Oval Definition:	oval:org.mitre.oval:def:1902
Revision Date: 2014-02-24 Version: 48 Title: Language Pack Installation Vulnerability Description: Race condition in Microsoft Internet Explorer 5.01, 6, and 7 allows remote attackers to execute arbitrary code by causing Internet Explorer to install multiple language packs in a way that triggers memory corruption, aka "Language Pack Installation Vulnerability." Family: windows Class: vulnerability Status: ACCEPTED Reference(s): CVE-2007-3027 Platform(s): Microsoft Windows 2000 Microsoft Windows Server 2003 Microsoft Windows XP Product(s): Microsoft Internet Explorer Definition Synopsis IE 5.01,SP4 on Win2k,SP4 Microsoft Windows 2000 SP4 or later is installed AND Microsoft Internet Explorer 5.01 SP4 is installed AND the version of Mshtml.dll is less than 5.0.3853.3000 OR IE 6 on Win 2k, SP4 Microsoft Windows 2000 SP4 or later is installed AND Internet Explorer 6 Service Pack 1 is installed AND the version of Mshtml.dll is less than 6.0.2800.1595 OR IE 6 on Win XP SP2 Microsoft Windows XP SP2 or later is installed AND Microsoft Internet Explorer 6 is installed AND the version of Mshtml.dll is less than 6.0.2900.3132 OR IE 6 on Win 2k3 SP1 Microsoft Windows Server 2003 SP1 (x86) is installed AND Microsoft Internet Explorer 6 is installed AND the version of Mshtml.dll is less than 6.0.3790.2920 OR IE 6 on Win 2k3 SP2 Microsoft Windows Server 2003 SP2 (x86) is installed AND Microsoft Internet Explorer 6 is installed AND the version of Mshtml.dll is less than 6.0.3790.4064 OR IE 7 on Win XP SP2 Microsoft Windows XP SP2 or later is installed AND Microsoft Internet Explorer 7 is installed AND the version of Mshtml.dll is less than 7.0.6000.16481 OR IE 7 on Win 2k3 SP1 or SP2 Win 2k3 SP1 or SP2 Microsoft Windows Server 2003 SP1 (x86) is installed OR Microsoft Windows Server 2003 SP2 (x86) is installed AND Microsoft Internet Explorer 7 is installed AND the version of Mshtml.dll is less than 7.0.6000.16481 OR IE 6 on Win XP SP2 (64-bit) Microsoft Internet Explorer 6 is installed AND the version of Mshtml.dll is less than 6.0.3790.4064 AND Microsoft Windows XP x64 Edition SP2 is installed OR IE 6 on Win XP SP1 (64-bit) Microsoft Windows XP SP1 (64-bit) is installed AND Microsoft Internet Explorer 6 is installed AND the version of Mshtml.dll is less than 6.0.3790.2920
BACK