10 - TA13-288A

Executive Summary

Informations
Name	TA13-288A	First vendor Publication	2013-10-15
Vendor	US-CERT	Last vendor Modification	2013-10-15
Severity (Vendor)	N/A	Revision	N/A

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:C/I:C/A:C)
Cvss Base Score	10	Attack Range	Network
Cvss Impact Score	10	Attack Complexity	Low
Cvss Expoit Score	10	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Overview

Select Microsoft software products contain multiple vulnerabilities. Microsoft has released updates to address these vulnerabilities.

Description

The Microsoft Security Bulletin Summary for October 2013 describes multiple vulnerabilities in Microsoft software. Microsoft has released updates to address these vulnerabilities.

Impact

These vulnerabilities could allow remote code execution or information disclosure.

Solution

Apply Updates

Microsoft has provided updates for these vulnerabilities in the Microsoft Security Bulletin Summary for October 2013, which describes any known issues related to the updates. Administrators are encouraged to note these issues and test for any potentially adverse effects. In addition, administrators should consider using an automated update distribution system such as Windows Server Update Services (WSUS). Home users are encouraged to enable automatic updates.

Original Source

Url : http://www.us-cert.gov/cas/techalerts/TA13-288A.html

CWE : Common Weakness Enumeration

%	Id	Name
43 %	CWE-119	Failure to Constrain Operations within the Bounds of a Memory Buffer
22 %	CWE-399	Resource Management Errors
13 %	CWE-20	Improper Input Validation
9 %	CWE-264	Permissions, Privileges, and Access Controls
9 %	CWE-94	Failure to Control Generation of Code ('Code Injection')
4 %	CWE-416	Use After Free

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:18366

Oval ID:	oval:org.mitre.oval:def:18366
Title:	Internet Explorer Memory Corruption Vulnerability (CVE-2013-3882) - MS13-080
Description:	Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3872, CVE-2013-3873, and CVE-2013-3885.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-3882	Version:	6
Platform(s):	Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Microsoft Internet Explorer 10
Definition Synopsis:
Microsoft Internet Explorer 10 is installed Win 7 / R2 / Win 8 / 2k12 and vulnerable file version Microsoft Windows 7 (32-bit) is installed AND Microsoft Windows 7 x64 Edition is installed AND Microsoft Windows Server 2008 R2 x64 Edition is installed AND Microsoft Windows 8 (x86) is installed AND Microsoft Windows 8 (x64) is installed AND Microsoft Windows Server 2012 (64-bit) is installed Check for vulnerable version Check if the version of mshtml.dll is less than 10.0.9200.16721 OR Check for LDR Check if the version of mshtml.dll is greater than or equal to 10.0.9200.20000 AND Check if the version of mshtml.dll is less than 10.0.9200.20831

Definition Id: oval:org.mitre.oval:def:18517

Oval ID:	oval:org.mitre.oval:def:18517
Title:	Entity Expansion Vulnerability (CVE-2013-3860) - MS13-082
Description:	Microsoft .NET Framework 2.0 SP2, 3.5, 3.5 SP1, 3.5.1, 4, and 4.5 does not properly parse a DTD during XML digital-signature validation, which allows remote attackers to cause a denial of service (application crash or hang) via a crafted signed XML document, aka "Entity Expansion Vulnerability."
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-3860	Version:	10
Platform(s):	Microsoft Windows 7 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows XP Microsoft Windows 8 Microsoft Windows Server 2012	Product(s):	Microsoft .NET Framework 2.0 Microsoft .NET Framework 3.5 Microsoft .NET Framework 3.5.1 Microsoft .NET Framework 4.0 Microsoft .NET Framework 4.5
Definition Synopsis:
.Net Framework 2.0 SP2 and vulnerable file version Microsoft .NET Framework 2.0 Service Pack 2 is installed AND XP/2k3/2k8/Vista and vulnerable files version XP/2K3 and vulnerable files versions XP / 2K3 Microsoft Windows XP (32-bit) is installed AND Microsoft Windows XP x64 is installed AND Microsoft Windows Server 2003 (32-bit) is installed AND Microsoft Windows Server 2003 (x64) is installed AND Microsoft Windows Server 2003 (ia64) Gold is installed AND LDR/GDR Check if the version of System.Security.dll is less than 2.0.50727.3652 OR Check for LDR Check if System.Security.dll version is greater than or equal to 2.0.50727.4000 AND Check if the version of System.Security.dll is less than 2.0.50727.7032 OR Vista/2K8 and vulnerable files versions Vista / 2k8 Microsoft Windows Vista (32-bit) is installed AND Microsoft Windows Vista x64 Edition is installed AND Microsoft Windows Server 2008 (32-bit) is installed AND Microsoft Windows Server 2008 (64-bit) is installed AND Microsoft Windows Server 2008 (ia-64) is installed AND Check for vulnerable versions Check if the version of System.Security.dll is less than 2.0.50727.4245 OR Check for LDR Check if System.Security.dll version is greater than or equal to 2.0.50727.5000 AND Check if the version of System.Security.dll is less than 2.0.50727.7032 OR .net 3.5 sp1 + win xp/2k3/vista/2k8 Microsoft .NET Framework 3.5 SP1 is installed AND XP/2k3/2k8/Vista/Win8/2k12 and vulnerable files version XP/2k3/2k8/Vista and vulnerable files version XP/2k3/2k8/Vista Microsoft Windows XP (32-bit) is installed AND Microsoft Windows XP x64 is installed AND Microsoft Windows Server 2003 (32-bit) is installed AND Microsoft Windows Server 2003 (x64) is installed AND Microsoft Windows Server 2003 (ia64) Gold is installed AND Microsoft Windows Vista (32-bit) is installed AND Microsoft Windows Vista x64 Edition is installed AND Microsoft Windows Server 2008 (32-bit) is installed AND Microsoft Windows Server 2008 (64-bit) is installed AND Microsoft Windows Server 2008 (ia-64) is installed AND Check for vulnerable versions Check if the version of System.Web.Extensions.dll is less than 3.5.30729.4056 OR LDR range the version of System.Web.Extensions.dll is greater than or equal to 3.5.30729.5000 AND Check if the version of System.Web.Extensions.dll is less than 3.5.30729.7056 OR Win 7 / R2 and vulnerable files version Win 7 / R2 Microsoft Windows 7 (32-bit) is installed AND Microsoft Windows 7 x64 Edition is installed AND Microsoft Windows Server 2008 R2 x64 Edition is installed AND Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed AND Check for vulnerable version Check if the version of system.web.extensions.dll is less than 3.5.30729.5458 OR Check for LDR Check if the version of system.web.extensions.dll is greater than or equal to 3.5.30729.6000 AND Check if the version of system.web.extensions.dll is less than 3.5.30729.7057 AND Check if the version of system.security.dll is less than 2.0.50727.5475 OR LDR range Check if the version of system.security.dll is greater than or equal to 2.0.50727.6000 AND Check if the version of System.Security.dll is less than 2.0.50727.7032 OR .net 4.0 + win xp/2k3/vista/2k8/win7/R2 Microsoft .NET Framework 4.0 is installed AND XP/2k3/2k8/Vista/Win7/R2 Microsoft Windows XP (32-bit) is installed AND Microsoft Windows XP x64 is installed AND Microsoft Windows Server 2003 (32-bit) is installed AND Microsoft Windows Server 2003 (x64) is installed AND Microsoft Windows Server 2003 (ia64) Gold is installed AND Microsoft Windows Vista (32-bit) is installed AND Microsoft Windows Vista x64 Edition is installed AND Microsoft Windows Server 2008 (32-bit) is installed AND Microsoft Windows Server 2008 (64-bit) is installed AND Microsoft Windows Server 2008 (ia-64) is installed AND Microsoft Windows 7 (32-bit) is installed AND Microsoft Windows 7 x64 Edition is installed AND Microsoft Windows Server 2008 R2 x64 Edition is installed AND Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed AND Check for vulnerable versions Check if the version of System.Security.dll is less than 4.0.30319.1016 OR LDR range Check if version of System.Security.dll is greater than or equal to 4.0.30319.2000 AND Check if the version of System.Security.dll is less than 4.0.30319.2026 OR .net 4.5 + win 8/2k12/vista/2k8/win7/R2 Microsoft .NET Framework 4.5 is installed AND Win8/2k12/2k8/Vista/Win7/R2 and vulnerable files version Win 8 / 2k12 and vulnerable file version Win 8 / 2k12 Microsoft Windows 8 (x86) is installed AND Microsoft Windows 8 (x64) is installed AND Microsoft Windows Server 2012 (64-bit) is installed AND Check for vulnerable version Check if the version of system.security.dll is less than 4.0.30319.18056 OR LDR range Check if the version of system.security.dll is less than 4.0.30319.19109 AND Check if version of System.Security.dll is greater than or equal to 4.0.30319.19000 OR Win 7 /R2 /Vista / 2k8 and vulnerable file version XP/2k3/2k8/Vista/Win7/R2 Microsoft Windows Vista (32-bit) is installed AND Microsoft Windows Vista x64 Edition is installed AND Microsoft Windows Server 2008 (32-bit) is installed AND Microsoft Windows Server 2008 (64-bit) is installed AND Microsoft Windows 7 (32-bit) is installed AND Microsoft Windows 7 x64 Edition is installed AND Microsoft Windows Server 2008 R2 x64 Edition is installed AND Check for vulnerable version Check if the version of System.Security.dll is less than 4.0.30319.18055 OR LDR range Check if version of System.Security.dll is greater than or equal to 4.0.30319.19000 AND Check if the version of System.Security.dll is less than 4.0.30319.19108 OR .Net 3.5 + Win 8 /2k12 and vulnerable file version Microsoft .NET Framework 3.5 SP1 is installed AND Windows 8 / 2k12 Microsoft Windows 8 (x86) is installed AND Microsoft Windows 8 (x64) is installed AND Microsoft Windows Server 2012 (64-bit) is installed AND Check for vulnerable version Check if the version of system.security.dll is less than 2.0.50727.6410 OR LDR range Check if version of System.Security.dll is greater than or equal to 2.0.50727.7000 AND Check if the version of System.Security.dll is less than 2.0.50727.7032 AND Check if the version of system.web.extensions.dll is less than 3.5.30729.6407 OR LDR range Check if the version of system.web.extensions.dll is greater than or equal to 3.5.30729.7000 AND Check if the version of system.web.extensions.dll is less than 3.5.30729.7057

