Oval Definition:
oval:org.mitre.oval:def:5487
Revision Date
:
2014-08-25
Version
:
52
Title
:
HTML Rendering Memory Corruption Vulnerability
Description
:
Unspecified vulnerability in Microsoft Internet Explorer 5.01, 6 SP1 and SP2, and 7 allows remote attackers to execute arbitrary code via crafted HTML layout combinations, aka "HTML Rendering Memory Corruption Vulnerability."
Family
:
windows
Class
:
vulnerability
Status
:
ACCEPTED
Reference(s)
:
CVE-2008-0076
Platform(s)
:
Microsoft Windows 2000
Microsoft Windows Server 2003
Microsoft Windows Vista
Microsoft Windows XP
Product(s)
:
Microsoft Internet Explorer
Definition Synopsis
IE 5.01,SP4 on Win2k
Microsoft Windows 2000 is installed
AND
Microsoft Internet Explorer 5.01 SP4 is installed
AND
the version of mshtml.dll is less than 5.0.3860.1000
OR
IE 6 on Win 2k
Microsoft Windows 2000 is installed
AND
Internet Explorer 6 Service Pack 1 is installed
AND
the version of mshtml.dll is less than 6.0.2800.1607
OR
IE 6 on Win XP
Microsoft Windows XP (32-bit) is installed
AND
Microsoft Internet Explorer 6 is installed
AND
the version of mshtml.dll is less than 6.0.2900.3268
OR
IE 6 on Win 2003 or Win XP X64
Microsoft Internet Explorer 6 is installed
AND
the version of mshtml.dll is less than 6.0.3790.3064
AND
Win XP X64/ Win 2K3
Microsoft Windows Server 2003 (32-bit) is installed
OR
Microsoft Windows Server 2003 (x64) is installed
OR
Microsoft Windows Server 2003 for Itanium is installed
OR
Microsoft Windows XP x64 is installed
OR
IE 6 on Win 2003 / Win XP X64
Microsoft Internet Explorer 6 is installed
AND
the version of mshtml.dll is less than 6.0.3790.4210
AND
Win XP X64 / Win 2K3
Microsoft Windows Server 2003 (32-bit) is installed
OR
Microsoft Windows Server 2003 (x64) is installed
OR
Microsoft Windows Server 2003 for Itanium is installed
OR
Microsoft Windows XP x64 is installed
OR
IE 7 on Win 2003 platforms
Microsoft Internet Explorer 7 is installed
AND
Win XP / Win 2K3 and IE 7
Microsoft Windows XP is installed
OR
Microsoft Windows Server 2003 (32-bit) is installed
OR
Microsoft Windows Server 2003 (x64) is installed
OR
Microsoft Windows Server 2003 for Itanium is installed
AND
Check for LDR / GDR
the version of mshtml.dll is less than 7.0.6000.16608
OR
Check for LDR
Check if the version of mshtml.dll is less than 7.0.6000.20733
AND
Mshtml.dll version is greater than 7.0.6000.20000
OR
IE 7 on Win Vista platforms
Microsoft Internet Explorer 7 is installed
AND
Windows Vista 32/ 64 bit
Microsoft Windows Vista (32-bit) is installed
OR
Microsoft Windows Vista x64 Edition is installed
AND
Check for LDR / GDR
the version of mshtml.dll is less than 7.0.6000.16609
OR
Check for LDR
Check if the version of mshtml.dll is less than 7.0.6000.20734
AND
Mshtml.dll version is greater than 7.0.6000.20000
BACK