Oval Definition:	oval:org.mitre.oval:def:5437
Revision Date: 2011-11-14 Version: 45 Title: Windows Kernel Vulnerability Description: Unspecified vulnerability in the kernel in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, through Vista SP1, and Server 2008 allows local users to execute arbitrary code via unknown vectors related to improper input validation. NOTE: it was later reported that one affected function is NtUserFnOUTSTRING in win32k.sys. Family: windows Class: vulnerability Status: ACCEPTED Reference(s): CVE-2008-1084 Platform(s): Microsoft Windows 2000 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows XP Product(s): Definition Synopsis Vulnerable Windows 2000 SP4 Microsoft Windows 2000 SP4 or later is installed AND Win32k.sys version is less than 5.0.2195.7154 OR Vulnerable Windows XP SP2 Microsoft Windows XP SP2 or later is installed AND Win32k.sys version is less than 5.1.2600.3335 OR Vulnerable Windows XP x64 SP1/Server 2003 SP1 x86/x64/ia-64 Windows XP x64 SP1/Server 2003 SP1 x86/x64/ia-64 Microsoft Windows XP Professional x64 Edition SP1 is installed OR Microsoft Windows Server 2003 SP1 (x86) is installed OR Microsoft Windows Server 2003 SP1 (x64) is installed OR Microsoft Windows Server 2003 SP1 for Itanium is installed AND Win32k.sys version is less than 5.2.3790.3106 OR Vulnerable Windows XP x64 SP2/Server 2003 SP2 x86/x64/ia-64 Windows XP x64 SP2/Server 2003 SP2 x86/x64/ia-64 Microsoft Windows XP x64 Edition SP2 is installed OR Microsoft Windows Server 2003 SP2 (x86) is installed OR Microsoft Windows Server 2003 SP2 (x64) is installed OR Microsoft Windows Server 2003 (ia64) SP2 is installed AND Win32k.sys version is less than 5.2.3790.4256 OR Vulnerable Windows Vista (32-bit)/(x64) Windows Vista (32-bit)/(x64) Microsoft Windows Vista (32-bit) is installed OR Microsoft Windows Vista x64 Edition is installed AND Check for LDR/GDR Win32k.sys version is less than 6.0.6000.16646 OR Check for LDR the version of win32k.sys is greater than 6.0.6000.20000 AND Check if version of win32k.sys is less than 6.0.6000.20782 OR Vulnerable Windows Vista SP1 (32-bit)/(x64) /Server 2008 x86/x64/ia-64 Windows Vista SP1 (32-bit)/(x64) /Server 2008 x86/x64/ia-64 Microsoft Windows Vista (32-bit) Service Pack 1 is installed OR Microsoft Windows Vista x64 Edition Service Pack 1 is installed OR Microsoft Windows Server 2008 (64-bit) is installed OR Microsoft Windows Server 2008 (32-bit) is installed OR Microsoft Windows Server 2008 (ia-64) is installed AND Check for LDR/GDR Win32k.sys version is less than 6.0.6001.18027 OR Check for LDR the version of win32k.sys is greater than or equal to 6.0.6001.22000 AND Check if version of win32k.sys is less than 6.0.6001.22125
BACK