Oval Definition:	oval:org.mitre.oval:def:24704
Revision Date: 2014-08-18 Version: 48 Title: Internet Explorer Memory corruption vulnerability (CVE-2014-1776) - MS14-021 Description: Use-after-free vulnerability in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via vectors related to the CMarkup::IsConnectedToPrimaryMarkup function, as exploited in the wild in April 2014. NOTE: this issue originally emphasized VGX.DLL, but Microsoft clarified that "VGX.DLL does not contain the vulnerable code leveraged in this exploit. Disabling VGX.DLL is an exploit-specific workaround that provides an immediate, effective workaround to help block known attacks." Family: windows Class: vulnerability Status: ACCEPTED Reference(s): CVE-2014-1776 Platform(s): Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2 Microsoft Windows Vista Microsoft Windows XP Product(s): Microsoft Internet Explorer 10 Microsoft Internet Explorer 11 Microsoft Internet Explorer 6 Microsoft Internet Explorer 7 Microsoft Internet Explorer 8 Microsoft Internet Explorer 9 Definition Synopsis ie6 xp/2003 ie6/xp/version Microsoft Windows XP (32-bit) is installed AND Check if the version of mshtml.dll is less than 6.0.2900.6550 OR ie6/xp/2003/versions xp/2003 Microsoft Windows XP x64 is installed OR Microsoft Windows Server 2003 (ia64) Gold is installed OR Microsoft Windows Server 2003 (32-bit) is installed OR Microsoft Windows Server 2003 (x64) is installed AND Check if the version of mshtml.dll is less than 6.0.3790.5328 AND Microsoft Internet Explorer 6 is installed OR ie7 Microsoft Internet Explorer 7 is installed AND xp/2003/vista/2008/ xp/2003/version either os Microsoft Windows XP (32-bit) is installed OR Microsoft Windows XP x64 is installed OR Microsoft Windows Server 2003 (ia64) Gold is installed OR Microsoft Windows Server 2003 (32-bit) is installed OR Microsoft Windows Server 2003 (x64) is installed AND Check if the version of mshtml.dll is less than 7.0.6000.21383 OR vista/2008/version either os Microsoft Windows Vista (32-bit) is installed OR Microsoft Windows Vista x64 Edition is installed OR Microsoft Windows Server 2008 (32-bit) is installed OR Microsoft Windows Server 2008 (64-bit) is installed OR Microsoft Windows Server 2008 (ia-64) is installed AND gdr/ldr Check if the version of mshtml.dll is less than 7.0.6002.19087 OR ie8 Microsoft Internet Explorer 8 is installed AND vista/2008/win7/2008r2//versions vista/2008/versions either os Microsoft Windows Vista (32-bit) is installed OR Microsoft Windows Vista x64 Edition is installed OR Microsoft Windows Server 2008 (32-bit) is installed OR Microsoft Windows Server 2008 (64-bit) is installed AND gdr/ldr Check if the version of mshtml.dll is less than 8.0.6001.19529 OR win7/2008 r2/version either os Microsoft Windows 7 x64 Edition is installed OR Microsoft Windows 7 (32-bit) is installed OR Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed OR Microsoft Windows Server 2008 R2 x64 Edition is installed AND gdr/ldr Check if the version of mshtml.dll is less than 8.0.7601.18446 OR xp/2003/version either os Microsoft Windows XP x64 is installed OR Microsoft Windows XP (32-bit) is installed OR Microsoft Windows Server 2003 (32-bit) is installed OR Microsoft Windows Server 2003 (x64) is installed AND Check if the version of mshtml.dll is less than 8.0.6001.23588 OR ie9 either os Microsoft Windows Vista (32-bit) is installed OR Microsoft Windows Vista x64 Edition is installed OR Microsoft Windows Server 2008 (32-bit) is installed OR Microsoft Windows Server 2008 (64-bit) is installed OR Microsoft Windows 7 x64 Edition is installed OR Microsoft Windows 7 (32-bit) is installed OR Microsoft Windows Server 2008 R2 x64 Edition is installed AND gdr/ldr Check if the version of mshtml.dll is less than 9.0.8112.16546 OR ldr range Check if the version of mshtml.dll is less than 9.0.8112.20657 AND Check if the version of mshtml.dll is greater than or equal to 9.0.8112.20000 AND Microsoft Internet Explorer 9 is installed OR ie10 either os Microsoft Windows 7 x64 Edition is installed OR Microsoft Windows 7 (32-bit) is installed OR Microsoft Windows Server 2008 R2 x64 Edition is installed OR Microsoft Windows 8 (x86) is installed OR Microsoft Windows 8 (x64) is installed OR Microsoft Windows Server 2012 (64-bit) is installed AND gdr/ldr Check if the version of mshtml.dll is less than 10.0.9200.16897 OR ldr range Check if the version of mshtml.dll is less than 10.0.9200.21024 AND Check if the version of mshtml.dll is greater than or equal to 10.0.9200.20000 AND Microsoft Internet Explorer 10 is installed OR IE11 Microsoft Internet Explorer 11 is installed AND either OS 7/2008R2/versions 7/2008R2 Microsoft Windows 7 x64 Edition is installed OR Microsoft Windows 7 (32-bit) is installed OR Microsoft Windows Server 2008 R2 x64 Edition is installed AND either version Check if the version of mshtml.dll is less than 11.0.9600.16661 OR 8.1/2012R2/versions 8.1/2012R2 Microsoft Windows 8.1 (x86) is installed OR Microsoft Windows 8.1 (x64) is installed OR Microsoft Windows Server 2012 R2 is installed AND either version Check if the version of mshtml.dll is less than 11.0.9600.16661
BACK