Oval Definition:	oval:org.mitre.oval:def:15960
Revision Date: 2014-08-18 Version: 24 Title: WPF reflection optimization vulnerability - MS12-074 Description: The code-optimization feature in the reflection implementation in Microsoft .NET Framework 4 and 4.5 does not properly enforce object permissions, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP) or (2) a crafted .NET Framework application, aka "WPF Reflection Optimization Vulnerability." Family: windows Class: vulnerability Status: ACCEPTED Reference(s): CVE-2012-4777 Platform(s): Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012 Microsoft Windows Vista Microsoft Windows XP Product(s): Microsoft .NET Framework 4.0 Microsoft .NET Framework 4.5 Definition Synopsis .net 4/veersion either os Microsoft Windows 7 (32-bit) is installed OR Microsoft Windows 7 x64 Edition is installed OR Microsoft Windows Vista (32-bit) is installed OR Microsoft Windows Vista x64 Edition is installed OR Microsoft Windows Server 2008 (32-bit) is installed OR Microsoft Windows Server 2008 (64-bit) is installed OR Microsoft Windows Server 2008 R2 x64 Edition is installed OR Microsoft Windows XP x64 is installed OR Microsoft Windows XP (32-bit) is installed OR Microsoft Windows Server 2003 (ia64) Gold is installed OR Microsoft Windows Server 2003 (32-bit) is installed OR Microsoft Windows Server 2003 (x64) is installed AND Microsoft .NET Framework 4.0 is installed AND gdr/ldr Check if the version of presentationcore.dll is less than 4.0.30319.298 OR ldr range Check if the version of presentationcore.dll is less than 4.0.30319.588 AND the version of PresentationCore.dll is greater than or equal to 4.0.30319.400 OR .net 4.5/version either os Microsoft Windows Server 2008 R2 x64 Edition is installed OR Microsoft Windows 7 (32-bit) is installed OR Microsoft Windows 7 x64 Edition is installed OR Microsoft Windows Vista x64 Edition is installed OR Microsoft Windows Vista (32-bit) is installed OR Microsoft Windows Server 2008 (32-bit) is installed OR Microsoft Windows Server 2008 (64-bit) is installed OR Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed AND Microsoft .NET Framework 4.5 is installed AND gdr/ldr Check if the version of presentationcore.dll is less than 4.0.30319.18015 OR ldr range Check if the version of presentationcore.dll is less than 4.0.30319.19020 AND Check if the version of presentationcore.dll is greater than or equal to 4.0.30319.19000 OR windows 8/server 2012/4.5/versions Microsoft .NET Framework 4.5 is installed AND GDR/LDR Check if the version of presentationcore.dll is less than 4.0.30319.18016 OR LDR range Check if the version of presentationcore.dll is greater than or equal to 4.0.30319.19000 AND Check if the version of presentationcore.dll is less than 4.0.30319.19023 AND win 8/server 2012 Microsoft Windows 8 is installed OR Microsoft Windows Server 2012 is installed
BACK