Oval Definition:	oval:org.mitre.oval:def:5720
Revision Date: 2014-08-18 Version: 46 Title: HTML Objects Memory Corruption Vulnerability Description: Heap-based buffer overflow in the substringData method in Microsoft Internet Explorer 6 and 7 allows remote attackers to execute arbitrary code, related to an unspecified manipulation of a DOM object before a call to this method, aka the "HTML Objects Memory Corruption Vulnerability." Family: windows Class: vulnerability Status: ACCEPTED Reference(s): CVE-2008-1442 Platform(s): Microsoft Windows 2000 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Vista Microsoft Windows XP Product(s): Microsoft Internet Explorer 6 Microsoft Internet Explorer 7 Definition Synopsis Win 2K + IE6 Microsoft Windows 2000 is installed AND Microsoft Internet Explorer 6 is installed AND Mshtml.dll version is less than 6.0.2800.1611 OR Win XP X86 and IE 6 Mshtml.dll version is less than 6.0.2900.3354 AND Microsoft Windows XP (32-bit) is installed AND Microsoft Internet Explorer 6 is installed OR Win XP / Win 2K3 Microsoft Internet Explorer 7 is installed AND Win XP / Win 2K3 Microsoft Windows XP (32-bit) is installed OR Microsoft Windows XP x64 is installed OR Microsoft Windows Server 2003 (32-bit) is installed OR Microsoft Windows Server 2003 (x64) is installed OR Microsoft Windows Server 2003 (ia64) Gold is installed AND Check for LDR / GDR Mshtml.dll version is less than 7.0.6000.16674 OR Check for GDR Mshtml.dll version is greater than 7.0.6000.20000 AND Check if the version of mshtml.dll is less than 7.0.6000.20815 OR Win XP X64 /Win 2K3 and IE6 Microsoft Internet Explorer 6 is installed AND Mshtml.dll version is less than 6.0.3790.3123 AND Win XP X64 /Win 2K3 Microsoft Windows XP x64 is installed OR Microsoft Windows Server 2003 (32-bit) is installed OR Microsoft Windows Server 2003 (x64) is installed OR Microsoft Windows Server 2003 (ia64) Gold is installed OR Win XP X64/ Win 2K3 and IE 6 Microsoft Internet Explorer 6 is installed AND Mshtml.dll version is less than 6.0.3790.4275 AND Win XP X64 /Win 2K3 Microsoft Windows XP x64 is installed OR Microsoft Windows Server 2003 (32-bit) is installed OR Microsoft Windows Server 2003 (x64) is installed OR Microsoft Windows Server 2003 (ia64) Gold is installed OR Win Vista and IE 7 Microsoft Windows Vista is installed AND Check for LDR / GDR Mshtml.dll version is less than 7.0.6000.16681 OR Check for LDR Mshtml.dll version is greater than 7.0.6000.20000 AND Check if the version of mshtml.dll is less than 7.0.6000.20823 AND Microsoft Internet Explorer 7 is installed OR Win Vista / Win 2K8 and IE 7 Microsoft Internet Explorer 7 is installed AND Win Vista / Win 2K8 Microsoft Windows Server 2008 (32-bit) is installed OR Microsoft Windows Server 2008 (64-bit) is installed OR Microsoft Windows Vista (32-bit) is installed OR Microsoft Windows Vista x64 Edition is installed AND Check for LDR / GDR Mshtml.dll version is less than 7.0.6001.18063 OR Check for LDR Mshtml.dll version is greater than or equal to 7.0.6001.22000 AND Check if the version of mshtml.dll is less than 7.0.6001.22167 OR Win XP X86 + IE6 Microsoft Windows XP (32-bit) is installed AND Check if the version of mshtml.dll is less than 6.0.2900.5583 AND Microsoft Internet Explorer 6 is installed
BACK