Oval Definition:oval:org.mitre.oval:def:24648
Revision Date:2014-08-18Version:23
Title:Vulnerability in .NET Framework could allow elevation of privilege - MS14-026
Description:The .NET Remoting implementation in Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, 4.5, and 4.5.1 does not properly restrict memory access, which allows remote attackers to execute arbitrary code via vectors involving malformed objects, aka "TypeFilterLevel Vulnerability."
Family:windowsClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2014-1806
Platform(s):Microsoft Windows 7
Microsoft Windows 8
Microsoft Windows 8.1
Microsoft Windows Server 2003
Microsoft Windows Server 2008
Microsoft Windows Server 2008 R2
Microsoft Windows Server 2012
Microsoft Windows Server 2012 R2
Microsoft Windows Vista
Microsoft Windows XP
Product(s):Microsoft .NET Framework 1.1
Microsoft .NET Framework 2.0
Microsoft .NET Framework 3.5
Microsoft .NET Framework 3.5.1
Microsoft .NET Framework 4.0
Microsoft .NET Framework 4.5
Microsoft .NET Framework 4.5.1
Definition Synopsis
  • .NET 1.1 and vulnerable file
  • Microsoft Windows Server 2003 (32-bit) is installed
  • AND Check if the version of system.runtime.remoting.dll is less than 1.1.4322.2506
  • AND Microsoft .NET Framework 1.1 Service Pack 1 is Installed
  • OR .NET 2.0 and XP / server 2003
  • Either OS
  • Microsoft Windows XP x64 is installed
  • OR Microsoft Windows XP (32-bit) is installed
  • OR Microsoft Windows Server 2003 (ia64) Gold is installed
  • OR Microsoft Windows Server 2003 (32-bit) is installed
  • OR Microsoft Windows Server 2003 (x64) is installed
  • AND Microsoft .NET Framework 2.0 Service Pack 2 is installed
  • AND Either file version
  • Check if the version of system.runtime.remoting.dll is less than 2.0.50727.3659
  • OR ldr range for system.runtime.remoting.dll
  • Check if the version of system.runtime.remoting.dll is less than 2.0.50727.7055
  • AND Check if the version of system.runtime.remoting.dll is greater than or equal to 2.0.50727.7000
  • OR .NET 2.0 and Vista / 2008
  • Either OS
  • Microsoft Windows Vista (32-bit) is installed
  • OR Microsoft Windows Vista x64 Edition is installed
  • OR Microsoft Windows Server 2008 (32-bit) is installed
  • OR Microsoft Windows Server 2008 (ia-64) is installed
  • OR Microsoft Windows Server 2008 (64-bit) is installed
  • AND Microsoft .NET Framework 2.0 Service Pack 2 is installed
  • AND Either file version
  • Check if the version of system.runtime.remoting.dll is less than 2.0.50727.4252
  • OR ldr range for system.runtime.remoting.dll
  • Check if the version of system.runtime.remoting.dll is less than 2.0.50727.7057
  • AND Check if the version of system.runtime.remoting.dll is greater than or equal to 2.0.50727.7000
  • OR .NET 3.5 and Win 8 / server 2012
  • Either OS
  • Microsoft Windows 8 (x64) is installed
  • OR Microsoft Windows 8 (x86) is installed
  • OR Microsoft Windows Server 2012 (64-bit) is installed
  • AND Microsoft .NET Framework 3.5 SP1 is installed
  • AND Either file version
  • Check if the version of the system.runtime.remoting.dll is less than 2.0.50727.6416
  • OR ldr range for system.runtime.remoting.dll
  • Check if the version of system.runtime.remoting.dll is less than 2.0.50727.7055
  • AND Check if the version of system.runtime.remoting.dll is greater than or equal to 2.0.50727.7000
  • OR .NET and Win 8.1 / 2012 R2
  • Either OS
  • Microsoft Windows 8.1 (x86) is installed
  • OR Microsoft Windows 8.1 (x64) is installed
  • OR Microsoft Windows Server 2012 R2 is installed
  • AND Microsoft .NET Framework 3.5 SP1 is installed
  • AND Either file version
  • Check if the version of system.runtime.remoting.dll is less than 2.0.50727.8003
  • OR ldr range for system.runtime.remoting.dll
  • Check if the version of system.runtime.remoting.dll is less than 2.0.50727.8606
  • AND Check if the version of system.runtime.remoting.dll is greater than or equal to 2.0.50727.8600
  • OR .NET 3.5.1 and Win 7 / Server 2008 R2
  • either os
  • Microsoft Windows 7 (32-bit) is installed
