Oval Definition:oval:org.mitre.oval:def:22230
Revision Date:2014-08-18Version:46
Title:Memory corruption vulnerability in Microsoft Internet Explorer (CVE-2014-0279) - MS14-010
Description:Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-0277 and CVE-2014-0278.
Family:windowsClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2014-0279
Platform(s):Microsoft Windows 7
Microsoft Windows Server 2003
Microsoft Windows Server 2008
Microsoft Windows Server 2008 R2
Microsoft Windows Vista
Microsoft Windows XP
Product(s):Microsoft Internet Explorer 8
Definition Synopsis
  • Microsoft Internet Explorer 8 is installed
  • AND vista/2008/win7/2008r2//versions
  • vista/2008/versions
  • either os
  • Microsoft Windows Vista (32-bit) is installed
  • OR Microsoft Windows Vista x64 Edition is installed
  • OR Microsoft Windows Server 2008 (32-bit) is installed
  • OR Microsoft Windows Server 2008 (64-bit) is installed
  • AND gdr/ldr
  • Check if the version of mshtml.dll is less than 8.0.6001.19499
  • OR ldr range
  • Check if the version of mshtml.dll is less than 8.0.6001.23562
  • AND Check for mshtml.dll version greater than or equal to 8.0.6001.23000
  • OR win7/2008 r2/version
  • either os
  • Microsoft Windows 7 x64 Edition is installed
  • OR Microsoft Windows 7 (32-bit) is installed
  • OR Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed
  • OR Microsoft Windows Server 2008 R2 x64 Edition is installed
  • AND gdr/ldr
  • Check if the version of mshtml.dll is less than 8.0.7601.18365
  • OR ldr range
  • Check if the version of mshtml.dll is less than 8.0.7601.22567
  • AND Check if the version of mshtml.dll is greater than or equal to 8.0.7601.22000
  • OR xp/2003/version
  • either os
  • Microsoft Windows XP x64 is installed
  • OR Microsoft Windows XP (32-bit) is installed
  • OR Microsoft Windows Server 2003 (32-bit) is installed
  • OR Microsoft Windows Server 2003 (x64) is installed
  • AND Check if the version of mshtml.dll is less than 8.0.6001.23562
  • BACK