Oval Definition:	oval:org.mitre.oval:def:18364
Revision Date: 2013-09-30 Version: 44 Title: Windows Kernel Memory Corruption Vulnerability - MS13-063 Description: The NT Virtual DOS Machine (NTVDM) subsystem in the kernel in Microsoft Windows XP SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, Windows 7 SP1, and Windows 8 on 32-bit platforms does not properly validate kernel-memory addresses, which allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted application, aka "Windows Kernel Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3196 and CVE-2013-3198. Family: windows Class: vulnerability Status: ACCEPTED Reference(s): CVE-2013-3197 Platform(s): Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Vista Microsoft Windows XP Product(s): Definition Synopsis x86 XP and vulnerable file version Microsoft Windows XP (x86) SP3 is installed AND Check if the version of Ntoskrnl.exe is less than 5.1.2600.6419 OR x86 2003 and vulnerable file version Microsoft Windows Server 2003 SP2 (x86) is installed AND Check if the version of Ntoskrnl.exe is less than 5.2.3790.5190 OR Vista/2008 and vulnerable file version Vista/2008 Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed OR Microsoft Windows Vista (32-bit) Service Pack 2 is installed AND Check for vulnerable version Check if the version of Ntoskrnl.exe is less than 6.0.6002.18881 OR Check for LDR range Check if the version of Ntoskrnl.exe is less than 6.0.6002.23154 AND Check if the version of Ntoskrnl.exe is greater than or equal to 6.0.6002.23000 OR 7 and vulnerable file version Microsoft Windows 7 (32-bit) Service Pack 1 is installed AND Check for vulnerable version Check if the version of Ntoskrnl.exe is less than 6.1.7601.18205 OR Check for LDR range Check if the version of Ntoskrnl.exe is greater than or equal to 6.1.7601.22000 AND Check if the version of Ntoskrnl.exe is less than 6.1.7601.22379 OR 8 and vulnerable file version Microsoft Windows 8 (x86) is installed AND Check for vulnerable version Check if the version of Ntoskrnl.exe is less than 6.2.9200.16659 OR Check for LDR range Check if the version of Ntoskrnl.exe is less than 6.2.9200.20772 AND Check if the version of Ntoskrnl.exe is greater than or equal to 6.2.9200.20000
BACK