Oval Definition:	oval:org.mitre.oval:def:18031
Revision Date: 2014-08-18 Version: 48 Title: Elevation of privilege vulnerability in Internet Explorer - CVE-2013-3186 MS13-059 Description: The Protected Mode feature in Microsoft Internet Explorer 7 through 10 on Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT does not properly implement the Integrity Access Level (aka IL) protection mechanism, which allows remote attackers to obtain medium-integrity privileges by leveraging access to a low-integrity process, aka "Process Integrity Level Assignment Vulnerability." Family: windows Class: vulnerability Status: ACCEPTED Reference(s): CVE-2013-3186 Platform(s): Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012 Microsoft Windows Vista Product(s): Microsoft Internet Explorer 10 Microsoft Internet Explorer 7 Microsoft Internet Explorer 8 Microsoft Internet Explorer 9 Definition Synopsis ie7 Microsoft Internet Explorer 7 is installed AND either os Microsoft Windows Vista (32-bit) is installed OR Microsoft Windows Vista x64 Edition is installed OR Microsoft Windows Server 2008 (ia-64) is installed OR Microsoft Windows Server 2008 (32-bit) is installed OR Microsoft Windows Server 2008 (64-bit) is installed AND gdr/ldr Check if the version of mshtml.dll is less than 7.0.6002.18891 OR ldr range Check if the version of mshtml.dll is less than 7.0.6002.23164 AND Check if the version of mshtml.dll is greater than or equal to 7.0.6002.23000 OR ie 8 on win xp/2003/vista/2008/win 7/2008 R2 Microsoft Internet Explorer 8 is installed AND either os Microsoft Windows Vista x64 Edition is installed OR Microsoft Windows Vista (32-bit) is installed OR Microsoft Windows Server 2008 (64-bit) is installed OR Microsoft Windows Server 2008 (32-bit) is installed AND gdr/ldr Check if the version of mshtml.dll is less than 8.0.6001.19453 OR ldr range Check if the version of mshtml.dll is less than 8.0.6001.23515 AND Check for mshtml.dll version greater than or equal to 8.0.6001.23000 OR win 7/server 2008 r2 either os Microsoft Windows 7 (32-bit) is installed OR Microsoft Windows 7 x64 Edition is installed OR Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed OR Microsoft Windows Server 2008 R2 x64 Edition is installed AND gdr.ldr Check if the version of mshtml.dll is less than 8.0.7601.18210 OR ldr range Check if the version of mshtml.dll is less than 8.0.7601.22389 AND Check if the version of mshtml.dll is greater than or equal to 8.0.7601.22000 OR ie 9 on winvista/2008/win 7/2008 r2 Microsoft Internet Explorer 9 is installed AND either os Microsoft Windows Vista x64 Edition is installed OR Microsoft Windows Vista (32-bit) is installed OR Microsoft Windows Server 2008 (64-bit) is installed OR Microsoft Windows Server 2008 (32-bit) is installed OR Microsoft Windows 7 x64 Edition is installed OR Microsoft Windows 7 (32-bit) is installed OR Microsoft Windows Server 2008 R2 x64 Edition is installed AND gdr/ldr Check if the version of mshtml.dll is less than 9.0.8112.16502 OR ldr range Check if the version of mshtml.dll is less than 9.0.8112.20613 AND Check if the version of mshtml.dll is greater than or equal to 9.0.8112.20000 OR ie 10 on win 7/2008 r2/win 8/server 2012 Microsoft Internet Explorer 10 is installed AND either os Microsoft Windows 7 x64 Edition is installed OR Microsoft Windows 7 (32-bit) is installed OR Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed OR Microsoft Windows Server 2008 R2 x64 Edition is installed OR Microsoft Windows 8 (x86) is installed OR Microsoft Windows 8 (x64) is installed OR Microsoft Windows Server 2012 (64-bit) is installed AND gdr/ldr Check if the version of mshtml.dll is less than 10.0.9200.16660 OR ldr range Check if the version of mshtml.dll is less than 10.0.9200.20768 AND Check if the version of mshtml.dll is greater than or equal to 10.0.9200.20000
BACK