oval:org.mitre.oval:def:12457

Definition Id: oval:org.mitre.oval:def:12457
 
Oval ID: oval:org.mitre.oval:def:12457
Title: MFC Insecure Library Loading Vulnerability
Description: Untrusted search path vulnerability in the Microsoft Foundation Class (MFC) Library in Microsoft Visual Studio .NET 2003 SP1; Visual Studio 2005 SP1, 2008 SP1, and 2010; and Visual C++ 2005 SP1, 2008 SP1, and 2010 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory during execution of an MFC application such as AtlTraceTool8.exe (aka ATL MFC Trace Tool), as demonstrated by a directory that contains a TRC, cur, rs, rct, or res file, aka "MFC Insecure Library Loading Vulnerability."
Family: windows Class: vulnerability
Reference(s): CVE-2010-3190
Version: 19
Platform(s): Microsoft Windows XP
Microsoft Windows Server 2003
Microsoft Windows Vista
Microsoft Windows Server 2008
Microsoft Windows 7
Product(s): Microsoft Visual Studio .NET 2003
Microsoft Visual Studio 2005
Microsoft Visual Studio 2008
Microsoft Visual Studio 2010
Microsoft Visual C++ 2005 Redistributable Package
Microsoft Visual C++ 2008 Redistributable Package
Microsoft Visual C++ 2010 Redistributable Package
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:28587
 
Oval ID: oval:org.mitre.oval:def:28587
Title: Microsoft Visual C++ 2008 Redistributable Package is installed
Description: Microsoft Visual C++ 2008 Redistributable Package is installed.
Family: windows Class: inventory
Reference(s): cpe:/a:microsoft:visual_c++:2008:redistribution_pkg
Version: 3
Platform(s): Microsoft Windows 2000
Microsoft Windows XP
Microsoft Windows Server 2003
Microsoft Windows Vista
Microsoft Windows Server 2008
Product(s): Microsoft Visual C++ 2008 Redistributable Package
Definition Synopsis:
Referenced By:
oval:org.mitre.oval:def:12457
Definition Id: oval:org.mitre.oval:def:29007
 
Oval ID: oval:org.mitre.oval:def:29007
Title: Microsoft Visual C++ 2005 Redistributable Package is installed
Description: Microsoft Visual C++ 2005 Redistributable Package is installed.
Family: windows Class: inventory
Reference(s): cpe:/a:microsoft:visual_c++:2005:redistribution_pkg
Version: 3
Platform(s): Microsoft Windows 2000
Microsoft Windows XP
Microsoft Windows Server 2003
Microsoft Windows Vista
Microsoft Windows Server 2008
Product(s): Microsoft Visual C++ 2005 Redistributable Package
Definition Synopsis:
Referenced By:
oval:org.mitre.oval:def:12457
Definition Id: oval:org.mitre.oval:def:29127
 
Oval ID: oval:org.mitre.oval:def:29127
Title: Microsoft Visual C++ 2010 Redistributable Package is installed
Description: Microsoft Visual C++ 2010 Redistributable Package is installed.
Family: windows Class: inventory
Reference(s): cpe:/a:microsoft:visual_c++:2010:redistribution_pkg
Version: 3
Platform(s): Microsoft Windows XP
Microsoft Windows Server 2003
Microsoft Windows Vista
Microsoft Windows Server 2008
Microsoft Windows 7
Microsoft Windows Server 2008 R2
Product(s): Microsoft Visual C++ 2010 Redistributable Package
Definition Synopsis:
Referenced By:
oval:org.mitre.oval:def:12457
Definition Id: oval:org.mitre.oval:def:168
 
Oval ID: oval:org.mitre.oval:def:168
Title: Microsoft Visual Studio .NET 2003 SP1 is installed
Description: Microsoft Visual Studio .NET 2003 SP1 is installed.
Family: windows Class: inventory
Reference(s): cpe:/a:microsoft:visual_studio_.net:2003:sp1
Version: 9
Platform(s): Microsoft Windows 2000
Microsoft Windows XP
Microsoft Windows Vista
Microsoft Windows 7
Microsoft Windows Server 2003
Microsoft Windows Server 2008
Microsoft Windows Server 2008 R2
Product(s):
Definition Synopsis:
Referenced By:
oval:org.mitre.oval:def:12457
Definition Id: oval:org.mitre.oval:def:6401
 
Oval ID: oval:org.mitre.oval:def:6401
Title: Microsoft Visual Studio 2005 Service Pack 1 is installed
Description: Microsoft Visual Studio 2005 Service Pack 1 is installed.
Family: windows Class: inventory
Reference(s): cpe:/a:microsoft:visual_studio:2005:SP1
Version: 3
Platform(s): Microsoft Windows 2000
Microsoft Windows XP
Microsoft Windows Vista
Microsoft Windows 7
Microsoft Windows Server 2003
Microsoft Windows Server 2008
Microsoft Windows Server 2008 R2
Product(s):
Definition Synopsis:
Referenced By:
oval:org.mitre.oval:def:12457
Definition Id: oval:org.mitre.oval:def:5401
 
Oval ID: oval:org.mitre.oval:def:5401
Title: Microsoft Visual Studio 2008 is installed
Description: Microsoft Visual Studio 2008 is installed.
Family: windows Class: inventory
Reference(s): cpe:/a:microsoft:visual_studio:2008
Version: 5
Platform(s): Microsoft Windows XP
Microsoft Windows Vista
Microsoft Windows Server 2003
Microsoft Windows Server 2008
Product(s):
Definition Synopsis:
Referenced By:
oval:org.mitre.oval:def:12457
Definition Id: oval:org.mitre.oval:def:7533
 
Oval ID: oval:org.mitre.oval:def:7533
Title: Microsoft Visual Studio 2010 is installed
Description: Microsoft Visual Studio 2010 is installed
Family: windows Class: inventory
Reference(s): cpe:/a:microsoft:visual_studio:2010
Version: 7
Platform(s): Microsoft Windows XP
Microsoft Windows Vista
Microsoft Windows Server 2003
Microsoft Windows Server 2008
Microsoft Windows 7
Microsoft Windows Server 2008 R2
Product(s): Microsoft Visual Studio 2010
Definition Synopsis:
Referenced By:
oval:org.mitre.oval:def:12457
Definition Id: oval:org.mitre.oval:def:426
 
Oval ID: oval:org.mitre.oval:def:426
Title: Microsoft Visual Studio 2005 is installed.
Description: Microsoft Visual Studio 2005 is installed.
Family: windows Class: inventory
Reference(s): cpe:/a:microsoft:visual_studio:2005
Version: 9
Platform(s): Microsoft Windows XP
Microsoft Windows Server 2003
Microsoft Windows Vista
Microsoft Windows 7
Microsoft Windows Server 2008
Microsoft Windows Server 2008 R2
Product(s): Microsoft Visual Studio 2005
Definition Synopsis:
Referenced By:
oval:org.mitre.oval:def:6401