Oval Definition:	oval:org.mitre.oval:def:15852
Revision Date: 2014-08-18 Version: 46 Title: OnMove Use After Free Vulnerability - MS12-063 Description: Use-after-free vulnerability in Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to an object that (1) was not properly initialized or (2) is deleted, aka "OnMove Use After Free Vulnerability." Family: windows Class: vulnerability Status: ACCEPTED Reference(s): CVE-2012-1529 Platform(s): Microsoft Windows 7 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows XP Product(s): Microsoft Internet Explorer 8 Microsoft Internet Explorer 9 Definition Synopsis IE8 + vulnerable (OS + file versions) Microsoft Internet Explorer 8 is installed AND Vulnerable OS's and their file versions XP/2k3/Vista/2k8 and vulnerable files XP/2k3/Vista/2k8 Microsoft Windows XP (32-bit) is installed OR Microsoft Windows XP x64 is installed OR Microsoft Windows Server 2003 (32-bit) is installed OR Microsoft Windows Server 2003 (x64) is installed OR Microsoft Windows Server 2008 (32-bit) is installed OR Microsoft Windows Server 2008 (64-bit) is installed OR Microsoft Windows Vista (32-bit) is installed OR Microsoft Windows Vista x64 Edition is installed AND LDR/GDR Check if the version of mshtml.dll is less than 8.0.6001.19328 OR Win7/R2 and vulnerable files Win7/R2 Microsoft Windows 7 is installed OR Microsoft Windows Server 2008 R2 x64 Edition is installed OR Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed AND LDR/GDR Check if the version of mshtml.dll is less than 8.0.7600.17115 OR Win7/R2 and vulnerable files Win7/R2 Microsoft Windows 7 (32-bit) is installed OR Microsoft Windows 7 x64 Edition is installed OR Microsoft Windows Server 2008 R2 x64 Edition is installed OR Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed AND LDR/GDR Check if the version of mshtml.dll is less than 8.0.7601.17940 OR IE9 + vulnerable (OS + file versions) Microsoft Internet Explorer 9 is installed AND Vista/2K8/Win7/R2 Microsoft Windows 7 (32-bit) is installed OR Microsoft Windows 7 x64 Edition is installed OR Microsoft Windows Server 2008 R2 x64 Edition is installed OR Microsoft Windows Server 2008 (32-bit) is installed OR Microsoft Windows Server 2008 (64-bit) is installed OR Microsoft Windows Vista (32-bit) is installed OR Microsoft Windows Vista x64 Edition is installed OR Microsoft Windows 7 is installed AND LDR/GDR Check if the version of mshtml.dll is less than 9.0.8112.16450 OR Check for LDR Mshtml.dll version is greater than or equal to 9.0.8112.20000 AND Check if the version of mshtml.dll is less than 9.0.8112.20557
BACK