer 6 is installed
AND
the version of Mshtml.dll is less than 6.0.3790.2920
OR
IE 6 on Win 2k3 SP2
Microsoft Windows Server 2003 SP2 (x86) is installed
AND
Microsoft Internet Explorer 6 is installed
AND
the version of Mshtml.dll is less than 6.0.3790.4064
OR
IE 6 on Win XP SP2 (64-bit)
Microsoft Internet Explorer 6 is installed
AND
the version of Mshtml.dll is less than 6.0.3790.4064
AND
Microsoft Windows XP x64 Edition SP2 is installed
OR
IE 6 on Win XP SP1 (64-bit)
Microsoft Windows XP SP1 (64-bit) is installed
AND
Microsoft Internet Explorer 6 is installed
AND
the version of Mshtml.dll is less than 6.0.3790.2920
BACK