Oval Definition:	oval:org.mitre.oval:def:16361
Revision Date: 2014-08-18 Version: 46 Title: Internet Explorer Use After Free Vulnerability - MS13-008 Description: Use-after-free vulnerability in Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to an object that (1) was not properly allocated or (2) is deleted, as demonstrated by a CDwnBindInfo object, and exploited in the wild in December 2012. Family: windows Class: vulnerability Status: ACCEPTED Reference(s): CVE-2012-4792 Platform(s): Microsoft Windows 7 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows XP Product(s): Microsoft Internet Explorer 6 Microsoft Internet Explorer 7 Microsoft Internet Explorer 8 Definition Synopsis IE6 + vulnerable (OS + file versions) Microsoft Internet Explorer 6 is installed AND Vulnerable OS's and their file versions XP(X86 + vulnerable file) Microsoft Windows XP (32-bit) is installed AND Check if version of Mshtml.dll is less than 6.0.2900.6325 OR 2k3/XP X64 and vulnerable file 2k3/XP X64 Microsoft Windows XP x64 is installed OR Microsoft Windows Server 2003 (32-bit) is installed OR Microsoft Windows Server 2003 (x64) is installed OR Microsoft Windows Server 2003 (ia64) Gold is installed AND Check if version of Mshtml.dll is less than 6.0.3790.5098 OR IE7 + vulnerable (OS + file versions) Microsoft Internet Explorer 7 is installed AND Vulnerable OS's and their file versions XP /2k3 and vulnerable files XP/2k3 Microsoft Windows XP (32-bit) is installed OR Microsoft Windows XP x64 is installed OR Microsoft Windows Server 2003 (32-bit) is installed OR Microsoft Windows Server 2003 (x64) is installed OR Microsoft Windows Server 2003 (ia64) Gold is installed AND LDR/GDR Check if version of Mshtml.dll is less than 7.0.6000.17117 OR Vista/2K8 and vulnerable files Vista/2k8 Microsoft Windows Vista (32-bit) is installed OR Microsoft Windows Vista x64 Edition is installed OR Microsoft Windows Server 2008 (32-bit) is installed OR Microsoft Windows Server 2008 (64-bit) is installed OR Microsoft Windows Server 2008 (ia-64) is installed AND LDR/GDR Check if version of Mshtml.dll is less than 7.0.6002.18747 OR IE8 + vulnerable (OS + file versions) Microsoft Internet Explorer 8 is installed AND Vulnerable OS's and their file versions XP/2k3/Vista/2k8 and vulnerable files XP/2k3/Vista/2k8 Microsoft Windows XP (32-bit) is installed OR Microsoft Windows XP x64 is installed OR Microsoft Windows Server 2003 (32-bit) is installed OR Microsoft Windows Server 2003 (x64) is installed OR Microsoft Windows Vista (32-bit) is installed OR Microsoft Windows Vista x64 Edition is installed OR Microsoft Windows Server 2008 (32-bit) is installed OR Microsoft Windows Server 2008 (64-bit) is installed AND LDR/GDR Check if version of Mshtml.dll is less than 8.0.6001.19394 OR Win7/R2 and vulnerable files Win7/R2 Microsoft Windows 7 is installed OR Microsoft Windows Server 2008 R2 x64 Edition is installed OR Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed AND LDR/GDR Check if version of Mshtml.dll is less than 8.0.7600.17185 OR Win7/R2 and vulnerable files Win7/R2 Microsoft Windows 7 (32-bit) is installed OR Microsoft Windows 7 x64 Edition is installed OR Microsoft Windows Server 2008 R2 x64 Edition is installed OR Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed AND LDR/GDR check Check if version of Mshtml.dll is less than 8.0.7601.18021
BACK