Oval Definition:	oval:org.mitre.oval:def:15790
Revision Date: 2014-08-18 Version: 46 Title: JavaScript Integer Overflow Remote Code Execution Vulnerability - MS12-052 and MS12-056 Description: Integer overflow in Microsoft Internet Explorer 8 and 9, JScript 5.8, and VBScript 5.8 on 64-bit platforms allows remote attackers to execute arbitrary code by leveraging an incorrect size calculation during object copying, aka "JavaScript Integer Overflow Remote Code Execution Vulnerability." Family: windows Class: vulnerability Status: ACCEPTED Reference(s): CVE-2012-2523 Platform(s): Microsoft Windows 7 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows XP Product(s): JScript 5.8 Microsoft Internet Explorer 8 Microsoft Internet Explorer 9 VBScript 5.8 Definition Synopsis either of the OS/version Win XP X64/Server 2003 x64 Microsoft Windows XP x64 is installed OR Microsoft Windows Server 2003 (x64) is installed AND Microsoft Internet Explorer 8 is installed AND Jscript.dll for JScript 5.8 or later is installed AND Check if the version is less than 5.8.6001.23380 (jscript) OR either of the OS/version Jscript.dll for JScript 5.8 or later is installed AND version check Check if the version is less than 5.8.6001.19293 (jscript) OR LDR range Check if version of jscript.dll is greater than or equal to 5.8.6001.22000 AND Check if the version is less than 5.8.6001.23380 (jscript) AND Microsoft Internet Explorer 8 is installed AND vista x64/server2008 x64 Microsoft Windows Vista x64 Edition is installed OR Microsoft Windows Server 2008 (64-bit) is installed OR either of the OS/version win 7 x64/server 2008 R2 x64/server 2008 R2 ia-64 Microsoft Windows 7 x64 Edition is installed OR Microsoft Windows Server 2008 R2 x64 Edition is installed OR Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed AND Microsoft Internet Explorer 8 is installed AND Jscript.dll for JScript 5.8 or later is installed AND version check Check if the version is less than 5.8.7600.17045 (jscript) OR LDR range the version of Jscript.dll is greater than or equal to 5.8.7600.20000 AND Check if the version is less than 5.8.7600.21238 (jscript) OR either of the OS/version win 7/server 2008 R2 x64/server 2008 R2 ia-64 Microsoft Windows 7 x64 Edition is installed OR Microsoft Windows Server 2008 R2 x64 Edition is installed OR Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed AND Microsoft Internet Explorer 8 is installed AND Jscript.dll for JScript 5.8 or later is installed AND jscript GDR version Check if the version is less than 5.8.7601.17866 (jscript) OR LDR range the version of Jscript.dll is greater than or equal to 5.8.7601.21000 AND Check if the version is less than 5.8.7601.22024 (jscript) OR IE8 and XP/2k3/Vista/2k8/Win7/R2 and vulnerable file versions Microsoft Internet Explorer 8 is installed AND vulnerable os with vulnerable files IE8 and XP/2k3/Vista/2k8 and vulnerable file versions Vulnerable os versions Microsoft Windows XP x64 is installed OR Microsoft Windows Server 2003 (x64) is installed OR Microsoft Windows Server 2008 (64-bit) is installed OR Microsoft Windows Vista (32-bit) is installed OR Microsoft Windows Vista x64 Edition is installed AND Check for LDR/GDR Check if the version of mshtml.dll is less than 8.0.6001.19298 OR (Win7 /R2) and vulnerable file versions Check for vulnerable os versions Microsoft Windows 7 x64 Edition is installed OR Microsoft Windows Server 2008 R2 x64 Edition is installed OR Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed AND Check for LDR/GDR Check if the version of mshtml.dll is less than 8.0.7600.17051 OR Win 7 / 2K8 R2 and vulnerable file version Check for vulnerable os versions Microsoft Windows 7 x64 Edition is installed OR Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed OR Microsoft Windows Server 2008 R2 x64 Edition is installed AND Check for LDR/GDR Check if the version of mshtml.dll is less than 8.0.7601.17874 OR IE9 (Vista/2K8/Win7/R2) and vulnerable file version Microsoft Internet Explorer 9 is installed AND Check for vulnerable OS versions Microsoft Windows 7 x64 Edition is installed OR Microsoft Windows Server 2008 R2 x64 Edition is installed OR Microsoft Windows Vista x64 Edition is installed OR Microsoft Windows Server 2008 (64-bit) is installed AND Check for vulnerable versions Check if the version of mshtml.dll is less than 9.0.8112.16448 OR Check for LDR Mshtml.dll version is greater than or equal to 9.0.8112.20000 AND Check if the version of mshtml.dll is less than 9.0.8112.20554
BACK