Oval Definition:	oval:org.mitre.oval:def:257
Revision Date: 2015-08-10 Version: 48 Title: COM Object Instantiation Memory Corruption Vulnerability Description: Microsoft Internet Explorer 5.01, 6, and 7 uses certain COM objects from (1) Msb1fren.dll, (2) Htmlmm.ocx, and (3) Blnmgrps.dll as ActiveX controls, which allows remote attackers to execute arbitrary code via unspecified vectors, a different issue than CVE-2006-4697. Family: windows Class: vulnerability Status: ACCEPTED Reference(s): CVE-2007-0219 Platform(s): Microsoft Windows 2000 Microsoft Windows Server 2003 Microsoft Windows XP Product(s): Microsoft Internet Explorer 5 Microsoft Internet Explorer 6 Microsoft Internet Explorer 7 Definition Synopsis Server 2003-Gold (IE7) Microsoft Windows Server 2003 (x86) Gold is installed AND Microsoft Internet Explorer 7 is installed AND the version of mshtml.dll is less than 7.0.6000.16414 OR XP,SP1 (64-bit) and Server 2003, SP1 (IE7) Windows XP (64-bit,SP1) or Server 2003 (SP1) is installed Microsoft Windows XP SP1 (64-bit) is installed OR Microsoft Windows Server 2003 SP1 (x86) is installed AND Microsoft Internet Explorer 7 is installed AND the version of mshtml.dll is less than 7.0.6000.16414 OR IE 7 on Windows XP,SP2 Microsoft Windows XP SP2 or later is installed AND Microsoft Internet Explorer 7 is installed AND the version of mshtml.dll is less than 7.0.6000.16414 OR Server 2003-Gold (IE 6) Microsoft Windows Server 2003 (x86) Gold is installed AND Microsoft Internet Explorer 6 is installed AND the version of mshtml.dll is less than 6.0.3790.630 OR XP,SP1 (64-bit) and Server 2003, SP1 (IE6) Windows XP (64-bit,SP1) or Server 2003 (SP1) is installed Microsoft Windows XP SP1 (64-bit) is installed OR Microsoft Windows Server 2003 SP1 (x86) is installed AND Microsoft Internet Explorer 6 is installed AND the version of mshtml.dll is less than 6.0.3790.2858 OR IE 6 on Windows XP,SP2 Microsoft Windows XP SP2 or later is installed AND Microsoft Internet Explorer 6 is installed AND the version of mshtml.dll is less than 6.0.2900.3059 OR IE 6 on Windows 2000 Microsoft Windows 2000 SP4 or later is installed AND Microsoft Internet Explorer 6 is installed AND the version of mshtml.dll is less than 6.0.2800.1589 OR IE 5.01,SP4 on Win2k,SP4 Microsoft Windows 2000 SP4 or later is installed AND Microsoft Internet Explorer 5.01 SP4 is installed AND the version of mshtml.dll is less than 5.0.3849.500
BACK