Oval Definition:oval:org.mitre.oval:def:14717
Revision Date:2014-08-18Version:23
Title:NET Framework Memory Access Vulnerability (CVE-2012-1855)
Description:Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly handle function pointers, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP) or (2) a crafted .NET Framework application, aka ".NET Framework Memory Access Vulnerability."
Family:windowsClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2012-1855
Platform(s):Microsoft Windows 7
Microsoft Windows Server 2003
Microsoft Windows Server 2008
Microsoft Windows Server 2008 R2
Microsoft Windows Vista
Microsoft Windows XP
Product(s):Microsoft .NET Framework 2.0
Microsoft .NET Framework 3.5.1
Microsoft .NET Framework 4.0
Microsoft .NET Framework 4.5
Definition Synopsis
  • win xp/server 2003/.net 2.0 sp2
  • win xp/server 2003
  • Microsoft Windows XP (32-bit) is installed
  • OR Microsoft Windows XP x64 is installed
  • OR Microsoft Windows Server 2003 (ia64) Gold is installed
  • OR Microsoft Windows Server 2003 (32-bit) is installed
  • OR Microsoft Windows Server 2003 (x64) is installed
  • AND Microsoft .NET Framework 2.0 Service Pack 2 is installed
  • AND GDR/LDR
  • Check if the version of System.Windows.Forms.dll is less than 2.0.50727.3637
  • OR LDR range
  • Check if the version of System.Windows.Forms.dll is greater than or equal to 2.0.50727.5600
  • AND Check if the version of System.Windows.Forms.dll is less than 2.0.50727.5724
  • OR vista/server 2008/.net 2.0 sp2
  • vista/server 2008
  • Microsoft Windows Vista x64 Edition is installed
  • OR Microsoft Windows Vista (32-bit) is installed
  • OR Microsoft Windows Server 2008 (64-bit) is installed
  • OR Microsoft Windows Server 2008 (ia-64) is installed
  • OR Microsoft Windows Server 2008 (32-bit) is installed
  • AND Microsoft .NET Framework 2.0 Service Pack 2 is installed
  • AND GDR/LDR
  • Check if the version of System.Windows.Forms.dll is less than 2.0.50727.4228
  • OR LDR range
  • Check if the version of System.Windows.Forms.dll is greater than or equal to 2.0.50727.5600
  • AND Check if the version of System.Windows.Forms.dll is less than 2.0.50727.5724
  • OR .net 4.0/win xp/server 2003/vista/server 2008/R2/win 7
  • either OS
  • Microsoft Windows 7 is installed
  • OR Microsoft Windows Server 2008 R2 x64 Edition is installed
  • OR Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed
  • OR Microsoft Windows Vista (32-bit) is installed
  • OR Microsoft Windows Vista x64 Edition is installed
  • OR Microsoft Windows XP x64 is installed
  • OR Microsoft Windows XP (32-bit) is installed
  • OR Microsoft Windows Server 2003 (ia64) Gold is installed
  • OR Microsoft Windows Server 2003 (32-bit) is installed
  • OR Microsoft Windows Server 2003 (x64) is installed
  • OR Microsoft Windows Server 2008 (32-bit) is installed
  • OR Microsoft Windows Server 2008 (ia-64) is installed
  • OR Microsoft Windows Server 2008 (64-bit) is installed
  • OR Microsoft Windows 7 (32-bit) is installed
  • OR Microsoft Windows 7 x64 Edition is installed
  • AND Microsoft .NET Framework 4.0 is installed
  • AND GDR/LDR
  • Check if the version of System.Windows.Forms.dll is less than 4.0.30319.278
  • OR LDR range
  • Check if the version of System.Windows.Forms.dll is greater than or equal to 4.0.30319.500
  • AND Check if the version of System.Windows.Forms.dll is less than 4.0.30319.560
  • OR .net 3.5.1/server 2008 R2/win7
  • server 2008 R2/win 7
  • Microsoft Windows 7 is installed
  • OR Microsoft Windows Server 2008 R2 x64 Edition is installed
  • OR Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed
  • AND Microsoft .NET Framework 3.5 SP1 is installed
  • AND GDR/LDR
  • Check if the version of System.Windows.Forms.dll is less than 2.0.50727.4977
  • OR LDR range
  • Check if the version of System.Windows.Forms.dll is greater than or equal to 2.0.50727.5600
  • AND Check if the version of System.Windows.Forms.dll is less than 2.0.50727.5724
  • OR server 2008 R2/win 7/.net 3.5.1
  • server 2008 R2/win 7
  • Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed
  • OR Microsoft Windows Server 2008 R2 x64 Edition is installed
  • OR Microsoft Windows 7 (32-bit) is installed
  • OR Microsoft Windows 7 x64 Edition is installed
  • AND GDR/LDR
  • Check if the version of System.Windows.Forms.dll is less than 2.0.50727.5460
  • OR LDR range
  • Check if the version of System.Windows.Forms.dll is greater than or equal to 2.0.50727.5600
  • AND Check if the version of System.Windows.Forms.dll is less than 2.0.50727.5724
  • AND Microsoft .NET Framework 3.5 SP1 is installed
  • OR .net 4.5 beta/versions
  • either OS
  • Microsoft Windows 7 is installed
  • OR Microsoft Windows Server 2008 R2 x64 Edition is installed
  • OR Microsoft Windows Server 2008 (32-bit) is installed
  • OR Microsoft Windows Server 2008 (64-bit) is installed
  • OR Microsoft Windows 7 (32-bit) is installed
  • OR Microsoft Windows 7 x64 Edition is installed
  • AND Microsoft .Net Framework 4.5 Beta is installed
  • AND GDR/LDR
  • Check if the version of System.Windows.Forms.dll is less than 4.0.30319.17451
  • OR LDR range
  • Check if the version of System.Windows.Forms.dll is greater than or equal to 4.0.30319.17500
  • AND Check if the version of System.Windows.Forms.dll is less than 4.0.30319.17543
    • BACK