Oval Definition:	oval:org.mitre.oval:def:20216
Revision Date: 2014-08-18 Version: 47 Title: Internet Explorer Elevation of Privilege Vulnerability (CVE-2013-5045) - MS13-097 Description: Microsoft Internet Explorer 10 and 11 allows local users to bypass the Protected Mode protection mechanism, and consequently gain privileges, by leveraging the ability to execute sandboxed code, aka "Internet Explorer Elevation of Privilege Vulnerability." Family: windows Class: vulnerability Status: ACCEPTED Reference(s): CVE-2013-5045 Platform(s): Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2 Product(s): Microsoft Internet Explorer 10 Microsoft Internet Explorer 11 Definition Synopsis IE 10 and vulnerable file version Win 7 / R2 / Win 8 / 2k12 and vulnerable file version Microsoft Windows 7 (32-bit) is installed OR Microsoft Windows 7 x64 Edition is installed OR Microsoft Windows Server 2008 R2 x64 Edition is installed OR Microsoft Windows 8 (x64) is installed OR Microsoft Windows 8 (x86) is installed OR Microsoft Windows Server 2012 (64-bit) is installed AND Check for vulnerable version Check for LDR Check if the version of mshtml.dll is less than 10.0.9200.20861 AND Check if the version of mshtml.dll is greater than or equal to 10.0.9200.20000 OR Check if the version of mshtml.dll is less than 10.0.9200.16750 AND Microsoft Internet Explorer 10 is installed OR IE 11 and vulnerable file version Win 8.1 / 2k12 R2 and vulnerable file version Microsoft Windows 7 (32-bit) is installed OR Microsoft Windows 7 x64 Edition is installed OR Microsoft Windows Server 2008 R2 x64 Edition is installed OR Microsoft Windows 8.1 is installed OR Microsoft Windows Server 2012 R2 is installed AND Check if the version of mshtml.dll is less than 11.0.9600.16476 AND Microsoft Internet Explorer 11 is installed
BACK