Oval Definition:	oval:org.mitre.oval:def:20776
Revision Date: 2014-08-18 Version: 48 Title: Internet Explorer Elevation of Privilege Vulnerability (CVE-2013-5046) - MS13-097 Description: Microsoft Internet Explorer 7 through 11 allows local users to bypass the Protected Mode protection mechanism, and consequently gain privileges, by leveraging the ability to execute sandboxed code, aka "Internet Explorer Elevation of Privilege Vulnerability." Family: windows Class: vulnerability Status: ACCEPTED Reference(s): CVE-2013-5046 Platform(s): Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2 Microsoft Windows Vista Microsoft Windows XP Product(s): Microsoft Internet Explorer 10 Microsoft Internet Explorer 11 Microsoft Internet Explorer 7 Microsoft Internet Explorer 8 Microsoft Internet Explorer 9 Definition Synopsis IE 7 and vulnerable file version Microsoft Internet Explorer 7 is installed AND XP / 2k3 / Vista / 2k8 and vulnerable file versions XP / 2K3 and vulnerable file version XP / 2K3 Microsoft Windows XP (32-bit) is installed OR Microsoft Windows XP x64 is installed OR Microsoft Windows Server 2003 (32-bit) is installed OR Microsoft Windows Server 2003 (x64) is installed OR Microsoft Windows Server 2003 (ia64) Gold is installed AND Check if the version of mshtml.dll is less than 7.0.6000.21364 OR Vista / 2k8 and vulnerable file version Vista / 2K8 Microsoft Windows Vista (32-bit) is installed OR Microsoft Windows Vista x64 Edition is installed OR Microsoft Windows Server 2008 (32-bit) is installed OR Microsoft Windows Server 2008 (64-bit) is installed OR Microsoft Windows Server 2008 (ia-64) is installed AND Check for vulnerable version Check if the version of mshtml.dll is less than 7.0.6002.18972 OR IE 8 and vulnerable file version Microsoft Internet Explorer 8 is installed AND XP / 2k3 / Vista / 2k8 / Win 7 / R2 and vulnerable file versions XP / 2K3 and vulnerable file version XP / 2K3 Microsoft Windows XP (32-bit) is installed OR Microsoft Windows XP x64 is installed OR Microsoft Windows Server 2003 (32-bit) is installed OR Microsoft Windows Server 2003 (x64) is installed AND Check if the version of mshtml.dll is less than 8.0.6001.23543 OR Vista / 2k8 and vulnerable file version Vista / 2K8 Microsoft Windows Vista (32-bit) is installed OR Microsoft Windows Vista x64 Edition is installed OR Microsoft Windows Server 2008 (32-bit) is installed OR Microsoft Windows Server 2008 (64-bit) is installed AND Check for vulnerable version Check if the version of mshtml.dll is less than 8.0.6001.19489 OR Win 7 / R2 and vulnerable file version Win 7 / R2 Microsoft Windows 7 (32-bit) is installed OR Microsoft Windows 7 x64 Edition is installed OR Microsoft Windows Server 2008 R2 x64 Edition is installed OR Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed AND Check for vulnerable version Check if the version of mshtml.dll is less than 8.0.7601.18305 OR IE 9 and vulnerable file version Vista / 2K8 / Win 7 / R2 and vulnerable file version Microsoft Windows Vista (32-bit) is installed OR Microsoft Windows Vista x64 Edition is installed OR Microsoft Windows Server 2008 (32-bit) is installed OR Microsoft Windows Server 2008 (64-bit) is installed OR Microsoft Windows 7 (32-bit) is installed OR Microsoft Windows 7 x64 Edition is installed OR Microsoft Windows Server 2008 R2 x64 Edition is installed AND Check for vulnerable version Check for LDR Check if the version of mshtml.dll is less than 9.0.8112.20637 AND Check if the version of mshtml.dll is greater than or equal to 9.0.8112.20000 OR Check if the version of mshtml.dll is less than 9.0.8112.16526 AND Microsoft Internet Explorer 9 is installed OR IE 10 and vulnerable file version Win 7 / R2 / Win 8 / 2k12 and vulnerable file version Microsoft Windows 7 (32-bit) is installed OR Microsoft Windows 7 x64 Edition is installed OR Microsoft Windows Server 2008 R2 x64 Edition is installed OR Microsoft Windows 8 (x64) is installed OR Microsoft Windows 8 (x86) is installed OR Microsoft Windows Server 2012 (64-bit) is installed AND Check for vulnerable version Check for LDR Check if the version of mshtml.dll is less than 10.0.9200.20861 AND Check if the version of mshtml.dll is greater than or equal to 10.0.9200.20000 OR Check if the version of mshtml.dll is less than 10.0.9200.16750 AND Microsoft Internet Explorer 10 is installed OR IE 11 and vulnerable file version Win 8.1 / 2k12 R2 and vulnerable file version Microsoft Windows 7 (32-bit) is installed OR Microsoft Windows 7 x64 Edition is installed OR Microsoft Windows Server 2008 R2 x64 Edition is installed OR Microsoft Windows 8.1 is installed OR Microsoft Windows Server 2012 R2 is installed AND Check if the version of mshtml.dll is less than 11.0.9600.16476 AND Microsoft Internet Explorer 11 is installed
BACK