Oval Definition:	oval:org.mitre.oval:def:28883
Revision Date: 2015-07-06 Version: 44 Title: Microsoft windows kernel memory disclosure vulnerability - CVE-2015-1701 (MS15-051) Description: Win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows local users to gain privileges via a crafted application, as exploited in the wild in April 2015, aka "Win32k Elevation of Privilege Vulnerability." Family: windows Class: vulnerability Status: ACCEPTED Reference(s): CVE-2015-1701 Platform(s): Microsoft Windows 7 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Vista Product(s): Definition Synopsis Windows Server 2k3 and vulnerable file version Either OS Microsoft Windows Server 2003 (32-bit) is installed OR Microsoft Windows Server 2003 (x64) is installed OR Microsoft Windows Server 2003 for Itanium is installed AND Check if the version of win32k.sys is less than 5.2.3790.5615 OR Vista / 2k8 + vulnerable file version Vista / 2K8 Microsoft Windows Vista (32-bit) is installed OR Microsoft Windows Vista x64 Edition is installed OR Microsoft Windows Server 2008 (32-bit) is installed OR Microsoft Windows Server 2008 (64-bit) is installed OR Microsoft Windows Server 2008 (ia-64) is installed AND gdr/ldr Check for LDR Check if the version of Win32k.sys is greater than or equal to 6.0.6002.23000 AND Check if the version of win32k.sys is less than 6.0.6002.23680 OR Check if the version of win32k.sys is less than 6.0.6002.19372 OR Win 7 / R2 + vulnerable file version Win 7 / R2 Microsoft Windows 7 (32-bit) is installed OR Microsoft Windows 7 x64 Edition is installed AND gdr/ldr Check for LDR Check if the version of Win32k.sys is greater than or equal to 6.1.7601.23000 AND Check if the version of win32k.sys is less than 6.1.7601.23038 OR Check if the version of win32k.sys is less than 6.1.7601.18834
BACK