Oval Definition:oval:org.mitre.oval:def:15510
Revision Date:2013-05-06Version:46
Title:Font Resource Refcount Integer Overflow Vulnerability (CVE-2012-1867)
Description:Integer overflow in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted TrueType font file that triggers incorrect memory allocation, aka "Font Resource Refcount Integer Overflow Vulnerability."
Family:windowsClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2012-1867
Platform(s):Microsoft Windows 7
Microsoft Windows Server 2003
Microsoft Windows Server 2008
Microsoft Windows Server 2008 R2
Microsoft Windows Vista
Microsoft Windows XP
Product(s):
Definition Synopsis
  • win xp sp3/version
  • Microsoft Windows XP (x86) SP3 is installed
  • AND Check if the version of win32k.sys is less than 5.1.2600.6228
  • OR win xp sp2/server 2003 sp2/version
  • either OS
  • Microsoft Windows XP x64 Edition SP2 is installed
  • OR Microsoft Windows Server 2003 (ia64) SP2 is installed
  • OR Microsoft Windows Server 2003 SP2 (x86) is installed
  • OR Microsoft Windows Server 2003 SP2 (x64) is installed
  • AND Check if the version of win32k.sys is less than 5.2.3790.5004
  • OR vista/server 2008/versions
  • either os
  • Microsoft Windows Vista x64 Edition Service Pack 2 is installed
  • OR Microsoft Windows Vista (32-bit) Service Pack 2 is installed
  • OR Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed
  • OR Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed
  • OR Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed
  • AND GDR/LDR
  • Check if the version of win32k.sys is less than 6.0.6002.18633
  • OR LDR range
  • Check if the version of win32k.sys is less than 6.0.6002.22860
  • AND the version of win32k.sys is greater than or equal to 6.0.6002.22000
  • OR win 7/server 2008 R2/versions
  • either os
  • Microsoft Windows 7 is installed
  • OR Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed
  • OR Microsoft Windows Server 2008 R2 x64 Edition is installed
  • AND GDR/LDR
  • Check if the version of win32k.sys is less than 6.1.7600.17024
  • OR LDR range
  • Check if the version of win32k.sys is less than 6.1.7600.21215
  • AND the version of win32k.sys is greater than or equal to 6.1.7600.20000
  • OR win 7 sp1/server 2008 R2 sp1/versions
  • either os
  • Microsoft Windows Server 2008 R2 Itanium-Based Edition Service Pack 1 is installed
  • OR Microsoft Windows Server 2008 R2 x64 Service Pack 1 is installed
  • OR Microsoft Windows 7 (32-bit) Service Pack 1 is installed
  • OR Microsoft Windows 7 x64 Service Pack 1 is installed
  • AND GDR/LDR
  • Check if the version of win32k.sys is less than 6.1.7601.17842
  • OR LDR range
  • Check if the version of win32k.sys is less than 6.1.7601.21995
  • AND the version of win32k.sys is greater than or equal to 6.1.7601.21000
  • BACK