Oval Definition:
oval:org.mitre.oval:def:740
Revision Date
:
2008-11-17
Version
:
5
Title
:
Microsoft Office Smart Tag Parsing Vulnerability
Description
:
Unspecified vulnerability in Microsoft Office XP and 2003 allows remote user-assisted attackers to execute arbitrary code via a malformed Smart Tag.
Family
:
windows
Class
:
vulnerability
Status
:
ACCEPTED
Reference(s)
:
CVE-2006-3868
Platform(s)
:
Microsoft Windows 2000
Microsoft Windows Server 2003
Microsoft Windows XP
Product(s)
:
Microsoft Office
Definition Synopsis
Microsoft Office XP
Microsoft Office XP is installed
AND
The Office XP (or later) version of Mso.dll is installed.
AND
The version of mso.dll is less than 10.0.6817.0.
OR
Microsoft Office 2003
Microsoft Office 2003 is installed
AND
The Office 2003 (or later) version of Mso.dll is installed.
AND
The version of mso.dll is less than 11.0.8107.0.
OR
Microsoft Project 2002
Microsoft Project 2002 SP1 is installed
AND
The Office XP (or later) version of Mso.dll is installed.
AND
The version of mso.dll is less than 10.0.6817.0.
OR
Microsoft Office Visio 2002
Microsoft Office Visio 2002 SP2 is installed
AND
The Office XP (or later) version of Mso.dll is installed.
AND
The version of mso.dll is less than 10.0.6817.0.
OR
Microsoft Word Viewer
Microsoft Word Viewer is installed
AND
The Office 2003 (or later) version of Mso.dll is installed.
AND
The version of mso.dll is less than 11.0.8107.0.
OR
Microsoft Excel Viewer 2003
Microsoft Excel Viewer 2003 is installed
AND
The Office 2003 (or later) version of Mso.dll is installed.
AND
The version of mso.dll is less than 11.0.8107.0.
BACK