Definition Id: oval:org.mitre.oval:def:18601

Oval ID:	oval:org.mitre.oval:def:18601
Title:	Internet Explorer Memory Corruption Vulnerability (CVE-2013-3872) - MS13-080
Description:	Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3873, CVE-2013-3882, and CVE-2013-3885.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-3872	Version:	6
Platform(s):	Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Microsoft Internet Explorer 10
Definition Synopsis:
Microsoft Internet Explorer 10 is installed Win 7 / R2 / Win 8 / 2k12 and vulnerable file version Microsoft Windows 7 (32-bit) is installed AND Microsoft Windows 7 x64 Edition is installed AND Microsoft Windows Server 2008 R2 x64 Edition is installed AND Microsoft Windows 8 (x86) is installed AND Microsoft Windows 8 (x64) is installed AND Microsoft Windows Server 2012 (64-bit) is installed Check for vulnerable version Check if the version of mshtml.dll is less than 10.0.9200.16721 OR Check for LDR Check if the version of mshtml.dll is greater than or equal to 10.0.9200.20000 AND Check if the version of mshtml.dll is less than 10.0.9200.20831

Definition Id: oval:org.mitre.oval:def:18614

Oval ID:	oval:org.mitre.oval:def:18614
Title:	Win32k NULL Page Vulnerability (CVE-2013-3881) - MS13-081
Description:	win32k.sys in the kernel-mode drivers in Microsoft Windows 7 SP1 and Windows Server 2008 R2 SP1 allows local users to gain privileges via a crafted application, aka "Win32k NULL Page Vulnerability."
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-3881	Version:	4
Platform(s):	Microsoft Windows 7 Microsoft Windows Server 2008 R2	Product(s):
Definition Synopsis:
win/2008 r2 Microsoft Windows 7 (32-bit) Service Pack 1 is installed AND Microsoft Windows 7 x64 Service Pack 1 is installed AND Microsoft Windows Server 2008 R2 x64 Service Pack 1 is installed AND Microsoft Windows Server 2008 R2 Itanium-Based Edition Service Pack 1 is installed AND gdr/ldr Check if the version of win32k.sys is less than 6.1.7601.18246 OR ldr range Check if the version of win32k.sys is less than 6.1.7601.22435 AND Check if the version of Win32k.sys is greater than or equal to 6.1.7601.22000

Definition Id: oval:org.mitre.oval:def:18630

Oval ID:	oval:org.mitre.oval:def:18630
Title:	Windows USB Descriptor Vulnerability (CVE-2013-3200) - MS13-081
Description:	The USB drivers in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT allow physically proximate attackers to execute arbitrary code by connecting a crafted USB device, aka "Windows USB Descriptor Vulnerability."
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-3200	Version:	6
Platform(s):	Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012 Microsoft Windows Vista Microsoft Windows XP	Product(s):
Definition Synopsis:
xp sp3/version Microsoft Windows XP (x86) SP3 is installed AND either file versions Check if the version of usbd.sys is less than 5.1.2600.6437 AND Check if the version of Hidparse.sys is less than 5.1.2600.6418 OR win xp/server 2003/versions xp/server 2003 Microsoft Windows XP x64 Edition SP2 is installed AND Microsoft Windows Server 2003 (ia64) SP2 is installed AND Microsoft Windows Server 2003 SP2 (x86) is installed AND Microsoft Windows Server 2003 SP2 (x64) is installed AND either file versions Check if the version of usbd.sys is less than 5.2.3790.5203 AND Check if the version of Hidparse.sys is less than 5.2.3790.5189 OR vista/2008/version vista/2008 Microsoft Windows Vista (32-bit) Service Pack 2 is installed AND Microsoft Windows Vista x64 Edition Service Pack 2 is installed AND Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed AND Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed AND Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed AND either file versions gdr/ldr Check if the version of usbd.sys is less than 6.0.6002.18875 OR ldr range Check if the version of usbd.sys is less than 6.0.6002.23147 AND check if the version of usbd.sys is greater than or equal to 6.0.6002.23000 OR gdr/ldr Check if the version of Hidparse.sys is less than 6.0.6002.18878 OR ldr range Check if the version of Hidparse.sys is less than 6.0.6002.23150 AND Check if the version of Hidparse.sys is greater than or equal to 6.0.6002.23000 OR gdr/ldr Check if the version of Usbcir.sys is less than 6.0.6002.18887 OR ldr range Check if the version of Usbcir.sys is less than 6.0.6002.23160 AND Check if the version of Usbcir.sys is greater than or equal to 6.0.6002.23000 OR win 7/2008 r2/versions win/2008 r2 Microsoft Windows 7 (32-bit) Service Pack 1 is installed AND Microsoft Windows 7 x64 Service Pack 1 is installed AND Microsoft Windows Server 2008 R2 x64 Service Pack 1 is installed AND Microsoft Windows Server 2008 R2 Itanium-Based Edition Service Pack 1 is installed AND either file versions gdr/ldr Check if the version of usbd.sys is less than 6.1.7601.18328 OR ldr range Check if the version of usbd.sys is less than 6.1.7601.22526 AND Check if the version of usbd.sys is greater than or equal to 6.1.7601.22000 OR gdr/ldr Check if the version of Hidparse.sys is less than 6.1.7601.18199 OR ldr range Check if the version of Hidparse.sys is less than 6.1.7601.22374 AND Check if the version of Hidparse.sys is greater than or equal to 6.1.7601.22000 OR gdr/ldr Check if the version of Usbcir.sys is less than 6.1.7601.18208 OR ldr range Check if the version of Usbcir.sys is less than 6.1.7601.22382 AND Check if the version of Usbcir.sys is greater than or equal to 6.1.7601.22000 OR win 8/server 2012 win 8/server 2012 Microsoft Windows 8 (x86) is installed AND Microsoft Windows 8 (x64) is installed AND Microsoft Windows Server 2012 (64-bit) is installed AND either file versions gdr/ldr Check if the version of Hidparse.sys is less than 6.2.9200.16654 OR ldr range Check if the version of Hidparse.sys is less than 6.2.9200.20763 AND Check if the version of Hidparse.sys is greater than or equal to 6.2.9200.20000 OR gdr/ldr Check if the version of usbd.sys is less than 6.2.9200.16654 OR ldr range Check if the version of usbd.sys is less than 6.2.9200.20761 AND Check if the version of usbd.sys is greater than or equal to 6.2.9200.20000 OR gdr/ldr Check if the version of Usbxhci.sys is less than 6.2.9200.16654 OR ldr range Check if the version of Usbxhci.sys is less than 6.2.9200.20763 AND Check if the version of Usbxhci.sys is greater than or equal to 6.2.9200.20000 AND Check if the version of Wdfldr.sys is less than 1.11.9200.16648 OR win 8/server 2012 x64 win 8/server 2012 Microsoft Windows 8 (x64) is installed AND Microsoft Windows Server 2012 (64-bit) is installed AND gdr/ldr Check if the version of Usbcir.sys is less than 6.2.9200.16658 OR ldr range Check if the version of Usbcir.sys is less than 6.2.9200.20772 AND Check if the version of Usbcir.sys is greater than or equal to 6.2.9200.20000 OR win 8 x86 Microsoft Windows 8 (x86) is installed AND gdr/ldr Check if the version of Usbcir.sys is less than 6.2.9200.16659 OR ldr range Check if the version of Usbcir.sys is less than 6.2.9200.20772 AND Check if the version of Usbcir.sys is greater than or equal to 6.2.9200.20000 OR vista/2008//win7/2008 r2 (32/64)/version vista/2008/win7/2008 r2 (32/64) Microsoft Windows Vista (32-bit) Service Pack 2 is installed AND Microsoft Windows Vista x64 Edition Service Pack 2 is installed AND Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed AND Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed AND Microsoft Windows 7 (32-bit) Service Pack 1 is installed AND Microsoft Windows 7 x64 Service Pack 1 is installed AND Microsoft Windows Server 2008 R2 x64 Service Pack 1 is installed AND Check if the version of Wdfldr.sys is less than 1.11.9200.16384 OR server 2008 ia-64/version 2008/r2 Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed AND Microsoft Windows Server 2008 R2 Itanium-Based Edition Service Pack 1 is installed AND Check if the version of Wdfldr.sys is less than 1.9.7600.16385