  • OR Microsoft Windows 7 x64 Edition is installed
  • OR Microsoft Windows Server 2008 R2 x64 Edition is installed
  • OR Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed
  • AND Microsoft .NET Framework 3.5 SP1 is installed
  • AND Either file version
  • Check if the version of system.runtime.remoting.dll is less than 2.0.50727.5483
  • OR ldr range for system.runtime.remoting.dll
  • Check if the version of system.runtime.remoting.dll is less than 2.0.50727.7057
  • AND Check if the version of system.runtime.remoting.dll is greater than or equal to 2.0.50727.7000
  • OR .NET 4.0
  • either os
  • Microsoft Windows XP (32-bit) is installed
  • OR Microsoft Windows XP x64 is installed
  • OR Microsoft Windows Server 2003 (32-bit) is installed
  • OR Microsoft Windows Server 2003 (x64) is installed
  • OR Microsoft Windows Server 2003 (ia64) Gold is installed
  • OR Microsoft Windows Vista (32-bit) is installed
  • OR Microsoft Windows Vista x64 Edition is installed
  • OR Microsoft Windows Server 2008 (32-bit) is installed
  • OR Microsoft Windows Server 2008 (64-bit) is installed
  • OR Microsoft Windows Server 2008 (ia-64) is installed
  • OR Microsoft Windows 7 (32-bit) is installed
  • OR Microsoft Windows 7 x64 Edition is installed
  • OR Microsoft Windows Server 2008 R2 x64 Edition is installed
  • OR Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed
  • AND Microsoft .NET Framework 4.0 is installed
  • AND Either file version
  • Check if the version of system.runtime.remoting.dll is less than 4.0.30319.1023
  • OR ldr range for system.runtime.remoting.dll
  • Check if the version of system.runtime.remoting.dll is less than 4.0.30319.2036
  • AND Check if the version of system.runtime.remoting.dll is greater than or equal to 4.0.30319.2000
  • OR .NET 4.5/4.5.1 and Win Vista / Win 7 / server 2008 / Server 2008 R2
  • either os
  • Microsoft Windows Vista (32-bit) is installed
  • OR Microsoft Windows Vista x64 Edition is installed
  • OR Microsoft Windows Server 2008 (32-bit) is installed
  • OR Microsoft Windows Server 2008 (64-bit) is installed
  • OR Microsoft Windows 7 (32-bit) is installed
  • OR Microsoft Windows 7 x64 Edition is installed
  • OR Microsoft Windows Server 2008 R2 x64 Edition is installed
  • AND Either .Net 4.5 / 4.5.1 version
  • Microsoft .NET Framework 4.5 is installed
  • OR Microsoft .NET Framework 4.5.1 is installed
  • AND Either file version
  • Check if the version of system.runtime.remoting.dll is less than 4.0.30319.34108
  • OR ldr range for system.wen.dll
  • Check if the version of system.runtime.remoting.dll is less than 4.0.30319.36106
  • AND Check if the version of system.runtime.remoting.dll is greater than or equal to 4.0.30319.36000
  • OR .NET and Win 8 /Server 2012
  • either os
  • Microsoft Windows 8 (x64) is installed
  • OR Microsoft Windows 8 (x86) is installed
  • OR Microsoft Windows Server 2012 (64-bit) is installed
  • AND Either .Net 4.5 / 4.5.1 version
  • Microsoft .NET Framework 4.5 is installed
  • OR Microsoft .NET Framework 4.5.1 is installed
  • AND Either file version
  • Check if the version of system.runtime.remoting.dll is less than 4.0.30319.34107
  • OR ldr range for system.runtime.remoting.dll
  • Check if the version of system.runtime.remoting.dll is less than 4.0.30319.36105
  • AND Check if the version of system.runtime.remoting.dll is greater than or equal to 4.0.30319.36000
  • OR .NET 4.5.1 / Win 8.1 / Server 2012 R2
  • Microsoft .NET Framework 4.5.1 is installed
  • AND Either OS
  • Microsoft Windows 8.1 (x86) is installed
  • OR Microsoft Windows 8.1 (x64) is installed
  • OR Microsoft Windows Server 2012 R2 is installed
  • AND Either file version
  • Check if the version of system.runtime.remoting.dll is less than 4.0.30319.34107
  • OR ldr range for mscorlib.dll
  • Check if the version of system.runtime.remoting.dll is less than 4.0.30319.36115
  • AND Check if the version of system.runtime.remoting.dll is greater than or equal to 4.0.30319.36000
    • BACK