Oval Definition:	oval:org.mitre.oval:def:5829
Revision Date: 2011-12-05 Version: 44 Title: HTML Rendering Memory Corruption Vulnerability Description: Stack-based buffer overflow in Microsoft Internet Explorer 5.01 SP4, 6 SP1 on Windows 2000, and 6 on Windows XP and Server 2003 does not properly handle extraneous data associated with an object embedded in a web page, which allows remote attackers to execute arbitrary code via crafted HTML tags that trigger memory corruption, aka "HTML Rendering Memory Corruption Vulnerability." Family: windows Class: vulnerability Status: ACCEPTED Reference(s): CVE-2008-4261 Platform(s): Microsoft Windows 2000 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Vista Microsoft Windows XP Product(s): Microsoft Internet Explorer 5.01 Microsoft Internet Explorer 6 Definition Synopsis Check for Vulnerable Windows 2000 SP4 and Mshtml.dll version Microsoft Windows 2000 SP4 or later is installed AND Microsoft Internet Explorer 5.01 SP4 is installed AND Mshtml.dll version is less than 5.0.3870.1500 OR Vulnerable IE 6 Microsoft Internet Explorer 6 is installed AND Vulnerable Versions Check for Vulnerable Windows 2000 SP4 and Mshtml.dll version Microsoft Windows 2000 SP4 or later is installed AND Mshtml.dll version is less than 6.0.2800.1617 OR Check for Vulnerable Windows XP (x86) SP2 and Mshtml.dll version Microsoft Windows XP SP2 or later is installed AND Mshtml.dll version is less than 6.0.2900.3462 OR Check for Vulnerable Windows XP (x86) SP3 and Mshtml.dll version Microsoft Windows XP (x86) SP3 is installed AND Mshtml.dll version is less than 6.0.2900.5694 OR Check for Vulnerable Server 2003 SP1/2003(ia-64) SP1/XP (x64) and Mshtml.dll version Check for Vulnerable Server 2003 SP1/2003(ia-64)/XP (x64) Microsoft Windows Server 2003 SP1 (x86) is installed OR Microsoft Windows XP Professional x64 Edition SP1 is installed OR Microsoft Windows Server 2003 SP1 for Itanium is installed OR Microsoft Windows Server 2003 SP1 (x64) is installed AND Mshtml.dll version is less than 6.0.3790.3229 OR Check for Vulnerable Server 2003 SP2/2003 SP2(ia-64) SP2/XP SP2(x64) and Mshtml.dll version Check for Vulnerable Server 2003 SP2/2003 SP2(ia-64) SP2/XP SP2(x64) Microsoft Windows Server 2003 SP2 (x86) is installed OR Microsoft Windows XP x64 Edition SP2 is installed OR Microsoft Windows Server 2003 (ia64) SP2 is installed OR Microsoft Windows Server 2003 SP2 (x64) is installed AND Mshtml.dll version is less than 6.0.3790.4392
BACK