Definition Id: oval:org.mitre.oval:def:18643

Oval ID:	oval:org.mitre.oval:def:18643
Title:	Memory Corruption Vulnerability (CVE-2013-3891) - MS13-086
Description:	Microsoft Word 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Memory Corruption Vulnerability."
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-3891	Version:	6
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2012	Product(s):	Microsoft Word 2003
Definition Synopsis:
Microsoft Word 2003 SP3 is installed AND Check if the version of winword.exe is less than 11.0.8407

Definition Id: oval:org.mitre.oval:def:18665

Oval ID:	oval:org.mitre.oval:def:18665
Title:	Internet Explorer Memory Corruption Vulnerability (CVE-2013-3893) - MS13-080
Description:	Use-after-free vulnerability in the SetMouseCapture implementation in mshtml.dll in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code via crafted JavaScript strings, as demonstrated by use of an ms-help: URL that triggers loading of hxds.dll.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-3893	Version:	6
Platform(s):	Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012 Microsoft Windows Vista Microsoft Windows XP	Product(s):	Microsoft Internet Explorer 6 Microsoft Internet Explorer 7 Microsoft Internet Explorer 8 Microsoft Internet Explorer 9 Microsoft Internet Explorer 10
Definition Synopsis:
ie6 Microsoft Internet Explorer 6 is installed AND either os ie6 on win xp Microsoft Windows XP (32-bit) is installed AND Check if the version of mshtml.dll is less than 6.0.2900.6452 OR ie 6 on win xp 64 bit, server 2003 (32+64+ia64) either of the os Microsoft Windows XP x64 is installed AND Microsoft Windows Server 2003 (32-bit) is installed AND Microsoft Windows Server 2003 (x64) is installed AND Microsoft Windows Server 2003 (ia64) Gold is installed AND Check if the version of mshtml.dll is less than 6.0.3790.5226 OR ie7 Microsoft Internet Explorer 7 is installed AND either os win xp/server 2003 either os Microsoft Windows XP (32-bit) is installed AND Microsoft Windows XP x64 is installed AND Microsoft Windows Server 2003 (32-bit) is installed AND Microsoft Windows Server 2003 (x64) is installed AND Microsoft Windows Server 2003 (ia64) Gold is installed AND Check if the version of mshtml.dll is less than 7.0.6000.21357 OR vista/server 2008 either os Microsoft Windows Vista (32-bit) is installed AND Microsoft Windows Vista x64 Edition is installed AND Microsoft Windows Server 2008 (32-bit) is installed AND Microsoft Windows Server 2008 (64-bit) is installed AND Microsoft Windows Server 2008 (ia-64) is installed AND Check for vulnerable version Check if the version of mshtml.dll is less than 7.0.6002.18945 OR Check for LDR Check if the version of mshtml.dll is greater than or equal to 7.0.6002.23000 AND Check if the version of mshtml.dll is less than 7.0.6002.23226 OR ie 8 on win xp/2003/vista/2008/win 7/2008 R2 Microsoft Internet Explorer 8 is installed AND either os win xp/server 2003 either os Microsoft Windows XP (32-bit) is installed AND Microsoft Windows XP x64 is installed AND Microsoft Windows Server 2003 (32-bit) is installed AND Microsoft Windows Server 2003 (x64) is installed AND Check if the version of mshtml.dll is less than 8.0.6001.23532 OR vista/server 2008 either os Microsoft Windows Vista x64 Edition is installed AND Microsoft Windows Vista (32-bit) is installed AND Microsoft Windows Server 2008 (64-bit) is installed AND Microsoft Windows Server 2008 (32-bit) is installed AND Check for vulnerable version Check if the version of mshtml.dll is less than 8.0.6001.19475 OR Check for LDR Check for mshtml.dll version greater than or equal to 8.0.6001.23000 AND Check if the version of mshtml.dll is less than 8.0.6001.23532 OR win 7/server 2008 r2 and version win 7/server 2008 r2 Microsoft Windows 7 (32-bit) is installed AND Microsoft Windows 7 x64 Edition is installed AND Microsoft Windows Server 2008 R2 x64 Edition is installed AND Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed AND Check for vulnerable version Check if the version of mshtml.dll is less than 8.0.7601.18269 OR Check for LDR Check if the version of mshtml.dll is greater than or equal to 8.0.7601.22000 AND Check if the version of mshtml.dll is less than 8.0.7601.22464 OR ie 9 on winvista/2008/win 7/2008 r2 Microsoft Internet Explorer 9 is installed AND win vista/2008/7/2008 r2 Microsoft Windows Vista (32-bit) is installed AND Microsoft Windows Vista x64 Edition is installed AND Microsoft Windows Server 2008 (32-bit) is installed AND Microsoft Windows Server 2008 (64-bit) is installed AND Microsoft Windows 7 (32-bit) is installed AND Microsoft Windows 7 x64 Edition is installed AND Microsoft Windows Server 2008 R2 x64 Edition is installed AND Check for vulnerable version Check if the version of mshtml.dll is less than 9.0.8112.16514 OR Check for LDR Check for mshtml.dll version greater than or equal to 9.0.8112.20000 AND Check if the version of mshtml.dll is less than 9.0.8112.20625 OR IE 10 and vulnerable file version Microsoft Internet Explorer 10 is installed AND Win 7 / R2 / Win 8 / 2k12 and vulnerable file version Microsoft Windows 7 (32-bit) is installed AND Microsoft Windows 7 x64 Edition is installed AND Microsoft Windows Server 2008 R2 x64 Edition is installed AND Microsoft Windows 8 (x86) is installed AND Microsoft Windows 8 (x64) is installed AND Microsoft Windows Server 2012 (64-bit) is installed AND Check for vulnerable version Check if the version of mshtml.dll is less than 10.0.9200.16721 OR Check for LDR Check if the version of mshtml.dll is greater than or equal to 10.0.9200.20000 AND Check if the version of mshtml.dll is less than 10.0.9200.20831

Definition Id: oval:org.mitre.oval:def:18715

Oval ID:	oval:org.mitre.oval:def:18715
Title:	Vulnerability in Windows Common Control Library Could Allow Remote Code Execution (CVE-2013-3195) - MS13-083
Description:	The DSA_InsertItem function in Comctl32.dll in the Windows common control library in Microsoft Windows XP SP2, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT does not properly allocate memory, which allows remote attackers to execute arbitrary code via a crafted value in an argument to an ASP.NET web application, aka "Comctl32 Integer Overflow Vulnerability."
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-3195	Version:	4
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2012	Product(s):
Definition Synopsis:
Vulnerable Windows XP x64 sp2, Server 2003 x86/x64/ia64 sp2 Microsoft Windows XP x64 Edition SP2, Server 2003 SP2 x86/x64/ia64 Microsoft Windows XP x64 Edition SP2 is installed AND Microsoft Windows Server 2003 SP2 (x86) is installed AND Microsoft Windows Server 2003 SP2 (x64) is installed AND Microsoft Windows Server 2003 (ia64) SP2 is installed AND The version of Comctl32.dll is less than 5.82.3790.5190 OR Vulnerable Windows Vista x86/x64 sp2, Windows Server 2008 x86/x64/ia64 sp2 Microsoft Windows Vista SP2 x64/32-bit, Server 2008 32-bit/64-bit/ia-64 sp2 Microsoft Windows Vista (32-bit) Service Pack 2 is installed AND Microsoft Windows Vista x64 Edition Service Pack 2 is installed AND Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed AND Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed AND Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed AND GDR or LDR Service branch The version of Comctl32.dll is less than 5.82.6002.18879 OR LDR The version of Comctl32.dll is greater than or equal to 5.82.6002.23000 AND The version of Comctl32.dll is less than 5.82.6002.23151 OR Vulnerable Windows 7 x86/x64 SP1, Windows 2008 R2 x64/ia64 SP1 Microsoft Windows 7 32-bit/x64 SP1, Windows Server 2008 R2 x64/Itanium SP1 Microsoft Windows 7 (32-bit) Service Pack 1 is installed AND Microsoft Windows 7 x64 Service Pack 1 is installed AND Microsoft Windows Server 2008 R2 x64 Service Pack 1 is installed AND Microsoft Windows Server 2008 R2 Itanium-Based Edition Service Pack 1 is installed AND GDR or LDR Service branch The version of Comctl32.dll is less than 5.82.7601.18201 OR LDR The version of Comctl32.dll is greater than or equal to 5.82.7601.22000 AND The version of Comctl32.dll is less than 5.82.7601.22376 OR Vulnerable Windows 8 x86/x64, Windows Server 2012 Microsoft Windows 8 x86/x64, Windows Server 2012 Microsoft Windows 8 (x86) is installed AND Microsoft Windows 8 (x64) is installed AND Microsoft Windows Server 2012 (64-bit) is installed AND GDR or LDR Service branch The version of Comctl32.dll is less than 5.82.9200.16657 OR LDR The version of Comctl32.dll is greater than or equal 5.82.9200.20000 AND The version of Comctl32.dll is less than 5.82.9200.20765

