Oval Definition:	oval:org.mitre.oval:def:5903
Revision Date: 2014-08-18 Version: 46 Title: Uninitialized Memory Corruption Vulnerability Description: Microsoft Internet Explorer 7 sometimes attempts to access a deleted object, which allows remote attackers to execute arbitrary code via a crafted HTML document that triggers memory corruption, aka "Uninitialized Memory Corruption Vulnerability." Family: windows Class: vulnerability Status: ACCEPTED Reference(s): CVE-2008-4260 Platform(s): Microsoft Windows 2000 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Vista Microsoft Windows XP Product(s): Microsoft Internet Explorer 7 Definition Synopsis Microsoft Internet Explorer 7 is installed AND Vulnerable IE 7 Check for Vulnerable XP(x86)/(x64)/2003 (ia-64) and Mshtml.dll version Check for Vulnerable XP(x86)/(x64)/2003 (ia-64) Microsoft Windows XP (32-bit) is installed OR Microsoft Windows Server 2003 (32-bit) is installed OR Microsoft Windows Server 2003 (ia64) Gold is installed OR Microsoft Windows XP x64 is installed AND Check for LDR/GDR Check for LDR Check if version of Mshtml.dll is less than 7.0.6000.20935 AND Mshtml.dll version is greater than 7.0.6000.20000 OR Mshtml.dll version is less than 7.0.6000.16762 OR Check for Vulnerable Windows Vista (x86)/(x64) and Mshtml.dll version Check for Vulnerable Windows Vista (x86)/(x64) Microsoft Windows Vista (32-bit) is installed OR Microsoft Windows Vista x64 Edition is installed AND Check for LDR\GDR Mshtml.dll version is less than 7.0.6000.16764 OR Check for LDR Mshtml.dll version is less than 7.0.6000.20937 AND Mshtml.dll version is greater than 7.0.6000.20000 OR Check for Vulnerable Vista(x86)/(x64)/2008(x86)/(x64) and Mshtml.dll version Check for Vulnerable Vista(x86)/(x64)/2008(x86)/(x64) Microsoft Windows Vista x64 Edition is installed OR Microsoft Windows Vista (32-bit) is installed OR Microsoft Windows Server 2008 (64-bit) is installed OR Microsoft Windows Server 2008 (ia-64) is installed OR Microsoft Windows Server 2008 (32-bit) is installed AND Check for LDR\GDR Mshtml.dll version is less than 7.0.6001.18157 OR Check for LDR Mshtml.dll version is less than 7.0.6001.22288 AND Mshtml.dll version is greater than or equal to 7.0.6001.22000
BACK