Oval Definition:
oval:org.mitre.oval:def:2190
Revision Date
:
2016-02-19
Version
:
48
Title
:
Windows XP (32-Bit) DirectPlay Denial of Service
Description
:
IDirectPlay4 Application Programming Interface (API) of Microsoft DirectPlay 7.0a thru 9.0b, as used in Windows Server 2003 and earlier allows remote attackers to cause a denial of service (application crash) via a malformed packet.
Family
:
windows
Class
:
vulnerability
Status
:
ACCEPTED
Reference(s)
:
CVE-2004-0202
Platform(s)
:
Microsoft Windows XP
Product(s)
:
DirectX
Definition Synopsis
Windows XP is installed
AND
32-Bit version of Windows is installed
AND
DirectX without KB839643 Installed
DirectX 8.2 without DirectX82-KB839643-x86-ENU.EXE Installed
the version of dplayx.dll is less than 5.2.3677.144
AND
DirectX 8.2 Installed
AND
NOT
Patch DirectX82-KB839643-x86-ENU Installed
OR
DirectX 9.0 without DirectX9-KB839643-x86-ENU.EXE Installed
the version of dplayx.dll is less than 5.3.0.903
AND
DirectX 9.0x Installed
AND
NOT
Patch DirectX90-KB839643-x86-ENU Installed
OR
DirectX 8.1 without WindowsXP-KB839643-x86-ENU.EXE Installed
DirectX 8.1 without WindowsXP-KB839643-x86-ENU.EXE Installed on XP Gold
the version of dplayx.dll is less than 5.1.2600.148
AND
NOT
Win2K/XP/2003 is patched
AND
DirectX 8.1 Installed
AND
NOT
the patch kb839643 is installed
OR
DirectX 8.1 without WindowsXP-KB839643-x86-ENU.EXE Installed on XP SP1
the version of dplayx.dll is less than 5.1.2600.1517
AND
DirectX 8.1x Installed
AND
the patch kb839643 is installed
AND
NOT
Win2K/XP/2003 service pack 1 (or later) is installed
BACK