Oval Definition:oval:org.mitre.oval:def:6287
Revision Date:2014-03-03Version:47
Title:Print Spooler Load Library Vulnerability
Description:The Windows Print Spooler in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 allows remote authenticated users to gain privileges via a crafted RPC message that triggers loading of a DLL file from an arbitrary directory, aka "Print Spooler Load Library Vulnerability."
Family:windowsClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2009-0230
Platform(s):Microsoft Windows 2000
Microsoft Windows Server 2003
Microsoft Windows Server 2008
Microsoft Windows Vista
Microsoft Windows XP
Product(s):
Definition Synopsis
  • Vulnerable on Windows 2000 SP4
  • Microsoft Windows 2000 SP4 or later is installed
  • AND Win32spl.dll version is less than 5.0.2195.7266
  • OR Vulnerable Windows XP x86 SP2
  • Microsoft Windows XP (x86) SP2 is installed
  • AND Localspl.dll version is less than 5.1.2600.3569
  • OR Vulnerable Windows XP x86 SP3
  • Microsoft Windows XP (x86) SP3 is installed
  • AND Localspl.dll version is less than 5.1.2600.5809
  • OR Vulnerable Windows XP x64 SP2, Server 2003 x86/x64/ia64 SP2
  • Microsoft Windows XP x64 Edition SP2 is installed
  • OR Microsoft Windows Server 2003 SP2 (x86) is installed
  • OR Microsoft Windows Server 2003 SP2 (x64) is installed
  • OR Microsoft Windows Server 2003 (ia64) SP2 is installed
  • AND Localspl.dll version is less than 5.2.3790.4509
  • OR Vulnerable Windows Vista x86/x64
  • Microsoft Windows Vista (32-bit) is installed
  • OR Microsoft Windows Vista x64 Edition is installed
  • AND GDR or LDR Service branch
  • Localspl.dll version is less than 6.0.6000.16850
  • OR LDR
  • Localspl.dll version is less than 6.0.6000.21045
  • AND Localspl.dll version is greater than 6.0.6000.20000
  • OR Vulnerable Windows Vista x86/x64 SP1, all Server 2008 x86/x64/ia64
  • Microsoft Windows Vista (32-bit) Service Pack 1 is installed
  • OR Microsoft Windows Vista x64 Edition Service Pack 1 is installed
  • OR Microsoft Windows Server 2008 (32-bit) is installed
  • OR Microsoft Windows Server 2008 (64-bit) is installed
  • OR Microsoft Windows Server 2008 (ia-64) is installed
  • AND GDR or LDR Service branch
  • Localspl.dll version is less than 6.0.6001.18247
  • OR LDR
  • Localspl.dll version is less than 6.0.6001.22417
  • AND Localspl.dll version is greater than 6.0.6001.22000
  • OR Vulnerable Windows Vista x86/x64 SP2, Server 2008 x86/64/ia64 SP2
  • Microsoft Windows Vista (32-bit) Service Pack 2 is installed
  • OR Microsoft Windows Vista x64 Edition Service Pack 2 is installed
  • OR Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed
  • OR Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed
  • OR Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed
  • AND GDR or LDR Service branch
  • Localspl.dll version is less than 6.0.6002.18024
  • OR LDR
  • Localspl.dll version is less than 6.0.6002.22120
  • AND Localspl.dll version is greater than 6.0.6002.22000
  • BACK