Oval Definition:	oval:org.mitre.oval:def:17071
Revision Date: 2014-08-18 Version: 25 Title: Array allocation vulnerability in the Common Language Runtime (CLR) in Microsoft .NET Framework - MS13-052 Description: The Common Language Runtime (CLR) in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 on 64-bit platforms does not properly allocate arrays of structures, which allows remote attackers to execute arbitrary code via a crafted .NET Framework application that changes array data, aka "Array Allocation Vulnerability." Family: windows Class: vulnerability Status: ACCEPTED Reference(s): CVE-2013-3134 Platform(s): Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012 Microsoft Windows Vista Microsoft Windows XP Product(s): Microsoft .NET Framework 2.0 Microsoft .NET Framework 3.5 Microsoft .NET Framework 3.5.1 Microsoft .NET Framework 4.0 Microsoft .NET Framework 4.5 Definition Synopsis .net 2.0 sp2/xp/server 2003/versions either os Microsoft Windows XP x64 is installed OR Microsoft Windows XP (32-bit) is installed OR Microsoft Windows Server 2003 (32-bit) is installed OR Microsoft Windows Server 2003 (x64) is installed OR Microsoft Windows Server 2003 (ia64) Gold is installed AND Microsoft .NET Framework 2.0 Service Pack 2 is installed AND either file versions GDR/LDR Check if the version of mscorlib.dll is less than 2.0.50727.3649 OR ldr range Check if the version of mscorlib.dll is less than 2.0.50727.7026 AND Check if the version of mscorlib.dll is greater than or equal to 2.0.50727.7000 OR .net 2.0 sp2/vista/server 2008/versions either os Microsoft Windows Vista x64 Edition is installed OR Microsoft Windows Vista (32-bit) is installed OR Microsoft Windows Server 2008 (64-bit) is installed OR Microsoft Windows Server 2008 (32-bit) is installed OR Microsoft Windows Server 2008 (ia-64) is installed AND Microsoft .NET Framework 2.0 Service Pack 2 is installed AND either file versions Check if the version of mscorlib.dll is less than 2.0.50727.4241 OR ldr range Check if the version of mscorlib.dll is less than 2.0.50727.7025 AND Check if the version of mscorlib.dll is greater than or equal to 2.0.50727.7000 OR .net 3.5/win8/server 2012/versions either os Microsoft Windows 8 (x64) is installed OR Microsoft Windows Server 2012 (64-bit) is installed OR Microsoft Windows 8 (x86) is installed AND Microsoft .NET Framework 3.5 SP1 is installed AND either file versions Check if the version of mscorlib.dll is less than 2.0.50727.6407 OR ldr range Check if the version of mscorlib.dll is less than 2.0.50727.7025 AND Check if the version of mscorlib.dll is greater than or equal to 2.0.50727.7000 OR .net 3.5.1/win 7/server 2008 R2/versions either os Microsoft Windows 7 (32-bit) is installed OR Microsoft Windows 7 x64 Edition is installed OR Microsoft Windows Server 2008 R2 x64 Edition is installed OR Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed AND Microsoft .NET Framework 3.5 SP1 is installed AND either file versions Check if the version of mscorlib.dll is less than 2.0.50727.5472 OR ldr range Check if the version of mscorlib.dll is less than 2.0.50727.7025 AND Check if the version of mscorlib.dll is greater than or equal to 2.0.50727.7000 OR .net 4.0/win xp.server 2003/vista/server 2008/win 7/server 2008 R2/versions either os Microsoft Windows XP x64 is installed OR Microsoft Windows XP (32-bit) is installed OR Microsoft Windows Server 2003 (32-bit) is installed OR Microsoft Windows Server 2003 (x64) is installed OR Microsoft Windows Server 2003 (ia64) Gold is installed OR Microsoft Windows Vista x64 Edition is installed OR Microsoft Windows Vista (32-bit) is installed OR Microsoft Windows Server 2008 (64-bit) is installed OR Microsoft Windows Server 2008 (32-bit) is installed OR Microsoft Windows Server 2008 (ia-64) is installed OR Microsoft Windows 7 (32-bit) is installed OR Microsoft Windows 7 x64 Edition is installed OR Microsoft Windows Server 2008 R2 x64 Edition is installed OR Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed AND Microsoft .NET Framework 4.0 is installed AND either file versions Check if the version of mscorlib.dll is less than 4.0.30319.1008 OR ldr range Check if the version of mscorlib.dll is less than 4.0.30319.2012 AND Check if the version of mscorlib.dll is greater than or equal to 4.0.30319.2000 OR .net 4.5/vista/server 2008/win 7/server 2008 R2/versions either os Microsoft Windows Vista x64 Edition is installed OR Microsoft Windows Vista (32-bit) is installed OR Microsoft Windows Server 2008 (64-bit) is installed OR Microsoft Windows Server 2008 (32-bit) is installed OR Microsoft Windows 7 (32-bit) is installed OR Microsoft Windows 7 x64 Edition is installed OR Microsoft Windows Server 2008 R2 x64 Edition is installed AND Microsoft .NET Framework 4.5 is installed AND either file versions Check if the version of mscorlib.dll is less than 4.0.30319.18052 OR ldr range Check if the version of mscorlib.dll is less than 4.0.30319.19080 AND Check if the version of mscorlib.dll is greater than or equal to 4.0.30319.19000 OR .net 4.5/win 8/server 2012/versions either os Microsoft Windows 8 (x64) is installed OR Microsoft Windows Server 2012 (64-bit) is installed OR Microsoft Windows 8 (x86) is installed AND Microsoft .NET Framework 4.5 is installed AND either file versions Check if the version of mscorlib.dll is less than 4.0.30319.18051 OR ldr range Check if the version of mscorlib.dll is less than 4.0.30319.19079 AND Check if the version of mscorlib.dll is greater than or equal to 4.0.30319.19000
BACK