| Revision Date: | 2014-08-18 | Version: | 48 | | Title: | SelectAll Remote Code Execution Vulnerability | | Description: | Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "SelectAll Remote Code Execution Vulnerability." | | Family: | windows | Class: | vulnerability | | Status: | ACCEPTED | Reference(s): | CVE-2012-0171
| | Platform(s): | Microsoft Windows 7
Microsoft Windows Server 2003
Microsoft Windows Server 2008
Microsoft Windows Server 2008 R2
Microsoft Windows Vista
Microsoft Windows XP
| Product(s): | Microsoft Internet Explorer 6
Microsoft Internet Explorer 7
Microsoft Internet Explorer 8
Microsoft Internet Explorer 9
| | Definition Synopsis | | Internet Explorer 6 on XP x86 Microsoft Windows XP (32-bit) is installed
AND Microsoft Internet Explorer 6 is installed
AND Mshtml.dll version is less than 6.0.2900.6197
OR Internet Explorer 6 on XP x64, Server 2003 x86/x64/ia64
XP x64, Server 2003 x86/x64/ia64
Microsoft Windows XP x64 is installed
OR Microsoft Windows Server 2003 (32-bit) is installed
OR Microsoft Windows Server 2003 (x64) is installed
OR Microsoft Windows Server 2003 (ia64) Gold is installed
AND Microsoft Internet Explorer 6 is installed
AND Mshtml.dll version is less than 6.0.3790.4969
OR Internet Explorer 7 on XP x86/x64, Server 2003 x86/x64/ia64
XP x86/x64 , Server 2003 x86/x64/ia64
Microsoft Windows XP (32-bit) is installed
OR Microsoft Windows XP x64 is installed
OR Microsoft Windows Server 2003 (32-bit) is installed
OR Microsoft Windows Server 2003 (x64) is installed
OR Microsoft Windows Server 2003 (ia64) Gold is installed
AND Microsoft Internet Explorer 7 is installed
AND GDR or QFE Service branch
Mshtml.dll version is less than 7.0.6000.17109
OR QFE
Mshtml.dll version is greater than 7.0.6000.20000
AND Mshtml.dll version is less than 7.0.6000.21311
OR Internet Explorer 7 on Vista x86/x64, Server 2008 x86/x64/ia64
Vista x86/x64, Server 2008 x86/x64/ia64
Microsoft Windows Vista (32-bit) is installed
OR Microsoft Windows Vista x64 Edition is installed
OR Microsoft Windows Server 2008 (32-bit) is installed
OR Microsoft Windows Server 2008 (64-bit) is installed
OR Microsoft Windows Server 2008 (ia-64) is installed
AND Microsoft Internet Explorer 7 is installed
AND GDR or LDR Service branch
Mshtml.dll version is less than 7.0.6002.18591
OR LDR
Mshtml.dll version is greater than 7.0.6002.22000
AND Mshtml.dll version is less than 7.0.6002.22805
OR Internet Explorer 8 on XP x64/x86, Server 2003 x86/x64/ia64, Vista x86/x64, Server 2008 x86/x64
XP x64,XP x86, Server 2003 x86/x64/ia64, Vista x86/x64, Server 2008 x86/x64
Microsoft Windows XP (32-bit) is installed
OR Microsoft Windows XP x64 is installed
OR Microsoft Windows Server 2003 (32-bit) is installed
OR Microsoft Windows Server 2003 (x64) is installed
OR Microsoft Windows Server 2003 (ia64) Gold is installed
OR Microsoft Windows Vista (32-bit) is installed
OR Microsoft Windows Vista x64 Edition is installed
OR Microsoft Windows Server 2008 (32-bit) is installed
OR Microsoft Windows Server 2008 (64-bit) is installed
AND Microsoft Internet Explorer 8 is installed
AND GDR or QFE Service branch
Mshtml.dll version is less than 8.0.6001.19222
OR QFE
Mshtml.dll version is greater than 8.0.6001.22000
AND Mshtml.dll version is less than 8.0.6001.23318
OR Internet Explorer 8 on Windows 7 x86/x64, Server 2008 R2 x64/ia64
Windows 7 x86/x64, Server 2008 R2 x64/ia64
Microsoft Windows 7 (32-bit) is installed
OR Microsoft Windows 7 x64 Edition is installed
OR Microsoft Windows Server 2008 R2 x64 Edition is installed
OR Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed
AND Microsoft Internet Explorer 8 is installed
AND GDR or LDR Service branch
Mshtml.dll version is less than 8.0.7600.16968
OR LDR
Mshtml.dll version is greater than or equal 8.0.7600.20000
AND Mshtml.dll version is less than 8.0.7600.21158
OR Internet Explorer 8 on Windows 7 x86/x64, Server 2008 R2 x64/ia64
Windows 7 x86/x64, Server 2008 R2 x64/ia64
Microsoft Windows 7 (32-bit) is installed
OR Microsoft Windows 7 x64 Edition is installed
OR Microsoft Windows Server 2008 R2 x64 Edition is installed
OR Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed
AND Microsoft Internet Explorer 8 is installed
AND GDR or LDR Service branch
Mshtml.dll version is less than 8.0.7601.17785
OR LDR
Mshtml.dll version is greater than or equal 8.0.7601.20000
AND Mshtml.dll version is less than 8.0.7601.21931
OR Internet Explorer 9 on Vista x86/x64, Windows 7 x86/x64, Server 2008 x86/x64, Server 2008 R2 x64/ia64, Server 2008 R2 x64/ia64
Vista x86/x64, Windows 7 x86/x64, Server 2008 x86/x64, Server 2008 R2 x64/ia64, Server 2008 R2 x64/ia64
Microsoft Windows Vista (32-bit) is installed
OR Microsoft Windows Vista x64 Edition is installed
OR Microsoft Windows 7 (32-bit) is installed
OR Microsoft Windows 7 x64 Edition is installed
OR Microsoft Windows Server 2008 (32-bit) is installed
OR Microsoft Windows Server 2008 (64-bit) is installed
OR Microsoft Windows Server 2008 R2 x64 Edition is installed
OR Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed
AND Microsoft Internet Explorer 9 is installed
AND GDR or LDR Service branch
Mshtml.dll version is less than 9.0.8112.16443
OR LDR
Mshtml.dll version is greater than or equal to 9.0.8112.20000
AND Mshtml.dll version is less than 9.0.8112.20548
|
|