Oval Definition:	oval:org.mitre.oval:def:14281
Revision Date: 2014-03-03 Version: 48 Title: Windows Media Player DVR-MS Memory Corruption Vulnerability Description: ENCDEC.DLL in Windows Media Player and Media Center in Microsoft Windows XP SP2 and SP3, Windows Vista SP2, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted .dvr-ms file, aka "Windows Media Player DVR-MS Memory Corruption Vulnerability." Family: windows Class: vulnerability Status: ACCEPTED Reference(s): CVE-2011-3401 Platform(s): Microsoft Windows 7 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows XP Product(s): Definition Synopsis Vulnerable Windows XP Media Center Edition 2005 Service Pack 3 Microsoft Windows XP (x86) SP3 is installed AND Media Center is installed AND NOT the patch KB2619340 is installed OR Vulnerable Microsoft Windows XP (x86) SP3 Microsoft Windows XP (x86) SP3 is installed AND the version of Encdec.dll is less than 6.5.2600.6161 OR Vulnerable Microsoft Windows XP x64 SP2 Microsoft Windows XP x64 Edition SP2 is installed AND Vulnerable version of Wencdec.dll or Encdec.dll the version of %SystemRoot%\SysWOW64\Wencdec.dll is less than 6.5.3790.4916 OR the version of %SystemRoot%\SysWOW64\Encdec.dll is less than 6.5.3790.4916 OR Vulnerable Microsoft Windows Vista SP2 x86/x64 Microsoft Windows Vista SP2 x86/x64 Microsoft Windows Vista (32-bit) Service Pack 2 is installed OR Microsoft Windows Vista x64 Edition Service Pack 2 is installed AND GDR or LDR Service branch the version of Encdec.dll is less than 6.6.6002.18528 OR LDR the version of Encdec.dll is less than 6.6.6002.22726 AND the version of Encdec.dll is greater than or equal 6.6.6002.22000 OR Vulnerable Microsoft Windows 7 x86/x64, Windows Server 2008 R2 x64 Microsoft Windows 7 x86/x64, Windows Server 2008 R2 x64 Microsoft Windows 7 (32-bit) is installed OR Microsoft Windows 7 x64 Edition is installed OR Microsoft Windows Server 2008 R2 x64 Edition is installed AND GDR or LDR Service branch the version of Encdec.dll is less than 6.6.7600.16899 OR LDR the version of Encdec.dll is less than 6.6.7600.21070 AND the version of Encdec.dll is greater than or equal to 6.6.7600.20000 OR Vulnerable Microsoft Windows 7 x86/x64 SP1, Windows Server 2008 R2 x64 SP1 Microsoft Windows 7 x86/x64 SP1, Windows Server 2008 R2 x64 SP1 Microsoft Windows 7 (32-bit) Service Pack 1 is installed OR Microsoft Windows 7 x64 Service Pack 1 is installed OR Microsoft Windows Server 2008 R2 x64 Service Pack 1 is installed AND GDR or LDR Service branch the version of Encdec.dll is less than 6.6.7601.17708 OR LDR the version of Encdec.dll is less than 6.6.7601.21840 AND the version of Encdec.dll is greater than or equal to 6.6.7601.21000
BACK