oval:org.mitre.oval:def:21019

Definition Id: oval:org.mitre.oval:def:21019

Oval ID:	oval:org.mitre.oval:def:21019
Title:	Microsoft Graphics Component Memory Corruption Vulnerability (CVE-2013-3906) - MS13-096
Description:	GDI+ in Microsoft Windows Vista SP2 and Server 2008 SP2; Office 2003 SP3, 2007 SP3, and 2010 SP1 and SP2; Office Compatibility Pack SP3; and Lync 2010, 2010 Attendee, 2013, and Basic 2013 allows remote attackers to execute arbitrary code via a crafted TIFF image, as demonstrated by an image in a Word document, and exploited in the wild in October and November 2013.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-3906	Version:	10
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2	Product(s):	Microsoft Office 2003 Microsoft Office 2007 Microsoft Office 2010 Microsoft Word Viewer Microsoft Excel Viewer 2007 Microsoft PowerPoint Viewer 2010 Microsoft Lync 2010 Microsoft Lync Basic 2013 Microsoft Lync 2010 Attendee Microsoft Office Compatibility Pack
Definition Synopsis:
For vulnerable OS and vulnerable file version For OS Microsoft Windows Vista (32-bit) is installed AND Microsoft Windows Vista x64 Edition is installed AND Microsoft Windows Server 2008 (32-bit) is installed AND Microsoft Windows Server 2008 (64-bit) is installed AND Microsoft Windows Server 2008 (ia-64) is installed AND For GDR/LDR Check if the version of Gdiplus.dll is less than 6.0.6002.18971 OR For LDR Check if version of Gdiplus.dll is greater than or equal to 6.0.6002.22000 AND Check if the version of Gdiplus.dll is less than 6.0.6002.23256 OR For Office 2003 SP3 and vulnerable file version Microsoft Office 2003 SP3 is installed AND Check if the version of Gdiplus.dll is less than 11.0.8408 OR For Word Viewer 2003/SP3 and vulnerable file version Microsoft Word Viewer 2003 SP3 is installed AND Check if the version of Gdiplus.dll is less than 11.0.8408 OR For Office 2007 SP3 and vulnerable file version Microsoft Office 2007 SP3 is installed AND Check if the version of Ogl.dll is less than 12.0.6688.5000 OR For Office Compatibility Pack/SP3 and vulnerable file version Microsoft Office Compatibility Pack SP3 is installed AND Check if the version of Ogl.dll is less than 12.0.6688.5000 OR For MS Excel Viewer 2007/SP3 and vulnerable file version Microsoft Excel Viewer 2007 SP3 is installed AND Check if the version of Ogl.dll is less than 12.0.6688.5000 OR For Office 2010 SP2 and vulnerable file version Microsoft Office 2010 SP2 is installed AND Check if the version of Ogl.dll is less than 14.0.7110.5004 OR For PowerPoint Viewer 2010/SP1/SP2 and vulnerable file version For PowerPoint Viewer 2010 Microsoft PowerPoint Viewer 2010 SP1 is installed AND Microsoft PowerPoint Viewer 2010 SP2 is installed AND Check if the version of Ogl.dll is less than 14.0.7110.5004 OR For vulnerable Microsoft Lync 2010 Microsoft Lync 2010 is installed AND Check if the version of Communicator.exe (Lync 2010) is less than 4.0.7577.4415 OR For vulnerable Microsoft Lync 2010 attendee (admin) Microsoft Lync 2010 Attendee (admin level install) is installed AND Check if the version of ogl.dll (Lync 2010 Attendee for admin) is less than 4.0.7577.4415 OR For vulnerable Microsoft Lync 2010 attendee (user) Microsoft Lync 2010 Attendee (user level install) is installed AND Check if the version of ogl.dll (Lync 2010 Attendee for user) is less than 4.0.7577.4415 OR For vulnerable Microsoft Lync Basic 2013 Microsoft Lync Basic 2013 is installed AND Check if the version of OCAPIRES.DLL is less than 15.0.4547.1000

