Oval Definition:oval:org.mitre.oval:def:24654
Revision Date:2014-08-18Version:47
Title:Internet Explorer memory corruption vulnerability (CVE-2014-1815) - MS14-029
Description:Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, as exploited in the wild in May 2014, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-0310.
Family:windowsClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2014-1815
Platform(s):Microsoft Windows 7
Microsoft Windows 8
Microsoft Windows 8.1
Microsoft Windows Server 2003
Microsoft Windows Server 2008
Microsoft Windows Server 2008 R2
Microsoft Windows Server 2012
Microsoft Windows Server 2012 R2
Microsoft Windows Vista
Product(s):Microsoft Internet Explorer 10
Microsoft Internet Explorer 11
Microsoft Internet Explorer 6
Microsoft Internet Explorer 7
Microsoft Internet Explorer 8
Microsoft Internet Explorer 9
Definition Synopsis
  • ie6/2003/versions
  • 2003
  • Microsoft Windows Server 2003 (ia64) Gold is installed
  • OR Microsoft Windows Server 2003 (32-bit) is installed
  • OR Microsoft Windows Server 2003 (x64) is installed
  • AND Check if the version of mshtml.dll is less than 6.0.3790.5330
  • AND Microsoft Internet Explorer 6 is installed
  • OR ie7
  • Microsoft Internet Explorer 7 is installed
  • AND 2003/vista/2008/
  • 2003/version
  • either os
  • Microsoft Windows Server 2003 (ia64) Gold is installed
  • OR Microsoft Windows Server 2003 (32-bit) is installed
  • OR Microsoft Windows Server 2003 (x64) is installed
  • AND Check if the version of mshtml.dll is less than 7.0.6000.21385
  • OR vista/2008/version
  • either os
  • Microsoft Windows Vista (32-bit) is installed
  • OR Microsoft Windows Vista x64 Edition is installed
  • OR Microsoft Windows Server 2008 (32-bit) is installed
  • OR Microsoft Windows Server 2008 (64-bit) is installed
  • OR Microsoft Windows Server 2008 (ia-64) is installed
  • AND gdr/ldr
  • Check if the version of mshtml.dll is less than 7.0.6002.19089
  • OR ie8
  • Microsoft Internet Explorer 8 is installed
  • AND vista/2008/win7/2008r2//versions
  • vista/2008/versions
  • either os
  • Microsoft Windows Vista (32-bit) is installed
  • OR Microsoft Windows Vista x64 Edition is installed
  • OR Microsoft Windows Server 2008 (32-bit) is installed
  • OR Microsoft Windows Server 2008 (64-bit) is installed
  • AND gdr/ldr
  • Check if the version of mshtml.dll is less than 8.0.6001.19531
  • OR win7/2008 r2/version
  • either os
  • Microsoft Windows 7 x64 Edition is installed
  • OR Microsoft Windows 7 (32-bit) is installed
  • OR Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed
  • OR Microsoft Windows Server 2008 R2 x64 Edition is installed
  • AND gdr/ldr
  • Check if the version of mshtml.dll is less than 8.0.7601.18448
  • OR 2003/version
  • either os
  • Microsoft Windows Server 2003 (32-bit) is installed
  • OR Microsoft Windows Server 2003 (x64) is installed
  • AND Check if the version of mshtml.dll is less than 8.0.6001.23590
  • OR ie9
  • either os
  • Microsoft Windows Vista (32-bit) is installed
  • OR Microsoft Windows Vista x64 Edition is installed
  • OR Microsoft Windows Server 2008 (32-bit) is installed
  • OR Microsoft Windows Server 2008 (64-bit) is installed
  • OR Microsoft Windows 7 x64 Edition is installed
  • OR Microsoft Windows 7 (32-bit) is installed
  • OR Microsoft Windows Server 2008 R2 x64 Edition is installed
  • AND gdr/ldr
  • Check if the version of mshtml.dll is less than 9.0.8112.16553
  • OR ldr range
  • Check if the version of mshtml.dll is less than 9.0.8112.20664
  • AND Check if the version of mshtml.dll is greater than or equal to 9.0.8112.20000
  • AND Microsoft Internet Explorer 9 is installed
  • OR ie10
  • either os
  • Microsoft Windows 7 x64 Edition is installed
  • OR Microsoft Windows 7 (32-bit) is installed
  • OR Microsoft Windows Server 2008 R2 x64 Edition is installed
  • OR Microsoft Windows 8 (x86) is installed
  • OR Microsoft Windows 8 (x64) is installed
  • OR Microsoft Windows Server 2012 (64-bit) is installed
  • AND gdr/ldr
  • Check if the version of mshtml.dll is less than 10.0.9200.16899
  • OR ldr range
  • Check if the version of mshtml.dll is less than 10.0.9200.21026
  • AND Check if the version of mshtml.dll is greater than or equal to 10.0.9200.20000
  • AND Microsoft Internet Explorer 10 is installed
  • OR IE11
  • Microsoft Internet Explorer 11 is installed
  • AND either OS
  • 7/2008R2/versions
  • 7/2008R2
  • Microsoft Windows 7 x64 Edition is installed
  • OR Microsoft Windows 7 (32-bit) is installed
  • OR Microsoft Windows Server 2008 R2 x64 Edition is installed
  • AND either version
  • Check if the version of mshtml.dll is less than 11.0.9600.16663
  • OR 8.1/2012R2/versions
  • 8.1/2012R2
  • Microsoft Windows 8.1 (x86) is installed
  • OR Microsoft Windows 8.1 (x64) is installed
  • OR Microsoft Windows Server 2012 R2 is installed
  • AND either version
  • Check if the version of mshtml.dll is less than 11.0.9600.16663
  • BACK