Definition Id: oval:org.mitre.oval:def:18718

Oval ID:	oval:org.mitre.oval:def:18718
Title:	Win32k Use After Free Vulnerability (CVE-2013-3879) MS13-081
Description:	Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT allows local users to gain privileges via a crafted application, aka "Win32k Use After Free Vulnerability."
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-3879	Version:	4
Platform(s):	Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012 Microsoft Windows Vista Microsoft Windows XP	Product(s):
Definition Synopsis:
xp sp3/version Microsoft Windows XP (x86) SP3 is installed AND Check if the version of win32k.sys is less than 5.1.2600.6442 OR win xp/server 2003/versions xp/server 2003 Microsoft Windows XP x64 Edition SP2 is installed AND Microsoft Windows Server 2003 (ia64) SP2 is installed AND Microsoft Windows Server 2003 SP2 (x86) is installed AND Microsoft Windows Server 2003 SP2 (x64) is installed AND Check if the version of win32k.sys is less than 5.2.3790.5216 OR vista/2008/version vista/2008 Microsoft Windows Vista (32-bit) Service Pack 2 is installed AND Microsoft Windows Vista x64 Edition Service Pack 2 is installed AND Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed AND Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed AND Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed AND gdr/ldr Check if the version of win32k.sys is less than 6.0.6002.18927 OR ldr range Check if the version of win32k.sys is less than 6.0.6002.23204 AND Check if the version of Win32k.sys is greater than or equal to 6.0.6002.23000 OR win 7/2008 r2/versions win/2008 r2 Microsoft Windows 7 (32-bit) Service Pack 1 is installed AND Microsoft Windows 7 x64 Service Pack 1 is installed AND Microsoft Windows Server 2008 R2 x64 Service Pack 1 is installed AND Microsoft Windows Server 2008 R2 Itanium-Based Edition Service Pack 1 is installed AND gdr/ldr Check if the version of win32k.sys is less than 6.1.7601.18246 OR ldr range Check if the version of win32k.sys is less than 6.1.7601.22435 AND Check if the version of Win32k.sys is greater than or equal to 6.1.7601.22000 OR win 8/server 2012 win 8/server 2012 Microsoft Windows 8 (x86) is installed AND Microsoft Windows 8 (x64) is installed AND Microsoft Windows Server 2012 (64-bit) is installed AND gdr/ldr Check if the version of win32k.sys is less than 6.2.9200.16699 OR ldr range Check if the version of win32k.sys is less than 6.2.9200.20807 AND Check if the version of Win32k.sys is greater than or equal to 6.2.9200.20000

Definition Id: oval:org.mitre.oval:def:18793

Oval ID:	oval:org.mitre.oval:def:18793
Title:	Internet Explorer Memory Corruption Vulnerability (CVE-2013-3874) - MS13-080
Description:	Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-3874	Version:	5
Platform(s):	Microsoft Windows 7 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista	Product(s):	Microsoft Internet Explorer 9
Definition Synopsis:
Microsoft Internet Explorer 9 is installed win vista/2008/7/2008 r2 Microsoft Windows Vista (32-bit) is installed AND Microsoft Windows Vista x64 Edition is installed AND Microsoft Windows Server 2008 (32-bit) is installed AND Microsoft Windows Server 2008 (64-bit) is installed AND Microsoft Windows 7 (32-bit) is installed AND Microsoft Windows 7 x64 Edition is installed AND Microsoft Windows Server 2008 R2 x64 Edition is installed Check for vulnerable version Check if the version of mshtml.dll is less than 9.0.8112.16514 OR Check for LDR Check for mshtml.dll version greater than or equal to 9.0.8112.20000 AND Check if the version of mshtml.dll is less than 9.0.8112.20625

Definition Id: oval:org.mitre.oval:def:18811

Oval ID:	oval:org.mitre.oval:def:18811
Title:	Internet Explorer Memory Corruption Vulnerability (CVE-2013-3886) - MS13-080
Description:	Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-3886	Version:	5
Platform(s):	Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012 Microsoft Windows Vista	Product(s):	Microsoft Internet Explorer 9 Microsoft Internet Explorer 10
Definition Synopsis:
ie 9 on winvista/2008/win 7/2008 r2 Microsoft Internet Explorer 9 is installed AND win vista/2008/7/2008 r2 Microsoft Windows Vista (32-bit) is installed AND Microsoft Windows Vista x64 Edition is installed AND Microsoft Windows Server 2008 (32-bit) is installed AND Microsoft Windows Server 2008 (64-bit) is installed AND Microsoft Windows 7 (32-bit) is installed AND Microsoft Windows 7 x64 Edition is installed AND Microsoft Windows Server 2008 R2 x64 Edition is installed AND Check for vulnerable version Check if the version of mshtml.dll is less than 9.0.8112.16514 OR Check for LDR Check for mshtml.dll version greater than or equal to 9.0.8112.20000 AND Check if the version of mshtml.dll is less than 9.0.8112.20625 OR IE 10 and vulnerable file version Microsoft Internet Explorer 10 is installed AND Win 7 / R2 / Win 8 / 2k12 and vulnerable file version Microsoft Windows 7 (32-bit) is installed AND Microsoft Windows 7 x64 Edition is installed AND Microsoft Windows Server 2008 R2 x64 Edition is installed AND Microsoft Windows 8 (x86) is installed AND Microsoft Windows 8 (x64) is installed AND Microsoft Windows Server 2012 (64-bit) is installed AND Check for vulnerable version Check if the version of mshtml.dll is less than 10.0.9200.16721 OR Check for LDR Check if the version of mshtml.dll is greater than or equal to 10.0.9200.20000 AND Check if the version of mshtml.dll is less than 10.0.9200.20831

Definition Id: oval:org.mitre.oval:def:18817

Oval ID:	oval:org.mitre.oval:def:18817
Title:	Internet Explorer Memory Corruption Vulnerability (CVE-2013-3885) - MS13-080
Description:	Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3872, CVE-2013-3873, and CVE-2013-3882.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-3885	Version:	5
Platform(s):	Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Microsoft Internet Explorer 10
Definition Synopsis:
Microsoft Internet Explorer 10 is installed Win 7 / R2 / Win 8 / 2k12 and vulnerable file version Microsoft Windows 7 (32-bit) is installed AND Microsoft Windows 7 x64 Edition is installed AND Microsoft Windows Server 2008 R2 x64 Edition is installed AND Microsoft Windows 8 (x86) is installed AND Microsoft Windows 8 (x64) is installed AND Microsoft Windows Server 2012 (64-bit) is installed Check for vulnerable version Check if the version of mshtml.dll is less than 10.0.9200.16721 OR Check for LDR Check if the version of mshtml.dll is greater than or equal to 10.0.9200.20000 AND Check if the version of mshtml.dll is less than 10.0.9200.20831

