Oval Definition:oval:org.mitre.oval:def:24687
Revision Date:2014-08-25Version:47
Title:Internet Explorer Memory Corruption Vulnerability (CVE-2014-1774) - MS14-035
Description:Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1788 and CVE-2014-2754.
Family:windowsClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2014-1774
Platform(s):Microsoft Windows 7
Microsoft Windows Server 2008
Microsoft Windows Server 2008 R2
Microsoft Windows Vista
Product(s):Microsoft Internet Explorer 9
Definition Synopsis
  • Microsoft Internet Explorer 9 is installed
  • AND vista/2k8/win7/R2
  • Microsoft Windows Vista (32-bit) is installed
  • OR Microsoft Windows Vista x64 Edition is installed
  • OR Microsoft Windows Server 2008 (32-bit) is installed
  • OR Microsoft Windows Server 2008 (64-bit) is installed
  • OR Microsoft Windows 7 (32-bit) is installed
  • OR Microsoft Windows 7 x64 Edition is installed
  • OR Microsoft Windows Server 2008 R2 x64 Edition is installed
  • AND Check for vulnerable versions
  • Check if the version of mshtml.dll is less than 9.0.8112.16555
  • OR Check for LDR
  • Check if the version of mshtml.dll is greater than or equal to 9.0.8112.20000
  • AND Check if the version of mshtml.dll is less than 9.0.8112.20666
  • BACK