Definition Id: oval:org.mitre.oval:def:233

Oval ID:	oval:org.mitre.oval:def:233
Title:	Microsoft Office 2003 is installed
Description:	The application Microsoft Office 2003 is installed.
Family:	windows	Class:	inventory
Reference(s):	cpe:/a:microsoft:office:2003	Version:	10
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2	Product(s):	Microsoft Office 2003
Definition Synopsis:
Microsoft Office 2003 is installed
Referenced By:
oval:org.mitre.oval:def:15626

Definition Id: oval:org.mitre.oval:def:737

Oval ID:	oval:org.mitre.oval:def:737
Title:	Microsoft Word Viewer is installed
Description:	The application Microsoft Word Viewer is installed.
Family:	windows	Class:	inventory
Reference(s):	cpe:/a:microsoft:word_viewer	Version:	5
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows Server 2003 Microsoft Windows Server 2008	Product(s):	Microsoft Word Viewer
Definition Synopsis:
Word Viewer is installed. AND Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\wordview.exe!Path exists
Referenced By:
oval:org.mitre.oval:def:18663

Definition Id: oval:org.mitre.oval:def:1282

Oval ID:	oval:org.mitre.oval:def:1282
Title:	Microsoft Windows Vista (32-bit) is installed
Description:	The operating system installed on the system is Microsoft Windows Vista (32-bit)
Family:	windows	Class:	inventory
Reference(s):	cpe:/o:microsoft:windows_vista:::x86	Version:	4
Platform(s):	Microsoft Windows Vista	Product(s):
Definition Synopsis:
the installed operating system is part of the Microsoft Windows family AND Windows Vista is installed AND a version of Windows for the x86 architecture is installed
Referenced By:
oval:org.mitre.oval:def:21019

Definition Id: oval:org.mitre.oval:def:2041

Oval ID:	oval:org.mitre.oval:def:2041
Title:	Microsoft Windows Vista x64 Edition is installed
Description:	The operating system installed on the system is Microsoft Windows Vista x64 Edition
Family:	windows	Class:	inventory
Reference(s):	cpe:/o:microsoft:windows_vista:::x64	Version:	6
Platform(s):	Microsoft Windows Vista	Product(s):
Definition Synopsis:
the installed operating system is part of the Microsoft Windows family AND Windows Vista is installed AND a version of Windows for the x64 architecture is installed
Referenced By:
oval:org.mitre.oval:def:21019

Definition Id: oval:org.mitre.oval:def:4870

Oval ID:	oval:org.mitre.oval:def:4870
Title:	Microsoft Windows Server 2008 (32-bit) is installed
Description:	The operating system installed on the system is Microsoft Windows Server 2008 (32-bit)
Family:	windows	Class:	inventory
Reference(s):	cpe:/o:microsoft:windows_server_2008:::x86	Version:	6
Platform(s):	Microsoft Windows Server 2008	Product(s):
Definition Synopsis:
the installed operating system is part of the Microsoft Windows family AND Windows Server 2008 is installed AND a version of Windows for the x86 architecture is installed AND NOT Windows Server 2008 R2 is installed
Referenced By:
oval:org.mitre.oval:def:21019

Definition Id: oval:org.mitre.oval:def:5356

Oval ID:	oval:org.mitre.oval:def:5356
Title:	Microsoft Windows Server 2008 (64-bit) is installed
Description:	The operating system installed on the system is Microsoft Windows Server 2008 (64-bit)
Family:	windows	Class:	inventory
Reference(s):	cpe:/o:microsoft:windows_server_2008:::x64	Version:	8
Platform(s):	Microsoft Windows Server 2008	Product(s):
Definition Synopsis:
the installed operating system is part of the Microsoft Windows family AND Windows Server 2008 is installed AND a version of Windows for the x64 architecture is installed AND NOT Windows Server 2008 R2 is installed
Referenced By:
oval:org.mitre.oval:def:21019

