Oval Definition:	oval:org.mitre.oval:def:2109
Revision Date: 2014-02-24 Version: 46 Title: ActiveX Object Vulnerability Description: The tblinf32.dll (aka vstlbinf.dll) ActiveX control for Internet Explorer 5.01, 6 SP1, and 7 uses an incorrect IObjectsafety implementation, which allows remote attackers to execute arbitrary code by requesting the HelpString property, involving a crafted DLL file argument to the TypeLibInfoFromFile function, which overwrites the HelpStringDll property to call the DLLGetDocumentation function in another DLL file, aka "ActiveX Object Vulnerability." Family: windows Class: vulnerability Status: ACCEPTED Reference(s): CVE-2007-2216 Platform(s): Microsoft Windows 2000 Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows XP Product(s): Microsoft Internet Explorer Definition Synopsis IE 5.01,SP4 on Win2k,SP4 Microsoft Windows 2000 SP4 or later is installed AND Microsoft Internet Explorer 5.01 SP4 is installed AND the version of mshtml.dll is less than 5.0.3854.1200 OR IE 6 on Win 2k, SP4 Microsoft Windows 2000 SP4 or later is installed AND Internet Explorer 6 Service Pack 1 is installed AND the version of mshtml.dll is less than 6.0.2800.1597 OR IE 6 on Win XP SP2 Microsoft Windows XP SP2 or later is installed AND Microsoft Internet Explorer 6 is installed AND the version of mshtml.dll is less than 6.0.2900.3157 OR IE 6 on Win S03 SP1 Microsoft Windows Server 2003 SP1 (x86) is installed OR Microsoft Windows Server 2003 (x64) is installed OR Microsoft Windows Server 2003 SP1 for Itanium is installed AND Microsoft Internet Explorer 6 is installed AND the version of mshtml.dll is less than 6.0.3790.2954 OR IE 6 on Win S03 SP2 Microsoft Windows Server 2003 SP2 (x86) is installed OR Microsoft Windows Server 2003 SP2 (x64) is installed OR Microsoft Windows Server 2003 (ia64) SP2 is installed AND Microsoft Internet Explorer 6 is installed AND the version of mshtml.dll is less than 6.0.3790.4106 OR IE 6 on Win XP SP1 (64-bit) Microsoft Windows XP SP1 (64-bit) is installed AND Microsoft Internet Explorer 6 is installed AND the version of mshtml.dll is less than 6.0.3790.2954 OR IE 6 on Win XP SP2 (64-bit) Microsoft Internet Explorer 6 is installed AND the version of mshtml.dll is less than 6.0.3790.4106 AND Microsoft Windows XP x64 Edition SP2 is installed OR IE 7 on Windows XP and S03 Windows XP or Server 2003 is installed Microsoft Windows XP SP2 or later is installed OR Microsoft Windows XP SP1 (64-bit) is installed OR Microsoft Windows Server 2003 SP1 (x86) is installed OR Microsoft Windows Server 2003 SP2 (x86) is installed OR Microsoft Windows XP x64 Edition SP2 is installed AND Microsoft Internet Explorer 7 is installed AND the version of mshtml.dll is less than 7.0.6000.16525 OR IE 7 on Vista Microsoft Windows Vista is installed AND Microsoft Internet Explorer 7 is installed AND the version of mshtml.dll is less than 7.0.6000.16527
BACK