Definition Id: oval:org.mitre.oval:def:18842

Oval ID:	oval:org.mitre.oval:def:18842
Title:	JSON Parsing Vulnerability (CVE-2013-3861) - MS13-082
Description:	Microsoft .NET Framework 2.0 SP2, 3.5, 3.5 SP1, 3.5.1, 4, and 4.5 allows remote attackers to cause a denial of service (application crash or hang) via crafted character sequences in JSON data, aka "JSON Parsing Vulnerability."
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-3861	Version:	10
Platform(s):	Microsoft Windows 7 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows XP Microsoft Windows 8 Microsoft Windows Server 2012	Product(s):	Microsoft .NET Framework 2.0 Microsoft .NET Framework 3.5 Microsoft .NET Framework 3.5.1 Microsoft .NET Framework 4.0 Microsoft .NET Framework 4.5
Definition Synopsis:
.Net Framework 2.0 SP2 and vulnerable file version Microsoft .NET Framework 2.0 Service Pack 2 is installed AND XP/2k3/2k8/Vista and vulnerable files version XP/2K3 and vulnerable files versions XP / 2K3 Microsoft Windows XP (32-bit) is installed AND Microsoft Windows XP x64 is installed AND Microsoft Windows Server 2003 (32-bit) is installed AND Microsoft Windows Server 2003 (x64) is installed AND Microsoft Windows Server 2003 (ia64) Gold is installed AND LDR/GDR Check if the version of System.Security.dll is less than 2.0.50727.3652 OR Check for LDR Check if System.Security.dll version is greater than or equal to 2.0.50727.4000 AND Check if the version of System.Security.dll is less than 2.0.50727.7032 OR Vista/2K8 and vulnerable files versions Vista / 2k8 Microsoft Windows Vista (32-bit) is installed AND Microsoft Windows Vista x64 Edition is installed AND Microsoft Windows Server 2008 (32-bit) is installed AND Microsoft Windows Server 2008 (64-bit) is installed AND Microsoft Windows Server 2008 (ia-64) is installed AND Check for vulnerable versions Check if the version of System.Security.dll is less than 2.0.50727.4245 OR Check for LDR Check if System.Security.dll version is greater than or equal to 2.0.50727.5000 AND Check if the version of System.Security.dll is less than 2.0.50727.7032 OR .net 3.5 sp1 + win xp/2k3/vista/2k8 Microsoft .NET Framework 3.5 SP1 is installed AND XP/2k3/2k8/Vista/Win8/2k12 and vulnerable files version XP/2k3/2k8/Vista and vulnerable files version XP/2k3/2k8/Vista Microsoft Windows XP (32-bit) is installed AND Microsoft Windows XP x64 is installed AND Microsoft Windows Server 2003 (32-bit) is installed AND Microsoft Windows Server 2003 (x64) is installed AND Microsoft Windows Server 2003 (ia64) Gold is installed AND Microsoft Windows Vista (32-bit) is installed AND Microsoft Windows Vista x64 Edition is installed AND Microsoft Windows Server 2008 (32-bit) is installed AND Microsoft Windows Server 2008 (64-bit) is installed AND Microsoft Windows Server 2008 (ia-64) is installed AND Check for vulnerable versions Check if the version of System.Web.Extensions.dll is less than 3.5.30729.4056 OR LDR range the version of System.Web.Extensions.dll is greater than or equal to 3.5.30729.5000 AND Check if the version of System.Web.Extensions.dll is less than 3.5.30729.7056 OR Win 7 / R2 and vulnerable files version Win 7 / R2 Microsoft Windows 7 (32-bit) is installed AND Microsoft Windows 7 x64 Edition is installed AND Microsoft Windows Server 2008 R2 x64 Edition is installed AND Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed AND Check for vulnerable version Check if the version of system.web.extensions.dll is less than 3.5.30729.5458 OR Check for LDR Check if the version of system.web.extensions.dll is greater than or equal to 3.5.30729.6000 AND Check if the version of system.web.extensions.dll is less than 3.5.30729.7057 AND Check if the version of system.security.dll is less than 2.0.50727.5475 OR LDR range Check if the version of system.security.dll is greater than or equal to 2.0.50727.6000 AND Check if the version of System.Security.dll is less than 2.0.50727.7032 OR .net 4.0 + win xp/2k3/vista/2k8/win7/R2 Microsoft .NET Framework 4.0 is installed AND XP/2k3/2k8/Vista/Win7/R2 Microsoft Windows XP (32-bit) is installed AND Microsoft Windows XP x64 is installed AND Microsoft Windows Server 2003 (32-bit) is installed AND Microsoft Windows Server 2003 (x64) is installed AND Microsoft Windows Server 2003 (ia64) Gold is installed AND Microsoft Windows Vista (32-bit) is installed AND Microsoft Windows Vista x64 Edition is installed AND Microsoft Windows Server 2008 (32-bit) is installed AND Microsoft Windows Server 2008 (64-bit) is installed AND Microsoft Windows Server 2008 (ia-64) is installed AND Microsoft Windows 7 (32-bit) is installed AND Microsoft Windows 7 x64 Edition is installed AND Microsoft Windows Server 2008 R2 x64 Edition is installed AND Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed AND Check for vulnerable versions Check if the version of System.Security.dll is less than 4.0.30319.1016 OR LDR range Check if version of System.Security.dll is greater than or equal to 4.0.30319.2000 AND Check if the version of System.Security.dll is less than 4.0.30319.2026 OR .net 4.5 + win 8/2k12/vista/2k8/win7/R2 Microsoft .NET Framework 4.5 is installed AND Win8/2k12/2k8/Vista/Win7/R2 and vulnerable files version Win 8 / 2k12 and vulnerable file version Win 8 / 2k12 Microsoft Windows 8 (x86) is installed AND Microsoft Windows 8 (x64) is installed AND Microsoft Windows Server 2012 (64-bit) is installed AND Check for vulnerable version Check if the version of system.security.dll is less than 4.0.30319.18056 OR LDR range Check if the version of system.security.dll is less than 4.0.30319.19109 AND Check if version of System.Security.dll is greater than or equal to 4.0.30319.19000 OR Win 7 /R2 /Vista / 2k8 and vulnerable file version XP/2k3/2k8/Vista/Win7/R2 Microsoft Windows Vista (32-bit) is installed AND Microsoft Windows Vista x64 Edition is installed AND Microsoft Windows Server 2008 (32-bit) is installed AND Microsoft Windows Server 2008 (64-bit) is installed AND Microsoft Windows 7 (32-bit) is installed AND Microsoft Windows 7 x64 Edition is installed AND Microsoft Windows Server 2008 R2 x64 Edition is installed AND Check for vulnerable version Check if the version of System.Security.dll is less than 4.0.30319.18055 OR LDR range Check if version of System.Security.dll is greater than or equal to 4.0.30319.19000 AND Check if the version of System.Security.dll is less than 4.0.30319.19108 OR .Net 3.5 + Win 8 /2k12 and vulnerable file version Microsoft .NET Framework 3.5 SP1 is installed AND Windows 8 / 2k12 Microsoft Windows 8 (x86) is installed AND Microsoft Windows 8 (x64) is installed AND Microsoft Windows Server 2012 (64-bit) is installed AND Check for vulnerable version Check if the version of system.security.dll is less than 2.0.50727.6410 OR LDR range Check if version of System.Security.dll is greater than or equal to 2.0.50727.7000 AND Check if the version of System.Security.dll is less than 2.0.50727.7032 AND Check if the version of system.web.extensions.dll is less than 3.5.30729.6407 OR LDR range Check if the version of system.web.extensions.dll is greater than or equal to 3.5.30729.7000 AND Check if the version of system.web.extensions.dll is less than 3.5.30729.7057

Definition Id: oval:org.mitre.oval:def:18847

Oval ID:	oval:org.mitre.oval:def:18847
Title:	OpenType Font Parsing Vulnerability (CVE-2013-3128) - MS13-081, MS13-082
Description:	The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT, and .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, and 4.5, allow remote attackers to execute arbitrary code via a crafted OpenType font (OTF) file, aka "OpenType Font Parsing Vulnerability."
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-3128	Version:	14
Platform(s):	Microsoft Windows 7 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows XP Microsoft Windows 8 Microsoft Windows Server 2012	Product(s):	Microsoft .NET Framework 3.0 Microsoft .NET Framework 3.5 Microsoft .NET Framework 3.5.1 Microsoft .NET Framework 4.0 Microsoft .NET Framework 4.5
Definition Synopsis:
.net 3.0 sp2 + win xp/2k3/vista/2k8 Microsoft .NET Framework 3.0 SP2 is installed AND XP/2k3/2k8/Vista and vulnerable files version XP / 2K3 and vulnerable file version XP / 2K3 and vulnerable file version Microsoft Windows XP (32-bit) is installed AND Microsoft Windows XP x64 is installed AND Microsoft Windows Server 2003 (32-bit) is installed AND Microsoft Windows Server 2003 (x64) is installed AND Check for vulnerable versions Check if the version of PresentationCFFRasterizerNative_v0300.dll is less than 3.0.6920.4058 OR LDR range Check if the version of PresentationCFFRasterizerNative_v0300.dll is greater than or equal to 3.0.6920.5000 AND Check if the version of PresentationCFFRasterizerNative_v0300.dll is less than 3.0.6920.7061 OR Vista / 2K8 and vulnerable file version Vista / 2K8 Microsoft Windows Vista (32-bit) is installed AND Microsoft Windows Vista x64 Edition is installed AND Microsoft Windows Server 2008 (32-bit) is installed AND Microsoft Windows Server 2008 (64-bit) is installed AND Check for vulnerable version Check if the version of presentationcffrasterizernative_v0300.dll is less than 3.0.6920.4218 OR LDR range Check if the version of PresentationCFFRasterizerNative_v0300.dll is greater than or equal to 3.0.6920.5000 AND Check if the version of presentationcffrasterizernative_v0300.dll is less than 3.0.6920.7062 OR .net 3.5 sp1 + win xp/2k3/vista/2k8 Microsoft .NET Framework 3.5 SP1 is installed AND Win 7 / R2 Microsoft Windows 7 (32-bit) is installed AND Microsoft Windows 7 x64 Edition is installed AND Microsoft Windows Server 2008 R2 x64 Edition is installed AND Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed AND Check for vulnerable version Check if the version of presentationcffrasterizernative_v0300.dll is less than 3.0.6920.5459 OR LDR range Check if the version of presentationcffrasterizernative_v0300.dll is greater than or equal to 3.0.6920.6000 AND Check if the version of presentationcffrasterizernative_v0300.dll is less than 3.0.6920.7062 OR .net 4.0 + win xp/2k3/vista/2k8/win7/R2 Microsoft .NET Framework 4.0 is installed AND XP/2k3/2k8/Vista/Win7/R2 Microsoft Windows XP (32-bit) is installed AND Microsoft Windows XP x64 is installed AND Microsoft Windows Server 2003 (32-bit) is installed AND Microsoft Windows Server 2003 (x64) is installed AND Microsoft Windows Server 2003 (ia64) Gold is installed AND Microsoft Windows Vista (32-bit) is installed AND Microsoft Windows Vista x64 Edition is installed AND Microsoft Windows Server 2008 (32-bit) is installed AND Microsoft Windows Server 2008 (64-bit) is installed AND Microsoft Windows Server 2008 (ia-64) is installed AND Check for vulnerable versions Check if the version of PresentationCore.dll is less than 4.0.30319.1014 OR LDR range Check if the version of presentationcore.dll is greater than or equal to 4.0.30319.2000 AND Check if the version of PresentationCore.dll is less than 4.0.30319.2021 OR .net 4.5 + win 8/2k12/vista/2k8/win7/R2 Microsoft .NET Framework 4.5 is installed AND XP/2k3/2k8/Vista/Win7/R2 Microsoft Windows Vista (32-bit) is installed AND Microsoft Windows Vista x64 Edition is installed AND Microsoft Windows Server 2008 (32-bit) is installed AND Microsoft Windows Server 2008 (64-bit) is installed AND Check for vulnerable version Check if the version of wpftxt_v0400.dll is less than 4.0.30319.18059 OR LDR range Check if the version of wpftxt_v0400.dll is less than 4.0.30319.19114 AND Check if the version of wpftxt_v0400.dll is greater than or equal to 4.0.30319.19000 OR .Net 3.5 + Win 8 /2k12 and vulnerable file version Microsoft .NET Framework 3.5 SP1 is installed AND Windows 8 / 2k12 Microsoft Windows 8 (x86) is installed AND Microsoft Windows 8 (x64) is installed AND Microsoft Windows Server 2012 (64-bit) is installed AND Check for vulnerable version Check if the version of presentationcffrasterizernative_v0300.dll is less than 3.0.6920.6409 OR LDR range Check if the version of presentationcffrasterizernative_v0300.dll is greater than or equal to 3.0.6920.7000 AND Check if the version of presentationcffrasterizernative_v0300.dll is less than 3.0.6920.7062 OR xp/version Microsoft Windows XP (32-bit) is installed AND Check if the atmfd.dll version is less than 5.1.2.236 OR win xp/server 2003/versions xp/server 2003 Microsoft Windows XP x64 is installed AND Microsoft Windows Server 2003 (ia64) Gold is installed AND Microsoft Windows Server 2003 (32-bit) is installed AND Microsoft Windows Server 2003 (x64) is installed AND Check if the version of atmfd.dll is less than 5.2.2.236 OR vista/2008/version vista/2008 Microsoft Windows Vista (32-bit) is installed AND Microsoft Windows Vista x64 Edition is installed AND Microsoft Windows Server 2008 (32-bit) is installed AND Microsoft Windows Server 2008 (64-bit) is installed AND Microsoft Windows Server 2008 (ia-64) is installed AND either file versions Check if the atmfd.dll version is less than 5.1.2.236 AND Check if the version of Dwrite.dll is less than 7.0.6002.18923 OR ldr range Check if the version of Dwrite.dll is less than 7.0.6002.23200 AND Check if the version of Dwrite.dll is greater than or equal to 7.0.6002.23000 OR win 7/2008 r2/versions win 7/2008 r2 Microsoft Windows 7 (32-bit) is installed AND Microsoft Windows 7 x64 Edition is installed AND Microsoft Windows Server 2008 R2 x64 Edition is installed AND Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed AND either file versions Check if the version of atmfd.dll is less than 5.1.2.238 AND Check if the version of Dwrite.dll is less than 6.1.7601.18245 OR ldr range Check if the version of Dwrite.dll is less than 6.1.7601.22434 AND Check if the version of Dwrite.dll is greater than or equal to 6.1.7601.22000 OR win 8/server 2012 win 8/server 2012 Microsoft Windows 8 (x86) is installed AND Microsoft Windows 8 (x64) is installed AND Microsoft Windows Server 2012 (64-bit) is installed AND Check if the atmfd.dll version is less than 5.1.2.237

