Oval Definition:oval:org.mitre.oval:def:18269
Revision Date:2014-08-18Version:47
Title:Memory corruption vulnerability in Internet Explorer - CVE-2013-3191 MS13-059
Description:Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3187 and CVE-2013-3193.
Family:windowsClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2013-3191
Platform(s):Microsoft Windows 7
Microsoft Windows 8
Microsoft Windows Server 2008
Microsoft Windows Server 2008 R2
Microsoft Windows Server 2012
Microsoft Windows Vista
Product(s):Microsoft Internet Explorer 10
Microsoft Internet Explorer 9
Definition Synopsis
  • ie 9 on winvista/2008/win 7/2008 r2
  • Microsoft Internet Explorer 9 is installed
  • AND either os
  • Microsoft Windows Vista x64 Edition is installed
  • OR Microsoft Windows Vista (32-bit) is installed
  • OR Microsoft Windows Server 2008 (64-bit) is installed
  • OR Microsoft Windows Server 2008 (32-bit) is installed
  • OR Microsoft Windows 7 x64 Edition is installed
  • OR Microsoft Windows 7 (32-bit) is installed
  • OR Microsoft Windows Server 2008 R2 x64 Edition is installed
  • AND gdr/ldr
  • Check if the version of mshtml.dll is less than 9.0.8112.16502
  • OR ldr range
  • Check if the version of mshtml.dll is less than 9.0.8112.20613
  • AND Check if the version of mshtml.dll is greater than or equal to 9.0.8112.20000
  • OR ie 10 on win 7/2008 r2/win 8/server 2012
  • Microsoft Internet Explorer 10 is installed
  • AND either os
  • Microsoft Windows 7 x64 Edition is installed
  • OR Microsoft Windows 7 (32-bit) is installed
  • OR Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed
  • OR Microsoft Windows Server 2008 R2 x64 Edition is installed
  • OR Microsoft Windows 8 (x86) is installed
  • OR Microsoft Windows 8 (x64) is installed
  • OR Microsoft Windows Server 2012 (64-bit) is installed
  • AND gdr/ldr
  • Check if the version of mshtml.dll is less than 10.0.9200.16660
  • OR ldr range
  • Check if the version of mshtml.dll is less than 10.0.9200.20768
  • AND Check if the version of mshtml.dll is greater than or equal to 10.0.9200.20000
  • BACK