Oval Definition:oval:org.mitre.oval:def:22464
Revision Date:2014-08-18Version:47
Title:Memory corruption vulnerability in Microsoft Internet Explorer (CVE-2014-0287) - MS14-010
Description:Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-0281.
Family:windowsClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2014-0287
Platform(s):Microsoft Windows 7
Microsoft Windows 8
Microsoft Windows 8.1
Microsoft Windows Server 2003
Microsoft Windows Server 2008
Microsoft Windows Server 2008 R2
Microsoft Windows Server 2012
Microsoft Windows Server 2012 R2
Microsoft Windows Vista
Microsoft Windows XP
Product(s):Microsoft Internet Explorer 10
Microsoft Internet Explorer 11
Microsoft Internet Explorer 8
Microsoft Internet Explorer 9
Definition Synopsis
  • ie8
  • Microsoft Internet Explorer 8 is installed
  • AND vista/2008/win7/2008r2//versions
  • vista/2008/versions
  • either os
  • Microsoft Windows Vista (32-bit) is installed
  • OR Microsoft Windows Vista x64 Edition is installed
  • OR Microsoft Windows Server 2008 (32-bit) is installed
  • OR Microsoft Windows Server 2008 (64-bit) is installed
  • AND gdr/ldr
  • Check if the version of mshtml.dll is less than 8.0.6001.19499
  • OR win7/2008 r2/version
  • either os
  • Microsoft Windows 7 x64 Edition is installed
  • OR Microsoft Windows 7 (32-bit) is installed
  • OR Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed
  • OR Microsoft Windows Server 2008 R2 x64 Edition is installed
  • AND gdr/ldr
  • Check if the version of mshtml.dll is less than 8.0.7601.18365
  • OR xp/2003/version
  • either os
  • Microsoft Windows XP x64 is installed
  • OR Microsoft Windows XP (32-bit) is installed
  • OR Microsoft Windows Server 2003 (32-bit) is installed
  • OR Microsoft Windows Server 2003 (x64) is installed
  • AND Check if the version of mshtml.dll is less than 8.0.6001.23562
  • OR ie9
  • either os
  • Microsoft Windows Vista (32-bit) is installed
  • OR Microsoft Windows Vista x64 Edition is installed
  • OR Microsoft Windows Server 2008 (32-bit) is installed
  • OR Microsoft Windows Server 2008 (64-bit) is installed
  • OR Microsoft Windows 7 x64 Edition is installed
  • OR Microsoft Windows 7 (32-bit) is installed
  • OR Microsoft Windows Server 2008 R2 x64 Edition is installed
  • AND gdr/ldr
  • Check if the version of mshtml.dll is less than 9.0.8112.16533
  • OR ldr range
  • Check if the version of mshtml.dll is less than 9.0.8112.20644
  • AND Check if the version of mshtml.dll is greater than or equal to 9.0.8112.20000
  • AND Microsoft Internet Explorer 9 is installed
  • OR ie10
  • either os
  • Microsoft Windows 7 x64 Edition is installed
  • OR Microsoft Windows 7 (32-bit) is installed
  • OR Microsoft Windows Server 2008 R2 x64 Edition is installed
  • OR Microsoft Windows 8 (x86) is installed
  • OR Microsoft Windows 8 (x64) is installed
  • OR Microsoft Windows Server 2012 (64-bit) is installed
  • AND gdr/ldr
  • Check if the version of mshtml.dll is less than 10.0.9200.16798
  • OR ldr range
  • Check if the version of mshtml.dll is less than 10.0.9200.20916
  • AND Check if the version of mshtml.dll is greater than or equal to 10.0.9200.20000
  • AND Microsoft Internet Explorer 10 is installed
  • OR ie11
  • Microsoft Internet Explorer 11 is installed
  • AND either os
  • Microsoft Windows 7 x64 Edition is installed
  • OR Microsoft Windows 7 (32-bit) is installed
  • OR Microsoft Windows Server 2008 R2 x64 Edition is installed
  • OR Microsoft Windows 8.1 (x64) is installed
  • OR Microsoft Windows 8.1 (x86) is installed
  • OR Microsoft Windows Server 2012 R2 is installed
  • AND Check if the version of mshtml.dll is less than 11.0.9600.16518
  • BACK