Oval Definition:oval:org.mitre.oval:def:21030
Revision Date:2014-09-22Version:11
Title:Token Hijacking Vulnerability (CVE-2013-5054) - MS13-104
Description:Microsoft Office 2013 and 2013 RT allows remote attackers to discover authentication tokens via a crafted response to a file-open request for an Office file on a web site, as exploited in the wild in 2013, aka "Token Hijacking Vulnerability."
Family:windowsClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2013-5054
Platform(s):Microsoft Windows 7
Microsoft Windows 8
Microsoft Windows 8.1
Microsoft Windows Server 2003
Microsoft Windows Server 2008
Microsoft Windows Server 2008 R2
Microsoft Windows Server 2012
Microsoft Windows Server 2012 R2
Microsoft Windows Vista
Microsoft Windows XP
Product(s):Microsoft Office 2013
Definition Synopsis
  • Microsoft Office 2013 is installed
  • AND Check if the version of msores.dll is less than 15.0.4551.1001
  • BACK