Oval Definition:oval:org.mitre.oval:def:5487
Revision Date:2014-08-25Version:52
Title:HTML Rendering Memory Corruption Vulnerability
Description:Unspecified vulnerability in Microsoft Internet Explorer 5.01, 6 SP1 and SP2, and 7 allows remote attackers to execute arbitrary code via crafted HTML layout combinations, aka "HTML Rendering Memory Corruption Vulnerability."
Family:windowsClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2008-0076
Platform(s):Microsoft Windows 2000
Microsoft Windows Server 2003
Microsoft Windows Vista
Microsoft Windows XP
Product(s):Microsoft Internet Explorer
Definition Synopsis
  • IE 5.01,SP4 on Win2k
  • Microsoft Windows 2000 is installed
  • AND Microsoft Internet Explorer 5.01 SP4 is installed
  • AND the version of mshtml.dll is less than 5.0.3860.1000
  • OR IE 6 on Win 2k
  • Microsoft Windows 2000 is installed
  • AND Internet Explorer 6 Service Pack 1 is installed
  • AND the version of mshtml.dll is less than 6.0.2800.1607
  • OR IE 6 on Win XP
  • Microsoft Windows XP (32-bit) is installed
  • AND Microsoft Internet Explorer 6 is installed
  • AND the version of mshtml.dll is less than 6.0.2900.3268
  • OR IE 6 on Win 2003 or Win XP X64
  • Microsoft Internet Explorer 6 is installed
  • AND the version of mshtml.dll is less than 6.0.3790.3064
  • AND Win XP X64/ Win 2K3
  • Microsoft Windows Server 2003 (32-bit) is installed
  • OR Microsoft Windows Server 2003 (x64) is installed
  • OR Microsoft Windows Server 2003 for Itanium is installed
  • OR Microsoft Windows XP x64 is installed
  • OR IE 6 on Win 2003 / Win XP X64
  • Microsoft Internet Explorer 6 is installed
  • AND the version of mshtml.dll is less than 6.0.3790.4210
  • AND Win XP X64 / Win 2K3
  • Microsoft Windows Server 2003 (32-bit) is installed
  • OR Microsoft Windows Server 2003 (x64) is installed
  • OR Microsoft Windows Server 2003 for Itanium is installed
  • OR Microsoft Windows XP x64 is installed
  • OR IE 7 on Win 2003 platforms
  • Microsoft Internet Explorer 7 is installed
  • AND Win XP / Win 2K3 and IE 7
  • Microsoft Windows XP is installed
  • OR Microsoft Windows Server 2003 (32-bit) is installed
  • OR Microsoft Windows Server 2003 (x64) is installed
  • OR Microsoft Windows Server 2003 for Itanium is installed
  • AND Check for LDR / GDR
  • the version of mshtml.dll is less than 7.0.6000.16608
  • OR Check for LDR
  • Check if the version of mshtml.dll is less than 7.0.6000.20733
  • AND Mshtml.dll version is greater than 7.0.6000.20000
  • OR IE 7 on Win Vista platforms
  • Microsoft Internet Explorer 7 is installed
  • AND Windows Vista 32/ 64 bit
  • Microsoft Windows Vista (32-bit) is installed
  • OR Microsoft Windows Vista x64 Edition is installed
  • AND Check for LDR / GDR
  • the version of mshtml.dll is less than 7.0.6000.16609
  • OR Check for LDR
  • Check if the version of mshtml.dll is less than 7.0.6000.20734
  • AND Mshtml.dll version is greater than 7.0.6000.20000
  • BACK