Oval Definition:	oval:org.mitre.oval:def:18579
Revision Date: 2013-10-28 Version: 44 Title: Windows Theme File Remote Code Execution Vulnerability - MS13-071 Description: Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, and Windows Server 2008 SP2 allow remote attackers to execute arbitrary code via a crafted screensaver in a theme file, aka "Windows Theme File Remote Code Execution Vulnerability." Family: windows Class: vulnerability Status: ACCEPTED Reference(s): CVE-2013-0810 Platform(s): Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Vista Microsoft Windows XP Product(s): Definition Synopsis win xp sp3 32-bit/version Microsoft Windows XP (x86) SP3 is installed AND Check if the version of Themeui.dll is less than 6.0.2900.6437 OR win xp sp2 64-bit/server 2003 sp2 (32/64/ia64)/version win xp sp2 64-bit/server 2003 sp2 (32/64/ia64) Microsoft Windows Server 2003 (ia64) SP2 is installed OR Microsoft Windows Server 2003 SP2 (x86) is installed OR Microsoft Windows Server 2003 SP2 (x64) is installed OR Microsoft Windows XP x64 Edition SP2 is installed AND Check if the version of Themeui.dll is less than 6.0.3790.5211 OR win vista sp2 x86/x64 and server 2008 sp2 (32/64/ia64)/version win vista sp2 x86/x64 and server 2008 sp2 (32/64/ia64) Microsoft Windows Vista (32-bit) Service Pack 2 is installed OR Microsoft Windows Vista x64 Edition Service Pack 2 is installed OR Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed OR Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed OR Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed AND Themeui.dll - GDR/LDR Check if the version of Themeui.dll is less than 6.0.6002.18888 OR Themeui.dll - LDR Check if the version of Themeui.dll is greater than or equal to 6.0.6002.23000 AND Check if the version of Themeui.dll is less than 6.0.6002.23161
BACK