Oval Definition:oval:org.mitre.oval:def:14028
Revision Date:2014-06-30Version:12
Title:Windows Mail Insecure Library Loading Vulnerability
Description:Untrusted search path vulnerability in Windows Mail and Windows Meeting Space in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .eml or .wcinv file, aka "Windows Mail Insecure Library Loading Vulnerability."
Family:windowsClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2011-2016
Platform(s):Microsoft Windows 7
Microsoft Windows Server 2008
Microsoft Windows Server 2008 R2
Microsoft Windows Vista
Product(s):
Definition Synopsis
  • Vulnerable Microsoft Windows Vista SP2 x86/x64, Server 2008 SP2 x86/x64/ia64
  • Check for Windows Vista SP2 or Windows 2008 SP2
  • Microsoft Windows Vista (32-bit) Service Pack 2 is installed
  • OR Microsoft Windows Vista x64 Edition Service Pack 2 is installed
  • OR Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed
  • OR Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed
  • OR Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed
  • AND GDR or LDR check
  • the version of Wab32.dll is less than 6.0.6002.18521
  • OR Check for Wab32.dll LDR version
  • the version of Wab32.dll is greater than or equal 6.0.6002.22000
  • AND the version of Wab32.dll is less than 6.0.6002.22722
  • OR Vulnerable Microsoft Windows 7 x86/x64, Windows Server 2008 R2 x86/x64/ia64
  • Windows 7 x86/x64, Windows Server 2008 R2 x86/x64/ia64
  • Microsoft Windows 7 (32-bit) is installed
  • OR Microsoft Windows 7 x64 Edition is installed
  • OR Microsoft Windows Server 2008 R2 x64 Edition is installed
  • OR Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed
  • AND GDR or LDR Service branch
  • the version of Wab32.dll is less than 6.1.7600.16891
  • OR LDR
  • the version of Wab32.dll is less than 6.1.7600.21062
  • AND the version of Wab32.dll is greater than or equal to 6.1.7600.21000
  • OR Vulnerable Microsoft Windows 7 x86/x64 sp1/sp1, Windows Server 2008 R2 x86/x64/ia64 sp1/sp1
  • Windows 7 x86/x64 sp1/sp1, Windows Server 2008 R2 x86/x64/ia64 sp1/sp1
  • Microsoft Windows 7 (32-bit) Service Pack 1 is installed
  • OR Microsoft Windows 7 x64 Service Pack 1 is installed
  • OR Microsoft Windows Server 2008 R2 x64 Service Pack 1 is installed
  • OR Microsoft Windows Server 2008 R2 Itanium-Based Edition Service Pack 1 is installed
  • AND GDR or LDR Service branch
  • the version of Wab32.dll is less than 6.1.7601.17699
  • OR LDR
  • the version of Wab32.dll is less than 6.1.7601.21830
  • AND the version of Wab32.dll is greater than or equal to 6.1.7601.21000
  • BACK