Oval Definition:	oval:org.mitre.oval:def:28080
Revision Date: 2014-12-29 Version: 44 Title: MSXML Remote Code Execution Vulnerability - CVE-2014-4118 (MS14-067) Description: XML Core Services (aka MSXML) 3.0 in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code or cause a denial of service (system-state corruption) via crafted XML content, aka "MSXML Remote Code Execution Vulnerability." Family: windows Class: vulnerability Status: ACCEPTED Reference(s): CVE-2014-4118 Platform(s): Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2 Microsoft Windows Vista Product(s): Microsoft XML Core Services 3.0 Definition Synopsis 2003/version Microsoft XML Core Services 3 is installed AND either os Microsoft Windows Server 2003 (32-bit) is installed OR Microsoft Windows Server 2003 (x64) is installed OR Microsoft Windows Server 2003 for Itanium is installed AND Check if the version of Msxml3.dll is less than 8.100.1056.0 OR vista/2008/versions/Core services 3.0 Microsoft XML Core Services 3 is installed AND either os Microsoft Windows Vista x64 Edition is installed OR Microsoft Windows Vista (32-bit) is installed OR Microsoft Windows Server 2008 (32-bit) is installed OR Microsoft Windows Server 2008 (64-bit) is installed OR Microsoft Windows Server 2008 (ia-64) is installed AND Check if the version of Msxml3.dll is less than 8.100.5009.0 OR win7/2008 r2/versions/Core services 3.0 either os Microsoft Windows 7 (32-bit) is installed OR Microsoft Windows 7 x64 Edition is installed OR Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed OR Microsoft Windows Server 2008 R2 x64 Edition is installed AND gdr/ldr Check if the version of Msxml3.dll is less than 8.110.7601.18576 OR ldr range Check if the version of Msxml3.dll is less than 8.110.7601.22782 AND Check if version of Msxml3.dll is greater than or equal to 8.110.7601.22000 AND Microsoft XML Core Services 3 is installed OR win8/2012/versions Microsoft XML Core Services 3 is installed AND either os Microsoft Windows 8 (x64) is installed OR Microsoft Windows 8 (x86) is installed OR Microsoft Windows Server 2012 (64-bit) is installed AND gdr/ldr Check if the version of Msxml3.dll is less than 8.110.9200.17092 OR ldr range Check if the version of Msxml3.dll is less than 8.110.9200.21211 AND Check if the version of msxml3.dll is greater than or equal to 8.110.9200.21000 OR win 8.1/2012 r2/versions Microsoft XML Core Services 3 is installed AND either os Microsoft Windows 8.1 (x86) is installed OR Microsoft Windows 8.1 (x64) is installed OR Microsoft Windows Server 2012 R2 is installed AND Check if the version of Msxml3.dll is less than 8.110.9600.17324
BACK