Oval Definition:	oval:org.mitre.oval:def:5604
Revision Date: 2011-11-14 Version: 22 Title: PGM Malformed Fragment Vulnerability Description: Microsoft Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote attackers to cause a denial of service (system hang) via a series of Pragmatic General Multicast (PGM) packets with invalid fragment options, aka the "PGM Malformed Fragment Vulnerability." Family: windows Class: vulnerability Status: ACCEPTED Reference(s): CVE-2008-1441 Platform(s): Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Vista Microsoft Windows XP Product(s): Definition Synopsis Vulnerable Windows XP SP2 Microsoft Windows XP SP2 or later is installed AND The version of Rmcast.sys is less than 5.1.2600.3369. OR Vulnerable Windows XP (x86) SP3 Microsoft Windows XP (x86) SP3 is installed AND The version of Rmcast.sys is less than 5.1.2600.5598. OR Vulnerable Windows XP SP1 (x64)/Server 2003 SP1 (x86)/(x64)/(ia-64) Windows XP SP1 (x64)/Server 2003 SP1 (x86)/(x64)/(ia-64) Microsoft Windows XP Professional x64 Edition SP1 is installed OR Microsoft Windows Server 2003 SP1 (x86) is installed OR Microsoft Windows Server 2003 (x64) is installed OR Microsoft Windows Server 2003 SP1 for Itanium is installed AND The version of Rmcast.sys is less than 5.2.3790.3136. OR Vulnerable Windows XP SP2 (x64)/Server 2003 SP2 (x86)/(x64)/(ia-64) Windows XP SP2 (x64)/Server 2003 SP2 (x86)/(x64)/(ia-64) Microsoft Windows XP x64 Edition SP2 is installed OR Microsoft Windows Server 2003 SP2 (x86) is installed OR Microsoft Windows Server 2003 SP2 (x64) is installed OR Microsoft Windows Server 2003 (ia64) SP2 is installed AND The version of Rmcast.sys is less than 5.2.3790.4290. OR Vulnerable Windows Vista (32-bit)/(x64) Windows Vista (32-bit)/(x64) Microsoft Windows Vista (32-bit) is installed OR Microsoft Windows Vista x64 Edition is installed AND Check for LDR/GDR The version of Rmcast.sys is less than 6.0.6000.16687. OR Check for LDR Check if version of Rmcast.sys is less that 6.0.6000.20832 AND Check if version of Rmcast.sys is greater than or equal to 6.0.6000.20000 OR Vulnerable Windows Vista SP1 (32-bit)/(x64)/Server 2008 (x86)/(x64)/(ia-64) Windows Vista SP1 (32-bit)/(x64)/Server 2008 (x86)/(x64)/(ia-64) Microsoft Windows Vista (32-bit) Service Pack 1 is installed OR Microsoft Windows Vista x64 Edition Service Pack 1 is installed OR Microsoft Windows Server 2008 (32-bit) is installed OR Microsoft Windows Server 2008 (64-bit) is installed AND Check for LDR/GDR Check if version of Rmcast.sys is less than 6.0.6001.18069 OR Check for LDR Check if version of Rmcast.sys is greater than or equal to 6.0.6001.22000 AND Check if version of Rmcast.sys is less than 6.0.6001.22176
BACK