Oval Definition:	oval:org.mitre.oval:def:22633
Revision Date: 2014-04-21 Version: 44 Title: Win32k Information Disclosure Vulnerability - CVE-2014-0323 (MS14-015) Description: win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to obtain sensitive information from kernel memory or cause a denial of service (system hang) via a crafted application, aka "Win32k Information Disclosure Vulnerability." Family: windows Class: vulnerability Status: ACCEPTED Reference(s): CVE-2014-0323 Platform(s): Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2 Microsoft Windows Vista Microsoft Windows XP Product(s): Definition Synopsis XP (x86)+ vulnerable file version Microsoft Windows XP (x86) SP3 is installed AND Check if the version of win32k.sys is less than 5.1.2600.6514 OR XP X64/2K3(all) and vulnerable file version XP x64 / 2k3 Microsoft Windows XP x64 Edition SP2 is installed OR Microsoft Windows Server 2003 SP2 (x86) is installed OR Microsoft Windows Server 2003 SP2 (x64) is installed OR Microsoft Windows Server 2003 (ia64) SP2 is installed AND Check if the version of win32k.sys is less than 5.2.3790.5296 OR Vista / 2k8 + vulnerable file version Vista / 2K8 Microsoft Windows Vista (32-bit) Service Pack 2 is installed OR Microsoft Windows Vista x64 Edition Service Pack 2 is installed OR Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed OR Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed OR Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed AND Check for vulnerable version Check if the version of win32k.sys is less than 6.0.6002.19036 OR Check for LDR Check if the version of Win32k.sys is greater than or equal to 6.0.6002.23000 AND Check if the version of win32k.sys is less than 6.0.6002.23325 OR Win 7 / R2 + vulnerable file version Win 7 / R2 Microsoft Windows 7 (32-bit) Service Pack 1 is installed OR Microsoft Windows 7 x64 Service Pack 1 is installed OR Microsoft Windows Server 2008 R2 x64 Service Pack 1 is installed OR Microsoft Windows Server 2008 R2 Itanium-Based Edition Service Pack 1 is installed AND Check for vulnerable version Check if the version of win32k.sys is less than 6.1.7601.18388 OR Check for LDR Check if the version of Win32k.sys is greater than or equal to 6.1.7601.22000 AND Check if the version of win32k.sys is less than 6.1.7601.22592 OR Win 8/2k12 and vulnerable file version Win 8 / 2k12 Microsoft Windows 8 (x86) is installed OR Microsoft Windows 8 (x64) is installed OR Microsoft Windows Server 2012 (64-bit) is installed AND Check for vulnerable version Check if the version of win32k.sys is less than 6.2.9200.16817 OR Check for LDR Check if the version of Win32k.sys is greater than or equal to 6.2.9200.20000 AND Check if the version of win32k.sys is less than 6.2.9200.20937 OR Win 8.1 / 2K12 R2and vulnerable file version Win 8.1 / 2k12 R2 Microsoft Windows 8.1 (x86) is installed OR Microsoft Windows 8.1 (x64) is installed OR Microsoft Windows Server 2012 R2 is installed AND Check if the version of win32k.sys is less than 6.3.9600.16650
BACK