Oval Definition:	oval:org.mitre.oval:def:6190
Revision Date: 2014-08-18 Version: 48 Title: Uninitialized Memory Corruption Vulnerability (CVE-2009-2530) Description: Microsoft Internet Explorer 6, 6 SP1, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "Uninitialized Memory Corruption Vulnerability," a different vulnerability than CVE-2009-2531. Family: windows Class: vulnerability Status: ACCEPTED Reference(s): CVE-2009-2530 Platform(s): Microsoft Windows 2000 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Vista Microsoft Windows XP Product(s): Microsoft Internet Explorer Definition Synopsis IE6/Windows 2000 Microsoft Windows 2000 is installed AND Microsoft Internet Explorer 6 is installed AND Mshtml.dll version is less than 6.0.2800.1638 OR Internet Explorer 6 on Windows XP x86 Microsoft Windows XP (32-bit) is installed AND Microsoft Internet Explorer 6 is installed AND Mshtml.dll version is less than 6.0.2900.3627 OR Internet Explorer 6 on Windows XP x86 Microsoft Windows XP (32-bit) is installed AND Microsoft Internet Explorer 6 is installed AND Mshtml.dll version is less than 6.0.2900.5880 OR Internet Explorer 6 on all Windows XP x64, Server 2003 x86,x64,ia64 XP x64/server 2003 x86/x64/ia64 Microsoft Windows XP x64 is installed OR Microsoft Windows Server 2003 (32-bit) is installed OR Microsoft Windows Server 2003 (x64) is installed OR Microsoft Windows Server 2003 (ia64) Gold is installed AND Microsoft Internet Explorer 6 is installed AND Mshtml.dll version is less than 6.0.3790.4589 OR Internet Explorer 7 on all Windows XP x86, x64 XP x86/x64 Microsoft Windows XP (32-bit) is installed OR Microsoft Windows XP x64 is installed AND Microsoft Internet Explorer 7 is installed AND GDR or QFE Service branch Mshtml.dll version is less than 7.0.6000.16915 OR QFE Mshtml.dll version is greater than 7.0.6000.20000 AND Mshtml.dll version is less than 7.0.6000.21115 OR Internet Explorer 7 on all Windows Server 2003 x86/x64/ia64 Server 2003 x86/x64/ia64 Microsoft Windows Server 2003 (32-bit) is installed OR Microsoft Windows Server 2003 (x64) is installed OR Microsoft Windows Server 2003 (ia64) Gold is installed AND Microsoft Internet Explorer 7 is installed AND GDR or QFE Service branch Mshtml.dll version is less than 7.0.6000.16915 OR QFE Mshtml.dll version is greater than 7.0.6000.20000 AND Mshtml.dll version is less than 7.0.6000.21115 OR Internet Explorer 7 on all Windows Vista x86/x64 Vista x86/x64 Microsoft Windows Vista (32-bit) is installed OR Microsoft Windows Vista x64 Edition is installed AND Microsoft Internet Explorer 7 is installed AND GDR or LDR Service branch Mshtml.dll version is less than 7.0.6000.16916 OR LDR Mshtml.dll version is greater than 7.0.6000.20000 AND Mshtml.dll version is less than 7.0.6000.21116 OR Internet Explorer 7 on all Windows Vista x86/x64, all Server 2008 x86/x64/ia64 Vista x86/x64, Server 2008 x86/x64/ia64 Microsoft Windows Vista (32-bit) is installed OR Microsoft Windows Vista x64 Edition is installed OR Microsoft Windows Server 2008 (32-bit) is installed OR Microsoft Windows Server 2008 (64-bit) is installed OR Microsoft Windows Server 2008 (ia-64) is installed AND Microsoft Internet Explorer 7 is installed AND GDR or LDR Service branch Mshtml.dll version is less than 7.0.6001.18319 OR LDR Mshtml.dll version is greater than 7.0.6001.20000 AND Mshtml.dll version is less than 7.0.6001.22508 OR Internet Explorer 7 on all Windows Vista x86/x64, Server 2008 x86/64/ia64 Vista x86/x64, Server 2008 x86/64/ia64 Microsoft Windows Vista (32-bit) is installed OR Microsoft Windows Vista x64 Edition is installed OR Microsoft Windows Server 2008 (64-bit) is installed OR Microsoft Windows Server 2008 (32-bit) is installed OR Microsoft Windows Server 2008 (ia-64) is installed AND Microsoft Internet Explorer 7 is installed AND GDR or LDR Service branch Mshtml.dll version is less than 7.0.6002.18100 OR LDR Mshtml.dll version is greater than 7.0.6002.22000 AND Mshtml.dll version is less than 7.0.6002.22212 OR Internet Explorer 8 on all Windows XP x86, x64, Server 2003 x86/x64 , Vista x86/x64, x86 SP2, Server 2008 x86/x64, x86/x64 SP2 OS section Microsoft Windows XP (32-bit) is installed OR Microsoft Windows XP x64 is installed OR Microsoft Windows Server 2003 (32-bit) is installed OR Microsoft Windows Server 2003 (x64) is installed OR Microsoft Windows Vista (32-bit) is installed OR Microsoft Windows Vista x64 Edition is installed OR Microsoft Windows Server 2008 (64-bit) is installed OR Microsoft Windows Server 2008 (32-bit) is installed AND Microsoft Internet Explorer 8 is installed AND GDR or LDR Service branch Mshtml.dll version is less than 8.0.6001.18828 OR LDR Mshtml.dll version is greater than 8.0.6001.22000 AND Mshtml.dll version is less than 8.0.6001.22918
BACK