Oval Definition:	oval:org.mitre.oval:def:5853
Revision Date: 2011-11-21 Version: 19 Title: Windows Saved Search Vulnerability Description: The Windows Search component in Microsoft Windows Vista Gold and SP1 and Server 2008 does not properly free memory during a save operation for a Windows Search file, which allows remote attackers to execute arbitrary code via a crafted saved-search file, aka "Windows Saved Search Vulnerability." Family: windows Class: vulnerability Status: ACCEPTED Reference(s): CVE-2008-4268 Platform(s): Microsoft Windows Server 2008 Microsoft Windows Vista Product(s): Definition Synopsis Check for Vulnerable for Windows Vista(x86)/(x64) and Explorer.exe version Check for Vulnerable for Windows Vista(x86)/(x64) Microsoft Windows Vista (32-bit) is installed OR Microsoft Windows Vista x64 Edition is installed AND Check for LDR/GDR Explorer.exe version is less than 6.0.6000.16771 OR Check for LDR Check if version of Explorer.exe is greater than or equal to 6.0.6000.20000 AND Check if version of Explorer.exe is less than 6.0.6000.20947 OR Check for vulnerable Windows server 2008 (x86)/(x64)/(ia-64)Vista SP1(x86)/(x64) and Explorer.exe version Check for vulnerable Windows server 2008 (x86)/(x64)/(ia-64)Vista SP1(x86)/(x64) Microsoft Windows Server 2008 (32-bit) is installed OR Microsoft Windows Server 2008 (64-bit) is installed OR Microsoft Windows Vista (32-bit) Service Pack 1 is installed OR Microsoft Windows Vista x64 Edition Service Pack 1 is installed OR Microsoft Windows Server 2008 (ia-64) is installed AND Check for LDR/GDR Explorer.exe version is less than 6.0.6001.18164 OR Check for LDR Check if version of Explorer.exe is greater than or equal to 6.0.6001.22000 AND Check if version of Explorer.exe is less than 6.0.6001.22298
BACK