Oval Definition:	oval:org.mitre.oval:def:29072
Revision Date: 2015-07-27 Version: 19 Title: Microsoft common control use after free vulnerability - CVE-2015-1756 (MS15-060) Description: Use-after-free vulnerability in Microsoft Common Controls in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows user-assisted remote attackers to execute arbitrary code via a crafted web site that is accessed with the F12 Developer Tools feature of Internet Explorer, aka "Microsoft Common Control Use After Free Vulnerability." Family: windows Class: vulnerability Status: ACCEPTED Reference(s): CVE-2015-1756 Platform(s): Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2 Microsoft Windows Vista Product(s): Definition Synopsis Vista / 2008 and vulnerable file version Vista / 2k8 Microsoft Windows Vista (32-bit) is installed OR Microsoft Windows Vista x64 Edition is installed OR Microsoft Windows Server 2008 (32-bit) is installed OR Microsoft Windows Server 2008 (64-bit) is installed OR Microsoft Windows Server 2008 (ia-64) is installed AND Check for vulnerable version Check if the version of comctl32.dll is less than 6.10.6002.19373 OR Check if the version of comctl32.dll is greater than or equal to 6.10.6002.23000 and less than 6.10.6002.23681 OR Win 7 / R2 and vulnerable file version Win 7 / R2 Microsoft Windows 7 (32-bit) is installed OR Microsoft Windows 7 x64 Edition is installed OR Microsoft Windows Server 2008 R2 x64 Edition is installed OR Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed AND Check for vulnerable range Check if the version of comctl32.dll is less than 6.10.7601.18837 OR Check if the version of comctl32.dll is greater than or equal to 6.10.7601.23000 and less than 6.10.7601.23039 OR Windows 8 / 2k12 and vulnerable file version Windows 8 / 2k12 Microsoft Windows 8 (x86) is installed OR Microsoft Windows 8 (x64) is installed OR Microsoft Windows Server 2012 (64-bit) is installed AND Check for vulnerable versions Check if the version of comctl32.dll is less than 6.10.9200.17359 OR Check if the version of comctl32.dll is greater than or equal to 6.10.9200.21000 and less than 6.10.9200.21472 OR Windows 8.1 or 2k12 R2 and vulnerable file version Windows 8.1 / 2k12 R2 Microsoft Windows 8.1 (x86) is installed OR Microsoft Windows 8.1 (x64) is installed OR Microsoft Windows Server 2012 R2 is installed AND Check if the version of comctl32.dll is less than 6.10.9600.17810
BACK