Oval Definition:oval:org.mitre.oval:def:24899
Revision Date:2014-08-25Version:48
Title:Internet Explorer Memory Corruption Vulnerability (CVE-2014-1779) - MS14-035
Description:Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-0282, CVE-2014-1775, CVE-2014-1799, CVE-2014-1803, and CVE-2014-2757.
Family:windowsClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2014-1779
Platform(s):Microsoft Windows 7
Microsoft Windows 8
Microsoft Windows 8.1
Microsoft Windows Server 2003
Microsoft Windows Server 2008
Microsoft Windows Server 2008 R2
Microsoft Windows Server 2012
Microsoft Windows Server 2012 R2
Microsoft Windows Vista
Product(s):Microsoft Internet Explorer 10
Microsoft Internet Explorer 11
Microsoft Internet Explorer 6
Microsoft Internet Explorer 7
Microsoft Internet Explorer 8
Microsoft Internet Explorer 9
Definition Synopsis
  • IE 6 + vulnerable os and file version
  • Microsoft Internet Explorer 6 is installed
  • AND 2k3 (x86 + x64 + ia64)
  • Microsoft Windows Server 2003 (32-bit) is installed
  • OR Microsoft Windows Server 2003 (x64) is installed
  • OR Microsoft Windows Server 2003 for Itanium is installed
  • AND Check if the version of mshtml.dll is less than 6.0.3790.5341
  • OR IE 7 + vulnerable os and file version
  • Microsoft Internet Explorer 7 is installed
  • AND vulnerable os and their respective file versions
  • 2k3(x86 + x64+ ia64) + vulnerable file versions
  • 2k3(x86 + x64 + ia64)
  • Microsoft Windows Server 2003 (32-bit) is installed
  • OR Microsoft Windows Server 2003 (x64) is installed
  • OR Microsoft Windows Server 2003 for Itanium is installed
  • AND Check if the version of mshtml.dll is less than 7.0.6000.21389
  • OR Vista / 2k8 and vulnerable file version
  • Vista/2k8
  • Microsoft Windows Vista (32-bit) is installed
  • OR Microsoft Windows Vista x64 Edition is installed
  • OR Microsoft Windows Server 2008 (32-bit) is installed
  • OR Microsoft Windows Server 2008 (64-bit) is installed
  • OR Microsoft Windows Server 2008 (ia-64) is installed
  • AND Check for vulnerable versions
  • Check if the version of mshtml.dll is less than 7.0.6002.19098
  • OR IE 8 + vulnerable os and file version
  • Microsoft Internet Explorer 8 is installed
  • AND vulnerable os and their respective file versions
  • 2k3(x86 + x64+ ia64) + vulnerable file versions
  • 2k3(x86 + x64 + ia64)
  • Microsoft Windows Server 2003 (32-bit) is installed
  • OR Microsoft Windows Server 2003 (x64) is installed
  • AND Check if the version of mshtml.dll is less than 8.0.6001.23598
  • OR Vista/2k8 + vulnerable file versions
  • Vista/ 2k8
  • Microsoft Windows Vista (32-bit) is installed
  • OR Microsoft Windows Vista x64 Edition is installed
  • OR Microsoft Windows Server 2008 (32-bit) is installed
  • OR Microsoft Windows Server 2008 (64-bit) is installed
  • AND Check for vulnerable version
  • Check if the version of mshtml.dll is less than 8.0.6001.19539
  • OR Win 7 / R2 and vulnerable file versions
  • Win 7 / R2
  • Microsoft Windows 7 (32-bit) is installed
  • OR Microsoft Windows 7 x64 Edition is installed
  • OR Microsoft Windows Server 2008 R2 x64 Edition is installed
  • OR Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed
  • AND Check for vulnerable versions
  • Check if the version of mshtml.dll is less than 8.0.7601.18472
  • OR IE 9 + vulnerable os and file version
  • Microsoft Internet Explorer 9 is installed
  • AND vista/2k8/win7/R2
  • Microsoft Windows Vista (32-bit) is installed
  • OR Microsoft Windows Vista x64 Edition is installed
  • OR Microsoft Windows Server 2008 (32-bit) is installed
  • OR Microsoft Windows Server 2008 (64-bit) is installed
  • OR Microsoft Windows 7 (32-bit) is installed
  • OR Microsoft Windows 7 x64 Edition is installed
  • OR Microsoft Windows Server 2008 R2 x64 Edition is installed
  • AND Check for vulnerable versions
  • Check if the version of mshtml.dll is less than 9.0.8112.16555
  • OR Check for LDR
  • Check if the version of mshtml.dll is greater than or equal to 9.0.8112.20000
  • AND Check if the version of mshtml.dll is less than 9.0.8112.20666
  • OR IE 10 + vulnerable os and file version
  • Microsoft Internet Explorer 10 is installed
  • AND Win 7/R2 Win 8/ 2k12
  • Microsoft Windows 7 (32-bit) is installed
  • OR Microsoft Windows 7 x64 Edition is installed
  • OR Microsoft Windows Server 2008 R2 x64 Edition is installed
  • OR Microsoft Windows 8 (x86) is installed
  • OR Microsoft Windows 8 (x64) is installed
  • OR Microsoft Windows Server 2012 (64-bit) is installed
  • AND Check for vulnerable versions
  • Check if the version of mshtml.dll is less than 10.0.9200.16921
  • OR Check for LDR
  • Check for mshtml.dll version greater than or equal to 10.0.9200.21000
  • AND Check if the version of mshtml.dll is less than 10.0.9200.21044
  • OR IE 11 + vulnerable os and file version
  • Microsoft Internet Explorer 11 is installed
  • AND Win 7/ 2k8 R2/ 8.1/2k12 R2 and vulnerable file version
  • Win 7 / 2k8 R2 and vulnerable file versions
  • Win 7 / 2k8 R2
  • Microsoft Windows 7 (32-bit) is installed
  • OR Microsoft Windows 7 x64 Edition is installed
  • OR Microsoft Windows Server 2008 R2 x64 Edition is installed
  • AND Check for vulnerable versions
  • Check if the version of mshtml.dll is less than 11.0.9600.16668
  • OR Win 8.1 / 2k12 R2 and vulnerable file versions
  • Win 8.1 / 2k12 R2
  • Microsoft Windows 8.1 (x86) is installed
  • OR Microsoft Windows 8.1 (x64) is installed
  • OR Microsoft Windows Server 2012 R2 is installed
  • AND Check for vulnerable versions
  • Check if the version of mshtml.dll is less than 11.0.9600.16668
  • BACK