Oval Definition:	oval:org.mitre.oval:def:5481
Revision Date: 2014-08-25 Version: 52 Title: ActiveX Object Memory Corruption Vulnerability Description: Stack-based buffer overflow in certain ActiveX controls in (1) FPOLE.OCX 6.0.8450.0 and (2) Foxtlib.ocx, as used in the Microsoft Visual FoxPro 6.0 fpole 1.0 Type Library; and Internet Explorer 5.01, 6 SP1 and SP2, and 7; allows remote attackers to execute arbitrary code via a long first argument to the FoxDoCmd function. Family: windows Class: vulnerability Status: ACCEPTED Reference(s): CVE-2007-4790 Platform(s): Microsoft Windows 2000 Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows XP Product(s): Microsoft Internet Explorer Definition Synopsis IE 5.01,SP4 on Win2k Microsoft Windows 2000 is installed AND Microsoft Internet Explorer 5.01 SP4 is installed AND the version of mshtml.dll is less than 5.0.3860.1000 OR IE 6 on Win 2k Microsoft Windows 2000 is installed AND Internet Explorer 6 Service Pack 1 is installed AND the version of mshtml.dll is less than 6.0.2800.1607 OR IE 6 on Win XP Microsoft Windows XP is installed AND Microsoft Internet Explorer 6 is installed AND the version of mshtml.dll is less than 6.0.2900.3268 OR IE 6 on Win 2003 or Win XP X64 Microsoft Internet Explorer 6 is installed AND the version of mshtml.dll is less than 6.0.3790.3064 AND Win XP X64/ Win 2K3 Microsoft Windows Server 2003 (32-bit) is installed OR Microsoft Windows Server 2003 (x64) is installed OR Microsoft Windows Server 2003 for Itanium is installed OR Microsoft Windows XP x64 is installed OR IE 6 on Win 2003 / Win XP X64 Microsoft Internet Explorer 6 is installed AND the version of mshtml.dll is less than 6.0.3790.4210 AND Win XP X64 / Win 2K3 Microsoft Windows Server 2003 (32-bit) is installed OR Microsoft Windows Server 2003 (x64) is installed OR Microsoft Windows Server 2003 for Itanium is installed OR Microsoft Windows XP x64 is installed OR IE 7 on Win 2003 platforms Microsoft Internet Explorer 7 is installed AND Win XP / Win 2K3 and IE 7 Microsoft Windows XP is installed OR Microsoft Windows Server 2003 (32-bit) is installed OR Microsoft Windows Server 2003 (x64) is installed OR Microsoft Windows Server 2003 for Itanium is installed AND Check for LDR / GDR the version of mshtml.dll is less than 7.0.6000.16608 OR Check for LDR Check if the version of mshtml.dll is less than 7.0.6000.20733 AND Mshtml.dll version is greater than 7.0.6000.20000 OR IE 7 on Win Vista platforms Microsoft Internet Explorer 7 is installed AND Windows Vista 32/ 64 bit Microsoft Windows Vista (32-bit) is installed OR Microsoft Windows Vista x64 Edition is installed AND Check for LDR / GDR the version of mshtml.dll is less than 7.0.6000.16609 OR Check for LDR Check if the version of mshtml.dll is less than 7.0.6000.20734 AND Mshtml.dll version is greater than 7.0.6000.20000
BACK