oval:org.mitre.oval:def:141

Definition Id: oval:org.mitre.oval:def:141

Oval ID:	oval:org.mitre.oval:def:141
Title:	Microsoft Internet Explorer MIME Hack
Description:	HTML e-mail feature in Internet Explorer 5.5 and earlier allows attackers to execute attachments by setting an unusual MIME type for the attachment, which Internet Explorer does not process correctly.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2001-0154	Version:	8
Platform(s):	Microsoft Windows 2000	Product(s):	Microsoft Internet Explorer
Definition Synopsis:
Software section Internet Explorer 5.01 Installed Internet Explorer 5.01 Installed AND Internet Explorer 5.01 Installed AND Internet Explorer 5.01 Installed AND Internet Explorer 5.01 Installed AND Internet Explorer 5.01 Installed AND Internet Explorer 5.01 Installed AND File %windir%\system32\shdocvw.dll version is less than 5.0.3214.2000 AND NOT the patch q290108 is installed AND NOT the patch q295106 is installed AND NOT Win2K/XP/2003/Vista/2008 Service Pack 2 is installed AND Configuration section file downloads are enabled current user settings are being used and file downloads are enabled NOT use machine settings rather than individual user settings AND file downloads are enabled for the local machine AND local machine settings are being used and file downloads are enabled use machine settings rather than individual user settings AND file downloads are enabled for the current user