Oval Definition:	oval:org.mitre.oval:def:5600
Revision Date: 2011-10-31 Version: 44 Title: Windows Saved Search Vulnerability Description: Windows Explorer in Microsoft Windows Vista up to SP1, and Server 2008, allows user-assisted remote attackers to execute arbitrary code via crafted saved-search (.search-ms) files that are not properly handled when saving, aka "Windows Saved Search Vulnerability." Family: windows Class: vulnerability Status: ACCEPTED Reference(s): CVE-2008-1435 Platform(s): Microsoft Windows Server 2008 Microsoft Windows Vista Product(s): Definition Synopsis Vulnerable Windows Vista (32-bit)/(x64) Windows Vista (32-bit)/(x64) Microsoft Windows Vista (32-bit) is installed OR Microsoft Windows Vista x64 Edition is installed AND Check for LDR/GDR shell32.dll version is less than 6.0.6000.16680 OR Check for LDR Check if version of Shell32.dll is greater than or equal to 6.0.6000.20000 AND Check if version of Shell32.dll is less than 6.0.6000.20822 OR Vulnerable Windows Vista SP1 (32-bit)/(x64)/Server 2008 (x86)/(x64)/(ia-64) Windows Vista SP1 (32-bit)/(x64)/Server 2008 (x86)/(x64)/(ia-64) Microsoft Windows Vista (32-bit) Service Pack 1 is installed OR Microsoft Windows Vista x64 Edition Service Pack 1 is installed OR Microsoft Windows Server 2008 (32-bit) is installed OR Microsoft Windows Server 2008 (ia-64) is installed OR Microsoft Windows Server 2008 (64-bit) is installed AND Check for LDR/GDR shell32.dll version is less than 6.0.6001.18062 OR Check for LDR Check if version of Shell32.dll is greater than or equal to 6.0.6001.22000 AND Check if version of Shell32.dll is less than 6.0.6001.22166
BACK