Oval Definition:oval:org.mitre.oval:def:28728
Revision Date:2015-03-30Version:45
Title:Internet Explorer elevation of privilege vulnerability - CVE-2015-0055 (MS15-009)
Description:Microsoft Internet Explorer 10 and 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation of Privilege Vulnerability."
Family:windowsClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2015-0055
Platform(s):Microsoft Windows 7
Microsoft Windows 8
Microsoft Windows 8.1
Microsoft Windows Server 2008 R2
Microsoft Windows Server 2012
Microsoft Windows Server 2012 R2
Product(s):Microsoft Internet Explorer 10
Microsoft Internet Explorer 11
Definition Synopsis
  • IE 10 + vulnerable os and file version
  • Microsoft Internet Explorer 10 is installed
  • AND Win 7/R2 Win 8/ 2k12
  • Win 7/R2
  • Win 7/R2
  • Microsoft Windows 7 (32-bit) is installed
  • OR Microsoft Windows 7 x64 Edition is installed
  • OR Microsoft Windows Server 2008 R2 x64 Edition is installed
  • AND Check for vulnerable versions
  • Check if the version of mshtml.dll is less than 10.0.9200.17229
  • OR Check if the version of Jscript9.dll is less than 10.0.9200.17241
  • OR Win 8/ 2012 R2
  • Win 8/ 2012
  • Microsoft Windows 8 (x86) is installed
  • OR Microsoft Windows 8 (x64) is installed
  • OR Microsoft Windows Server 2012 (64-bit) is installed
  • AND Check for vulnerable versions
  • Check if the version of mshtml.dll is less than 10.0.9200.17228
  • OR Check if the version of Jscript9.dll is less than 10.0.9200.17241
  • OR IE 11 + vulnerable os and file version
  • Microsoft Internet Explorer 11 is installed
  • AND Win 7/ 2k8 R2/ 8.1/ 2k12 R2 and vulnerable file version
  • Win 7/ 2k8 R2/ 8.1/ 2k12 R2 and vulnerable file versions
  • Win 7/ 2k8 R2/ 8.1/2k12 R2
  • Microsoft Windows 7 (32-bit) is installed
  • OR Microsoft Windows 7 x64 Edition is installed
  • OR Microsoft Windows Server 2008 R2 x64 Edition is installed
  • OR Microsoft Windows 8.1 (x86) is installed
  • OR Microsoft Windows 8.1 (x64) is installed
  • OR Microsoft Windows Server 2012 R2 is installed
  • AND either file
  • Check if the version of Jscript9.dll is less than 11.0.9600.17640
  • OR Check if the version of mshtml.dll is less than 11.0.9600.17631
  • BACK