Definition Id: oval:org.mitre.oval:def:5667

Oval ID:	oval:org.mitre.oval:def:5667
Title:	Microsoft Windows Server 2008 (ia-64) is installed
Description:	The operating system installed on the system is Microsoft Windows Server 2008 Itanium Edition
Family:	windows	Class:	inventory
Reference(s):	cpe:/o:microsoft:windows_server_2008:::itanium	Version:	6
Platform(s):	Microsoft Windows Server 2008	Product(s):
Definition Synopsis:
the installed operating system is part of the Microsoft Windows family AND Windows Server 2008 is installed AND a version of Windows for the ia64 architecture is installed AND NOT Windows Server 2008 R2 is installed
Referenced By:
oval:org.mitre.oval:def:21019

Definition Id: oval:org.mitre.oval:def:6006

Oval ID:	oval:org.mitre.oval:def:6006
Title:	Microsoft Excel Viewer 2007 is installed
Description:	The application Microsoft Excel Viewer 2007 is installed.
Family:	windows	Class:	inventory
Reference(s):	cpe:/a:microsoft:excel_viewer:2007	Version:	6
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows Server 2003 Microsoft Windows Server 2008	Product(s):	Microsoft Excel Viewer 2007
Definition Synopsis:
Excel Viewer 2007 is installed. AND Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\12.0\Common\InstallRoot!ENU_GUID exists
Referenced By:
oval:org.mitre.oval:def:18681

Definition Id: oval:org.mitre.oval:def:1853

Oval ID:	oval:org.mitre.oval:def:1853
Title:	Microsoft Office Compatibility Pack is installed
Description:	The application Microsoft Office Compatibility Pack is installed.
Family:	windows	Class:	inventory
Reference(s):	cpe:/a:microsoft:office_compatibility_pack	Version:	6
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2012	Product(s):	Microsoft Office Compatibility Pack
Definition Synopsis:
Microsoft Office Compatibility Pack is installed
Referenced By:
oval:org.mitre.oval:def:15035

Definition Id: oval:org.mitre.oval:def:1211

Oval ID:	oval:org.mitre.oval:def:1211
Title:	Microsoft Office 2007 is installed
Description:	The application Microsoft Office 2007 is installed.
Family:	windows	Class:	inventory
Reference(s):	cpe:/a:microsoft:office:2007	Version:	10
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2	Product(s):	Microsoft Office 2007
Definition Synopsis:
Microsoft Office 2007 is installed AND Office 2007 InstalledPackages exists
Referenced By:
oval:org.mitre.oval:def:15704

Definition Id: oval:org.mitre.oval:def:15035

Oval ID:	oval:org.mitre.oval:def:15035
Title:	Microsoft Office Compatibility Pack SP3 is installed
Description:	The application Microsoft Office Compatibility Pack SP3 is installed.
Family:	windows	Class:	inventory
Reference(s):	cpe:/a:microsoft:office_compatibility_pack:sp3	Version:	5
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2012	Product(s):	Microsoft Office Compatibility Pack
Definition Synopsis:
Microsoft Office Compatibility Pack is installed AND Check if ProductVersion of Microsoft Office Compatibility Pack is greater than or equal to 12.0.6612.1000
Referenced By:
oval:org.mitre.oval:def:21019

Definition Id: oval:org.mitre.oval:def:18663

Oval ID:	oval:org.mitre.oval:def:18663
Title:	Microsoft Word Viewer 2003 SP3 is installed
Description:	Microsoft Word Viewer 2003 SP3 is installed
Family:	windows	Class:	inventory
Reference(s):	cpe:/a:microsoft:word_viewer:sp3	Version:	5
Platform(s):	Microsoft Windows 2000 Microsoft Windows Server 2003 Microsoft Windows XP	Product(s):	Microsoft Word Viewer
Definition Synopsis:
Microsoft Word Viewer is installed AND Check if the version of Office 2003 products installed is greater than or equal to 11.0.8173.0
Referenced By:
oval:org.mitre.oval:def:21019

Definition Id: oval:org.mitre.oval:def:15626

Oval ID:	oval:org.mitre.oval:def:15626
Title:	Microsoft Office 2003 SP3 is installed
Description:	Microsoft Office 2003 SP3 is installed.
Family:	windows	Class:	inventory
Reference(s):	cpe:/a:microsoft:office:2003:sp3	Version:	5
Platform(s):	Microsoft Windows 7 Microsoft Windows 2000 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows XP	Product(s):	Microsoft Office 2003
Definition Synopsis:
Microsoft Office 2003 is installed AND Check if the version of Office 2003 products installed is greater than or equal to 11.0.8173.0
Referenced By:
oval:org.mitre.oval:def:21019

