Oval Definition:	oval:org.mitre.oval:def:22326
Revision Date: 2014-08-18 Version: 51 Title: Vulnerability in Microsoft XML Core Services could allow information disclosure (CVE-2014-0266) - MS14-005 Description: The XMLHTTP ActiveX controls in XML Core Services 3.0 in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow remote attackers to bypass the Same Origin Policy via a web page that is visited in Internet Explorer, aka "MSXML Information Disclosure Vulnerability." Family: windows Class: vulnerability Status: ACCEPTED Reference(s): CVE-2014-0266 Platform(s): Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2 Microsoft Windows Vista Microsoft Windows XP Product(s): Microsoft XML Core Services 3.0 Definition Synopsis Microsoft XML Core Services 3 is installed AND vulnerable os versions win8/2012/versions either os Microsoft Windows 8 (x64) is installed OR Microsoft Windows 8 (x86) is installed OR Microsoft Windows Server 2012 (64-bit) is installed AND gdr/ldr Check if the version of Msxml3.dll is less than 8.110.9200.16772 OR ldr range Check if the version of Msxml3.dll is less than 8.110.9200.20890 AND Check if the version of msxml3.dll is greater than or equal to 8.110.9200.20000 OR win 8.1/2012 r2/versions either os Microsoft Windows Server 2012 R2 is installed OR Microsoft Windows 8.1 (x64) is installed OR Microsoft Windows 8.1 (x86) is installed AND Check if the version of Msxml3.dll is less than 8.110.9600.16483 OR win xp/2003/version either os Microsoft Windows XP x64 is installed OR Microsoft Windows XP (32-bit) is installed OR Microsoft Windows Server 2003 (ia64) Gold is installed OR Microsoft Windows Server 2003 (32-bit) is installed OR Microsoft Windows Server 2003 (x64) is installed AND Check if the version of Msxml3.dll is less than 8.100.1054.0 OR vista/2008/versions either os Microsoft Windows Vista (32-bit) is installed OR Microsoft Windows Vista x64 Edition is installed OR Microsoft Windows Server 2008 (32-bit) is installed OR Microsoft Windows Server 2008 (ia-64) is installed OR Microsoft Windows Server 2008 (64-bit) is installed AND Check if the version of Msxml3.dll is less than 8.100.5007.0 OR win7/2008 r2/versions either os Microsoft Windows 7 (32-bit) is installed OR Microsoft Windows 7 x64 Edition is installed OR Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed OR Microsoft Windows Server 2008 R2 x64 Edition is installed AND gdr/ldr Check if the version of Msxml3.dll is less than 8.110.7601.18334 OR ldr range Check if the version of Msxml3.dll is less than 8.110.7601.22532 AND Check if version of Msxml3.dll is greater than or equal to 8.110.7601.22000
BACK