Definition Id: oval:org.mitre.oval:def:18899

Oval ID:	oval:org.mitre.oval:def:18899
Title:	TrueType Font CMAP Table Vulnerability (CVE-2013-3894) - MS13-081
Description:	The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT allow remote attackers to execute arbitrary code via a crafted CMAP table in a TrueType font (TTF) file, aka "TrueType Font CMAP Table Vulnerability."
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-3894	Version:	3
Platform(s):	Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012 Microsoft Windows Vista Microsoft Windows XP	Product(s):
Definition Synopsis:
xp sp3/version Microsoft Windows XP (x86) SP3 is installed AND Check if the version of win32k.sys is less than 5.1.2600.6442 OR win xp/server 2003/versions xp/server 2003 Microsoft Windows XP x64 Edition SP2 is installed AND Microsoft Windows Server 2003 (ia64) SP2 is installed AND Microsoft Windows Server 2003 SP2 (x86) is installed AND Microsoft Windows Server 2003 SP2 (x64) is installed AND Check if the version of win32k.sys is less than 5.2.3790.5216 OR vista/2008/version vista/2008 Microsoft Windows Vista (32-bit) Service Pack 2 is installed AND Microsoft Windows Vista x64 Edition Service Pack 2 is installed AND Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed AND Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed AND Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed AND gdr/ldr Check if the version of win32k.sys is less than 6.0.6002.18927 OR ldr range Check if the version of win32k.sys is less than 6.0.6002.23204 AND Check if the version of Win32k.sys is greater than or equal to 6.0.6002.23000 OR win 7/2008 r2/versions win/2008 r2 Microsoft Windows 7 (32-bit) Service Pack 1 is installed AND Microsoft Windows 7 x64 Service Pack 1 is installed AND Microsoft Windows Server 2008 R2 x64 Service Pack 1 is installed AND Microsoft Windows Server 2008 R2 Itanium-Based Edition Service Pack 1 is installed AND gdr/ldr Check if the version of win32k.sys is less than 6.1.7601.18246 OR ldr range Check if the version of win32k.sys is less than 6.1.7601.22435 AND Check if the version of Win32k.sys is greater than or equal to 6.1.7601.22000 OR win 8/server 2012 win 8/server 2012 Microsoft Windows 8 (x86) is installed AND Microsoft Windows 8 (x64) is installed AND Microsoft Windows Server 2012 (64-bit) is installed AND gdr/ldr Check if the version of win32k.sys is less than 6.2.9200.16699 OR ldr range Check if the version of win32k.sys is less than 6.2.9200.20807 AND Check if the version of Win32k.sys is greater than or equal to 6.2.9200.20000

Definition Id: oval:org.mitre.oval:def:18901

Oval ID:	oval:org.mitre.oval:def:18901
Title:	Remote code execution vulnerability in Microsoft Office for Mac 2011 (CVE-2013-3889) - MS13-085
Description:	Microsoft Excel 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Office 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Office for Mac 2011; Excel Viewer; Office Compatibility Pack SP3; and Excel Services and Word Automation Services in SharePoint Server 2013 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Excel Memory Corruption Vulnerability."
Family:	macos	Class:	vulnerability
Reference(s):	CVE-2013-3889	Version:	3
Platform(s):	Apple Mac OS X Apple Mac OS X Server	Product(s):	Microsoft Office 2011 for Mac
Definition Synopsis:
office mac 2011 Microsoft Office 2011 Service Pack 1 for Mac is installed AND Microsoft Office 2011 Service Pack 2 for Mac is installed AND Microsoft Office 2011 Service Pack 3 for Mac is installed AND Check if the version of Office 2011 for Mac is less than 14.3.8

Definition Id: oval:org.mitre.oval:def:18909

Oval ID:	oval:org.mitre.oval:def:18909
Title:	Internet Explorer Memory Corruption Vulnerability (CVE-2013-3875) - MS13-080
Description:	Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-3875	Version:	5
Platform(s):	Microsoft Windows 7 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows XP	Product(s):	Microsoft Internet Explorer 8 Microsoft Internet Explorer 9
Definition Synopsis:
ie 8 on win xp/2003/vista/2008/win 7/2008 R2 Microsoft Internet Explorer 8 is installed AND either os win xp/server 2003 either os Microsoft Windows XP (32-bit) is installed AND Microsoft Windows XP x64 is installed AND Microsoft Windows Server 2003 (32-bit) is installed AND Microsoft Windows Server 2003 (x64) is installed AND Check if the version of mshtml.dll is less than 8.0.6001.23532 OR vista/server 2008 either os Microsoft Windows Vista x64 Edition is installed AND Microsoft Windows Vista (32-bit) is installed AND Microsoft Windows Server 2008 (64-bit) is installed AND Microsoft Windows Server 2008 (32-bit) is installed AND Check for vulnerable version Check if the version of mshtml.dll is less than 8.0.6001.19475 OR Check for LDR Check for mshtml.dll version greater than or equal to 8.0.6001.23000 AND Check if the version of mshtml.dll is less than 8.0.6001.23532 OR win 7/server 2008 r2 and version win 7/server 2008 r2 Microsoft Windows 7 (32-bit) is installed AND Microsoft Windows 7 x64 Edition is installed AND Microsoft Windows Server 2008 R2 x64 Edition is installed AND Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed AND Check for vulnerable version Check if the version of mshtml.dll is less than 8.0.7601.18269 OR Check for LDR Check if the version of mshtml.dll is greater than or equal to 8.0.7601.22000 AND Check if the version of mshtml.dll is less than 8.0.7601.22464 OR ie 9 on winvista/2008/win 7/2008 r2 Microsoft Internet Explorer 9 is installed AND win vista/2008/7/2008 r2 Microsoft Windows Vista (32-bit) is installed AND Microsoft Windows Vista x64 Edition is installed AND Microsoft Windows Server 2008 (32-bit) is installed AND Microsoft Windows Server 2008 (64-bit) is installed AND Microsoft Windows 7 (32-bit) is installed AND Microsoft Windows 7 x64 Edition is installed AND Microsoft Windows Server 2008 R2 x64 Edition is installed AND Check for vulnerable version Check if the version of mshtml.dll is less than 9.0.8112.16514 OR Check for LDR Check for mshtml.dll version greater than or equal to 9.0.8112.20000 AND Check if the version of mshtml.dll is less than 9.0.8112.20625

Definition Id: oval:org.mitre.oval:def:18912

Oval ID:	oval:org.mitre.oval:def:18912
Title:	App Container Elevation of Privilege Vulnerability (CVE-2013-3880) - MS13-081
Description:	The App Container feature in the kernel-mode drivers in Microsoft Windows 8, Windows Server 2012, and Windows RT allows remote attackers to bypass intended access restrictions and obtain sensitive information from a different container via a Trojan horse application, aka "App Container Elevation of Privilege Vulnerability."
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-3880	Version:	3
Platform(s):	Microsoft Windows 8 Microsoft Windows Server 2012	Product(s):
Definition Synopsis:
win 8/server 2012 Microsoft Windows 8 (x86) is installed AND Microsoft Windows 8 (x64) is installed AND Microsoft Windows Server 2012 (64-bit) is installed AND gdr/ldr Check if the version of win32k.sys is less than 6.2.9200.16699 OR ldr range Check if the version of win32k.sys is less than 6.2.9200.20807 AND Check if the version of Win32k.sys is greater than or equal to 6.2.9200.20000

