Oval Definition:oval:org.mitre.oval:def:28724
Revision Date:2015-07-27Version:44
Title:Internet Explorer memory corruption vulnerability - CVE-2015-1754 (MS15-056)
Description:Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."
Family:windowsClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2015-1754
Platform(s):Microsoft Windows 7
Microsoft Windows Server 2003
Microsoft Windows Server 2008
Microsoft Windows Server 2008 R2
Microsoft Windows Vista
Product(s):Microsoft Internet Explorer 8
Definition Synopsis
  • Microsoft Internet Explorer 8 is installed
  • AND vulnerable os and their respective file versions
  • 2k3(x86 + x64) + vulnerable file versions
  • 2k3(x86 + x64)
  • Microsoft Windows Server 2003 (32-bit) is installed
  • OR Microsoft Windows Server 2003 (x64) is installed
  • AND Check if the version of mshtml.dll is less than 8.0.6001.23687
  • OR Vista/2k8 + vulnerable file versions
  • Vista/ 2k8
  • Microsoft Windows Vista (32-bit) is installed
  • OR Microsoft Windows Vista x64 Edition is installed
  • OR Microsoft Windows Server 2008 (32-bit) is installed
  • OR Microsoft Windows Server 2008 (64-bit) is installed
  • AND Check for vulnerable version
  • Check if the version of mshtml.dll is less than 8.0.6001.19632
  • OR Check for LDR
  • Check for mshtml.dll version greater than or equal to 8.0.6001.23000
  • AND Check if the version of mshtml.dll is less than 8.0.6001.23687
  • OR Win 7 / R2 and vulnerable file versions
  • Win 7 / R2
  • Microsoft Windows 7 (32-bit) is installed
  • OR Microsoft Windows 7 x64 Edition is installed
  • OR Microsoft Windows Server 2008 R2 x64 Edition is installed
  • OR Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed
  • AND Check for vulnerable versions
  • Check if the version of mshtml.dll is less than 8.0.7601.18870
  • OR Check for LDR
  • Check if the version of mshtml.dll is less than 8.0.7601.23073
  • AND Check if the version of mshtml.dll is greater than or equal to 8.0.7601.23000
  • BACK