Oval Definition:oval:org.mitre.oval:def:28675
Revision Date:2015-04-27Version:46
Title:JPEG XR parser information disclosure vulnerability - CVE-2015-0076 (MS15-029)
Description:The photo-decoder implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not properly initialize memory for rendering of JXR images, which allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "JPEG XR Parser Information Disclosure Vulnerability."
Family:windowsClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2015-0076
Platform(s):Microsoft Windows 7
Microsoft Windows 8
Microsoft Windows 8.1
Microsoft Windows Server 2008
Microsoft Windows Server 2008 R2
Microsoft Windows Server 2012
Microsoft Windows Server 2012 R2
Microsoft Windows Vista
Product(s):
Definition Synopsis
  • Vista / 2k8 + vulnerable file version
  • Vista / 2K8
  • Microsoft Windows Vista (32-bit) is installed
  • OR Microsoft Windows Vista x64 Edition is installed
  • OR Microsoft Windows Server 2008 (32-bit) is installed
  • OR Microsoft Windows Server 2008 (64-bit) is installed
  • OR Microsoft Windows Server 2008 (ia-64) is installed
  • AND gdr/ldr
  • Check if the version of Wmphoto.dll is less than 7.0.6002.19299
  • OR Check for LDR
  • Check if the version of Wmphoto.dll is greater than or equal to 7.0.6002.23000
  • AND Check if the version of Wmphoto.dll is less than 7.0.6002.23609
  • OR Win 7 / R2 + vulnerable file version
  • Win 7 / R2
  • Microsoft Windows 7 (32-bit) is installed
  • OR Microsoft Windows 7 x64 Edition is installed
  • OR Microsoft Windows Server 2008 R2 x64 Edition is installed
  • AND gdr/ldr
  • Check if the version of Wmphoto.dll is less than 6.1.7601.18742
  • OR Check for LDR
  • Check if the version of Wmphoto.dll is greater than or equal to 6.1.7601.22000
  • AND Check if the version of Wmphoto.dll is less than 6.1.7601.22949
  • OR Wmphoto.dll with version range 6.2.9200.xxxx
  • gdr/ldr
  • Check if the version of Wmphoto.dll is less than 6.2.9200.17254
  • AND Check if the version of Wmphoto.dll is greater than or equal to 6.2.9200.00000
  • OR Win Server 2008 R2 IA64 + vulnerable file version
  • Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed
  • AND gdr/ldr
  • Check if the version of Wmphoto.dll is less than 6.1.7601.18742
  • OR Check for LDR
  • Check if the version of Wmphoto.dll is greater than or equal to 6.1.7601.22000
  • AND Check if the version of Wmphoto.dll is less than 6.1.7601.22949
  • OR Win 8/2k12 and vulnerable file version
  • Win 8 / 2k12
  • Microsoft Windows 8 (x86) is installed
  • OR Microsoft Windows 8 (x64) is installed
  • OR Microsoft Windows Server 2012 (64-bit) is installed
  • AND gdr/ldr
  • Check if the version of Wmphoto.dll is less than 6.2.9200.17247
  • OR Check for LDR
  • Check if the version of Wmphoto.dll is greater than or equal to 6.2.9200.21000
  • AND Check if the version of Wmphoto.dll is less than 6.2.9200.21364
  • OR Win 8.1 / 2K12 R2and vulnerable file version
  • Win 8.1 / 2k12 R2
  • Microsoft Windows 8.1 (x86) is installed
  • OR Microsoft Windows 8.1 (x64) is installed
  • OR Microsoft Windows Server 2012 R2 is installed
  • AND Check if the version of Wmphoto.dll is less than 6.3.9600.17668
  • BACK