Definition Id: oval:org.mitre.oval:def:18924

Oval ID:	oval:org.mitre.oval:def:18924
Title:	DirectX Graphics Kernel Subsystem Double Fetch Vulnerability (CVE-2013-3888) - MS13-081
Description:	dxgkrnl.sys in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows local users to gain privileges via a crafted application, aka "DirectX Graphics Kernel Subsystem Double Fetch Vulnerability."
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-3888	Version:	4
Platform(s):	Microsoft Windows 7 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista	Product(s):
Definition Synopsis:
vista/2008/version vista/2008 Microsoft Windows Vista (32-bit) Service Pack 2 is installed AND Microsoft Windows Vista x64 Edition Service Pack 2 is installed AND Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed AND Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed AND Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed AND gdr/ldr Check if the version of Dxgkrnl.sys is less than 7.0.6002.18908 OR ldr range Check if the version of Dxgkrnl.sys is less than 7.0.6002.23181 AND Check if the version of dxgkrnl.sys is greater than or equal to 7.0.6002.23000 OR win 7/2008 r2/versions ein/2008 r2 Microsoft Windows 7 (32-bit) Service Pack 1 is installed AND Microsoft Windows 7 x64 Service Pack 1 is installed AND Microsoft Windows Server 2008 R2 x64 Service Pack 1 is installed AND Microsoft Windows Server 2008 R2 Itanium-Based Edition Service Pack 1 is installed AND gdr/ldr Check if the version of Dxgkrnl.sys is less than 6.1.7601.18228 OR ldr range Check if the version of Dxgkrnl.sys is less than 6.1.7601.22410 AND Check if the version dxgkrnl.sys is greater than or equal to 6.1.7601.22000

Definition Id: oval:org.mitre.oval:def:18926

Oval ID:	oval:org.mitre.oval:def:18926
Title:	Remote code execution vulnerability in Microsoft Excel (CVE-2013-3890) - MS13-085
Description:	Microsoft Excel 2007 SP3, Excel Viewer, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Excel Memory Corruption Vulnerability."
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-3890	Version:	5
Platform(s):	Microsoft Windows 2000 Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012 Microsoft Windows Vista Microsoft Windows XP	Product(s):	Microsoft Excel 2007 Microsoft Excel Viewer 2007 Microsoft Office Compatibility Pack
Definition Synopsis:
office excel 2007/versions Microsoft Excel 2007 SP3 is installed AND Check if the version of excel.exe is less than 12.0.6683.5002 OR office excel viewer/versions Microsoft Excel Viewer 2007 SP3 is installed AND Check if the version of xlview.exe is less than 12.0.6683.5005 OR compatibility pack/versions Microsoft Office Compatibility Pack SP3 is installed AND Check if the version of excelcnv.exe is less than 12.0.6683.5002

Definition Id: oval:org.mitre.oval:def:18953

Oval ID:	oval:org.mitre.oval:def:18953
Title:	Memory Corruption Vulnerability (CVE-2013-3892) - MS13-086
Description:	Microsoft Word 2007 SP3 and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Memory Corruption Vulnerability."
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-3892	Version:	5
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2012	Product(s):	Microsoft Office Compatibility Pack Microsoft Word 2007
Definition Synopsis:
Compatibility Pack vulnerable version Compatibility pack / Compatibility Pack SP3 Microsoft Office Compatibility Pack is installed AND Microsoft Office Compatibility Pack SP3 is installed AND Check if the version of wordcnv.dll is less than 12.0.6683.5002 OR Word 2007 and vulnerable file version Word 2007 / 2007 SP3 Microsoft Word 2007 is installed AND Microsoft Word 2007 SP3 is installed AND Check if the version of winword.exe is less than 12.0.6683.5002

Definition Id: oval:org.mitre.oval:def:18989

Oval ID:	oval:org.mitre.oval:def:18989
Title:	Internet Explorer Memory Corruption Vulnerability (CVE-2013-3897) - MS13-080
Description:	Use-after-free vulnerability in the CDisplayPointer class in mshtml.dll in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted JavaScript code that uses the onpropertychange event handler, as exploited in the wild in September and October 2013, aka "Internet Explorer Memory Corruption Vulnerability."
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-3897	Version:	5
Platform(s):	Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012 Microsoft Windows Vista Microsoft Windows XP	Product(s):	Microsoft Internet Explorer 6 Microsoft Internet Explorer 7 Microsoft Internet Explorer 8 Microsoft Internet Explorer 9 Microsoft Internet Explorer 10
Definition Synopsis:
ie6 Microsoft Internet Explorer 6 is installed AND either os ie6 on win xp Microsoft Windows XP (32-bit) is installed AND Check if the version of mshtml.dll is less than 6.0.2900.6452 OR ie 6 on win xp 64 bit, server 2003 (32+64+ia64) either of the os Microsoft Windows XP x64 is installed AND Microsoft Windows Server 2003 (32-bit) is installed AND Microsoft Windows Server 2003 (x64) is installed AND Microsoft Windows Server 2003 (ia64) Gold is installed AND Check if the version of mshtml.dll is less than 6.0.3790.5226 OR ie7 Microsoft Internet Explorer 7 is installed AND either os win xp/server 2003 either os Microsoft Windows XP (32-bit) is installed AND Microsoft Windows XP x64 is installed AND Microsoft Windows Server 2003 (32-bit) is installed AND Microsoft Windows Server 2003 (x64) is installed AND Microsoft Windows Server 2003 (ia64) Gold is installed AND Check if the version of mshtml.dll is less than 7.0.6000.21357 OR vista/server 2008 either os Microsoft Windows Vista (32-bit) is installed AND Microsoft Windows Vista x64 Edition is installed AND Microsoft Windows Server 2008 (32-bit) is installed AND Microsoft Windows Server 2008 (64-bit) is installed AND Microsoft Windows Server 2008 (ia-64) is installed AND Check for vulnerable version Check if the version of mshtml.dll is less than 7.0.6002.18945 OR Check for LDR Check if the version of mshtml.dll is greater than or equal to 7.0.6002.23000 AND Check if the version of mshtml.dll is less than 7.0.6002.23226 OR ie 8 on win xp/2003/vista/2008/win 7/2008 R2 Microsoft Internet Explorer 8 is installed AND either os win xp/server 2003 either os Microsoft Windows XP (32-bit) is installed AND Microsoft Windows XP x64 is installed AND Microsoft Windows Server 2003 (32-bit) is installed AND Microsoft Windows Server 2003 (x64) is installed AND Check if the version of mshtml.dll is less than 8.0.6001.23532 OR vista/server 2008 either os Microsoft Windows Vista x64 Edition is installed AND Microsoft Windows Vista (32-bit) is installed AND Microsoft Windows Server 2008 (64-bit) is installed AND Microsoft Windows Server 2008 (32-bit) is installed AND Check for vulnerable version Check if the version of mshtml.dll is less than 8.0.6001.19475 OR Check for LDR Check for mshtml.dll version greater than or equal to 8.0.6001.23000 AND Check if the version of mshtml.dll is less than 8.0.6001.23532 OR win 7/server 2008 r2 and version win 7/server 2008 r2 Microsoft Windows 7 (32-bit) is installed AND Microsoft Windows 7 x64 Edition is installed AND Microsoft Windows Server 2008 R2 x64 Edition is installed AND Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed AND Check for vulnerable version Check if the version of mshtml.dll is less than 8.0.7601.18269 OR Check for LDR Check if the version of mshtml.dll is greater than or equal to 8.0.7601.22000 AND Check if the version of mshtml.dll is less than 8.0.7601.22464 OR ie 9 on winvista/2008/win 7/2008 r2 Microsoft Internet Explorer 9 is installed AND win vista/2008/7/2008 r2 Microsoft Windows Vista (32-bit) is installed AND Microsoft Windows Vista x64 Edition is installed AND Microsoft Windows Server 2008 (32-bit) is installed AND Microsoft Windows Server 2008 (64-bit) is installed AND Microsoft Windows 7 (32-bit) is installed AND Microsoft Windows 7 x64 Edition is installed AND Microsoft Windows Server 2008 R2 x64 Edition is installed AND Check for vulnerable version Check if the version of mshtml.dll is less than 9.0.8112.16514 OR Check for LDR Check for mshtml.dll version greater than or equal to 9.0.8112.20000 AND Check if the version of mshtml.dll is less than 9.0.8112.20625 OR IE 10 and vulnerable file version Microsoft Internet Explorer 10 is installed AND Win 7 / R2 / Win 8 / 2k12 and vulnerable file version Microsoft Windows 7 (32-bit) is installed AND Microsoft Windows 7 x64 Edition is installed AND Microsoft Windows Server 2008 R2 x64 Edition is installed AND Microsoft Windows 8 (x86) is installed AND Microsoft Windows 8 (x64) is installed AND Microsoft Windows Server 2012 (64-bit) is installed AND Check for vulnerable version Check if the version of mshtml.dll is less than 10.0.9200.16721 OR Check for LDR Check if the version of mshtml.dll is greater than or equal to 10.0.9200.20000 AND Check if the version of mshtml.dll is less than 10.0.9200.20831