Definition Id: oval:org.mitre.oval:def:15704

Oval ID:	oval:org.mitre.oval:def:15704
Title:	Microsoft Office 2007 SP3 is installed
Description:	Microsoft Office 2007 SP3 is installed
Family:	windows	Class:	inventory
Reference(s):	cpe:/a:microsoft:office:2007:sp3	Version:	7
Platform(s):	Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows XP	Product(s):	Microsoft Office 2007
Definition Synopsis:
Check if Microsoft Office products 2007 SP3 is installed AND Microsoft Office 2007 is installed
Referenced By:
oval:org.mitre.oval:def:21019

Definition Id: oval:org.mitre.oval:def:18681

Oval ID:	oval:org.mitre.oval:def:18681
Title:	Microsoft Excel Viewer 2007 SP3 is installed
Description:	Microsoft Excel Viewer 2007 SP3 is installed
Family:	windows	Class:	inventory
Reference(s):	cpe:/a:microsoft:excel_viewer:2007:sp3	Version:	5
Platform(s):	Microsoft Windows 2000 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Vista Microsoft Windows XP	Product(s):	Microsoft Excel Viewer 2007
Definition Synopsis:
Microsoft Excel Viewer 2007 is installed AND Check if the version of Office 2007 products is greater than or equal to 12.0.6612.1000
Referenced By:
oval:org.mitre.oval:def:21019

Definition Id: oval:org.mitre.oval:def:17121

Oval ID:	oval:org.mitre.oval:def:17121
Title:	Microsoft Office 2010 SP2 is installed
Description:	Microsoft Office 2010 SP2 is installed.
Family:	windows	Class:	inventory
Reference(s):	cpe:/a:microsoft:office:2010:sp2	Version:	9
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2012	Product(s):	Microsoft Office 2010
Definition Synopsis:
Microsoft Office 2010 is installed AND Check if Microsoft Office 2010 SP2 is installed AND Check if Office 2010 SP2 is installed
Referenced By:
oval:org.mitre.oval:def:21019

Definition Id: oval:org.mitre.oval:def:20852

Oval ID:	oval:org.mitre.oval:def:20852
Title:	Microsoft PowerPoint Viewer 2010 SP1 is installed
Description:	Microsoft PowerPoint Viewer 2010 SP1 is installed.
Family:	windows	Class:	inventory
Reference(s):	cpe:/a:microsoft:powerpoint_viewer:2010:::sp1	Version:	6
Platform(s):	Microsoft Windows 2000 Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows XP Microsoft Windows 7 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2	Product(s):	Microsoft PowerPoint Viewer 2010
Definition Synopsis:
Microsoft PowerPoint Viewer 2010 is installed AND Check if the version of pptview.exe (2010) is greater than or equal to 14.0.6026.1000 AND Check if the version of pptview.exe (2010) is less than 14.0.7015.1000
Referenced By:
oval:org.mitre.oval:def:21019

Definition Id: oval:org.mitre.oval:def:20831

Oval ID:	oval:org.mitre.oval:def:20831
Title:	Microsoft PowerPoint Viewer 2010 SP2 is installed
Description:	Microsoft PowerPoint Viewer 2010 SP2 is installed.
Family:	windows	Class:	inventory
Reference(s):	cpe:/a:microsoft:powerpoint_viewer:2010:::sp2	Version:	6
Platform(s):	Microsoft Windows 2000 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Vista Microsoft Windows XP Microsoft Windows Server 2008 R2 Microsoft Windows 7	Product(s):	Microsoft PowerPoint Viewer 2010
Definition Synopsis:
Microsoft PowerPoint Viewer 2010 is installed AND Check if the version of pptview.exe (2010) is greater than or equal to 14.0.7015.1000 AND Check if the version of pptview.exe (2010) is less than 15.0.0.0
Referenced By:
oval:org.mitre.oval:def:21019

