Oval Definition:	oval:org.mitre.oval:def:5630
Revision Date: 2011-11-14 Version: 45 Title: Event System Vulnerability Description: Array index vulnerability in the Event System in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote authenticated users to execute arbitrary code via a crafted event subscription request that is used to access an array of function pointers. Family: windows Class: vulnerability Status: ACCEPTED Reference(s): CVE-2008-1456 Platform(s): Microsoft Windows 2000 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Vista Microsoft Windows XP Product(s): Definition Synopsis win 2000 sp4/version Microsoft Windows 2000 SP4 or later is installed AND the version of es.dll is less than 2000.2.3550.0 OR win XP SP2/version the version of es.dll is less than 2001.12.4414.320 AND Microsoft Windows XP (x86) SP2 is installed OR win XP SP3/version Microsoft Windows XP (x86) SP3 is installed AND the version of es.dll is less than 2001.12.4414.706 OR server 2003 SP1/XP 64 bit/version the version of es.dll is less than 2001.12.4720.3129 AND OS check Microsoft Windows Server 2003 SP1 (x86) is installed OR Microsoft Windows Server 2003 SP1 for Itanium is installed OR Microsoft Windows Server 2003 SP1 (x64) is installed OR Microsoft Windows XP Professional x64 Edition SP1 is installed OR server 2003 SP2/PX SP2 64 bit/version the version of es.dll is less than 2001.12.4720.4282 AND OS check Microsoft Windows Server 2003 (ia64) SP2 is installed OR Microsoft Windows Server 2003 SP2 (x86) is installed OR Microsoft Windows Server 2003 SP2 (x64) is installed OR Microsoft Windows XP x64 Edition SP2 is installed OR Vista/version Microsoft Windows Vista is installed AND GDR/LDR the version of es.dll is less than 2001.12.6930.16677 OR LDR range Check if the version of Es.dll is greater than or equal to 2001.12.6930.20000 AND Check if the version of Es.dll is less than 2001.12.6930.20818 OR vista sp1/server 2008 sp1/version OS check Microsoft Windows Vista (32-bit) Service Pack 1 is installed OR Microsoft Windows Vista x64 Edition Service Pack 1 is installed OR Microsoft Windows Server 2008 (ia-64) is installed OR Microsoft Windows Server 2008 (64-bit) is installed OR Microsoft Windows Server 2008 (32-bit) is installed AND GDR/LDR the version of es.dll is less than 2001.12.6931.18057 OR LDR range Check if the version of Es.dll is greater than or equal to 2001.12.6931.22000 AND Check if the version of Es.dll is less than 2001.12.6931.22162
BACK