Definition Id: oval:org.mitre.oval:def:15099

Oval ID:	oval:org.mitre.oval:def:15099
Title:	Microsoft Lync 2010 is installed
Description:	Microsoft Lync 2010 is installed.
Family:	windows	Class:	inventory
Reference(s):	cpe:/a:microsoft:lync:2010	Version:	3
Platform(s):	Microsoft Windows 7 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows XP	Product(s):	Microsoft Lync 2010
Definition Synopsis:
Check if Microsoft Lync 2010 is installed
Referenced By:
oval:org.mitre.oval:def:21019

Definition Id: oval:org.mitre.oval:def:15556

Oval ID:	oval:org.mitre.oval:def:15556
Title:	Microsoft Lync 2010 Attendee (admin level install) is installed
Description:	Microsoft Lync 2010 Attendee (admin level install) is installed.
Family:	windows	Class:	inventory
Reference(s):	cpe:/a:microsoft:lync_attendee:2010:admin_level	Version:	3
Platform(s):	Microsoft Windows 7 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows XP	Product(s):	Microsoft Lync 2010 Attendee
Definition Synopsis:
Check if Microsoft Lync 2010 Attendee (admin level install) is installed
Referenced By:
oval:org.mitre.oval:def:21019

Definition Id: oval:org.mitre.oval:def:15641

Oval ID:	oval:org.mitre.oval:def:15641
Title:	Microsoft Lync 2010 Attendee (user level install) is installed
Description:	Microsoft Lync 2010 Attendee (user level install) is installed.
Family:	windows	Class:	inventory
Reference(s):	cpe:/a:microsoft:lync_attendee:2010:user_level	Version:	5
Platform(s):	Microsoft Windows 7 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows XP	Product(s):	Microsoft Lync 2010 Attendee
Definition Synopsis:
Check if Microsoft Lync 2010 Attendee (user level install) is installed
Referenced By:
oval:org.mitre.oval:def:21019

Definition Id: oval:org.mitre.oval:def:17284

Oval ID:	oval:org.mitre.oval:def:17284
Title:	Microsoft Lync Basic 2013 is installed
Description:	Microsoft Lync Basic 2013 is installed
Family:	windows	Class:	inventory
Reference(s):	cpe:/a:microsoft:lync_basic_2013	Version:	5
Platform(s):	Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Microsoft Lync Basic 2013
Definition Synopsis:
Check if Microsoft Lync Basic 2013 is installed
Referenced By:
oval:org.mitre.oval:def:21019

Definition Id: oval:org.mitre.oval:def:12061

Oval ID:	oval:org.mitre.oval:def:12061
Title:	Microsoft Office 2010 is installed
Description:	The application Microsoft Office 2010 is installed.
Family:	windows	Class:	inventory
Reference(s):	cpe:/a:microsoft:office:2010	Version:	13
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows Server 2008 Microsoft Windows 7 Microsoft Windows Server 2008 R2 Microsoft Windows 8 Microsoft Windows Server 2012	Product(s):	Microsoft Office 2010
Definition Synopsis:
Microsoft Office 2010 is installed
Referenced By:
oval:org.mitre.oval:def:17121

Definition Id: oval:org.mitre.oval:def:12520

Oval ID:	oval:org.mitre.oval:def:12520
Title:	Microsoft PowerPoint Viewer 2010 is installed
Description:	The application Microsoft PowerPoint Viewer 2010 is installed.
Family:	windows	Class:	inventory
Reference(s):	cpe:/a:microsoft:powerpoint_viewer:2010	Version:	11
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows Server 2008	Product(s):	Microsoft PowerPoint Viewer 2010
Definition Synopsis:
The registry key that holds the location of Office 2010 Common\InstallRoot\Path exists AND the version of Pptview.exe is greater than or equal 14.0.0.0 AND the version of Pptview.exe is less than 15.0.0.0
Referenced By:
oval:org.mitre.oval:def:20852 oval:org.mitre.oval:def:20831

Copyright Security-Database 2006-2024 - Powered by themself ;) in 0.0968s

Facebook rss twitter linkedin mail