Definition Id: oval:org.mitre.oval:def:18991

Oval ID:	oval:org.mitre.oval:def:18991
Title:	Parameter injection vulnerability in Microsoft SharePoint (CVE-2013-3895) - MS13-084
Description:	Microsoft SharePoint Server 2007 SP3 and 2010 SP1 and SP2 allows remote attackers to conduct clickjacking attacks via a crafted web page, aka "Parameter Injection Vulnerability."
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-3895	Version:	5
Platform(s):	Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012 Microsoft Windows Vista Microsoft Windows XP	Product(s):	Microsoft SharePoint Server 2007 Microsoft SharePoint Services 3.0 Microsoft SharePoint Foundation 2010
Definition Synopsis:
foundation 2010/version foundation 2010 sp1/sp2 Microsoft SharePoint Foundation 2010 Service Pack 1 is installed AND Microsoft SharePoint Foundation 2010 Service Pack 2 is installed AND Microsoft SharePoint Server 2010 Service Pack 1 is installed AND Microsoft SharePoint Server 2010 Service Pack 2 is installed AND Check if the version of Onetutil.dll is less than 14.0.7106.5002 OR sharepoint services 3.0 sp3/version SharePoint 2007 SP3/SharePoint Services 3.0 SP3 Microsoft Office SharePoint Server 2007 SP3 is installed AND Microsoft SharePoint Services 3.0 SP3 is installed AND Check if the version of Onetutil.dll is less than 12.0.6676.5000

Definition Id: oval:org.mitre.oval:def:19003

Oval ID:	oval:org.mitre.oval:def:19003
Title:	Vulnerability in Silverlight Could Allow Information Disclosure (CVE-2013-3896) - MS13-087 (Mac OS X)
Description:	Microsoft Silverlight 5 before 5.1.20913.0 does not properly validate pointers during access to Silverlight elements, which allows remote attackers to obtain sensitive information via a crafted Silverlight application, aka "Silverlight Vulnerability."
Family:	macos	Class:	vulnerability
Reference(s):	CVE-2013-3896	Version:	3
Platform(s):	Apple Mac OS X Apple Mac OS X Server	Product(s):	Microsoft Silverlight 5 for Mac
Definition Synopsis:
Microsoft Silverlight 5 is installed AND Check if the version of Microsoft Silverlight is less than 5.1.20913.0

Definition Id: oval:org.mitre.oval:def:19055

Oval ID:	oval:org.mitre.oval:def:19055
Title:	Vulnerability in Silverlight Could Allow Information Disclosure (CVE-2013-3896) - MS13-087
Description:	Microsoft Silverlight 5 before 5.1.20913.0 does not properly validate pointers during access to Silverlight elements, which allows remote attackers to obtain sensitive information via a crafted Silverlight application, aka "Silverlight Vulnerability."
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-3896	Version:	5
Platform(s):	Microsoft Windows 7 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows XP Microsoft Windows 8 Microsoft Windows Server 2012	Product(s):	Microsoft Silverlight 5
Definition Synopsis:
Microsoft Silverlight 5 is installed AND Check if the version of Silverlight is less than 5.1.20513

Definition Id: oval:org.mitre.oval:def:19060

Oval ID:	oval:org.mitre.oval:def:19060
Title:	Internet Explorer Memory Corruption Vulnerability (CVE-2013-3873) - MS13-080
Description:	Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3872, CVE-2013-3882, and CVE-2013-3885.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-3873	Version:	5
Platform(s):	Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Microsoft Internet Explorer 10
Definition Synopsis:
Microsoft Internet Explorer 10 is installed Win 7 / R2 / Win 8 / 2k12 and vulnerable file version Microsoft Windows 7 (32-bit) is installed AND Microsoft Windows 7 x64 Edition is installed AND Microsoft Windows Server 2008 R2 x64 Edition is installed AND Microsoft Windows 8 (x86) is installed AND Microsoft Windows 8 (x64) is installed AND Microsoft Windows Server 2012 (64-bit) is installed Check for vulnerable version Check if the version of mshtml.dll is less than 10.0.9200.16721 OR Check for LDR Check if the version of mshtml.dll is greater than or equal to 10.0.9200.20000 AND Check if the version of mshtml.dll is less than 10.0.9200.20831

Definition Id: oval:org.mitre.oval:def:19132

Oval ID:	oval:org.mitre.oval:def:19132
Title:	Microsoft Excel Memory Corruption Vulnerability (CVE-2013-3889) - MS13-084, MS13-085
Description:	Microsoft Excel 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Office 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Office for Mac 2011; Excel Viewer; Office Compatibility Pack SP3; and Excel Services and Word Automation Services in SharePoint Server 2013 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Excel Memory Corruption Vulnerability."
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-3889	Version:	11
Platform(s):	Microsoft Windows 2000 Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012 Microsoft Windows Vista Microsoft Windows XP	Product(s):	Microsoft Excel 2007 Microsoft Excel 2010 Microsoft Excel 2013 Microsoft Office 2007 Microsoft Office 2010 Microsoft Office 2013 Microsoft Excel Viewer 2007 Microsoft Office Web Apps 2010 Microsoft SharePoint Server 2007 Microsoft SharePoint Server 2010 Microsoft SharePoint Server 2013 Microsoft Office Compatibility Pack
Definition Synopsis:
office excel 2007/versions Microsoft Excel 2007 SP3 is installed AND Check if the version of excel.exe is less than 12.0.6683.5002 OR office 2007/versions Microsoft Office 2007 SP3 is installed AND For oart.dll/oartconv.dll Check if the version of Oart.dll is less than 12.0.6683.5002 AND Check if the version of Oartconv.dll is less than 12.0.6683.5002 OR office excel viewer/versions Microsoft Excel Viewer 2007 SP3 is installed AND Check if the version of xlview.exe is less than 12.0.6683.5005 OR compatibility pack/versions Microsoft Office Compatibility Pack SP3 is installed AND Check if the version of excelcnv.exe is less than 12.0.6683.5002 OR office excel 2010/versions 2010 sp1/sp2 Microsoft Excel 2010 SP2 is installed AND Microsoft Excel 2010 SP1 is installed AND Check if the version of excel.exe is less than 14.0.7109.5000 OR Office 2010/versions 2010 sp1/sp2 Microsoft Office 2010 SP2 is installed AND Microsoft Office 2010 SP1 is installed AND For oart.dll/oartconv.dll Check if the version of Oart.dll is less than 14.0.7108.5000 AND Check if the version of Oartconv.dll is less than 14.0.7108.5000 OR office excel 2013/versions Microsoft Excel 2013 is installed AND Check if the version of excel.exe is less than 15.0.4535.1507 OR Office 2013/versions Microsoft Office 2013 is installed AND Check if the version of oart.dll is less than 15.0.4535.1507 OR sharepoint server 2007 sp3/version Microsoft Office SharePoint Server 2007 SP3 is installed AND Check if the version of xlsrv.dll is less than 12.0.6683.5002 OR sharepoint server 2010/version sharepoint server 2010 sp1/sp2 Microsoft SharePoint Server 2010 Service Pack 1 is installed AND Microsoft SharePoint Server 2010 Service Pack 2 is installed AND either files versions Check if the version of xlsrv.dll is less than 14.0.7108.5000 AND Check if the version of WdsrvWorker.dll is less than 14.0.6112.5000 OR foundation 2013/version Microsoft SharePoint Server 2013 is installed AND either files versions Check if the version of xlsrv.dll is less than 15.0.4535.1507 AND Check if the version of WdsrvWorker.dll is less than 15.0.4514.1000 OR web apps/version office web apps sp1/sp2 Microsoft Office Web Apps 2010 Service Pack 1 is installed AND Microsoft Office Web Apps 2010 Service Pack 2 is installed AND either file versions Check if the version of msoserver.dll is less than 14.0.7108.5000 AND Check if the version of xlsrv.dll is less than 14.0.7108.5000

CPE : Common Platform Enumeration

Type	Description	Count
Application	Microsoft .Net Framework cpe:2.3:a:microsoft:.net_framework:4.5:::::::* cpe:2.3:a:microsoft:.net_framework:4.0:-:::::: cpe:2.3:a:microsoft:.net_framework:3.5.1:::::::* cpe:2.3:a:microsoft:.net_framework:3.5:-:::::: cpe:2.3:a:microsoft:.net_framework:3.5:sp1:::::: cpe:2.3:a:microsoft:.net_framework:2.0:sp2::::::	6
Application	Microsoft Excel cpe:2.3:a:microsoft:excel:2013:::::x86:: cpe:2.3:a:microsoft:excel:2013::::::x64: cpe:2.3:a:microsoft:excel:2010:sp2:::::x64:* cpe:2.3:a:microsoft:excel:2010:sp2::::x86::* cpe:2.3:a:microsoft:excel:2007:sp3::::::	5
Application	Microsoft Excel Viewer cpe:2.3:a:microsoft:excel_viewer::::::::	1
Application	Microsoft Internet Explorer cpe:2.3:a:microsoft:internet_explorer:11:release-preview:::::: cpe:2.3:a:microsoft:internet_explorer:11:developer-preview:::::: cpe:2.3:a:microsoft:internet_explorer:11:-:::::: cpe:2.3:a:microsoft:internet_explorer:10:::::::* cpe:2.3:a:microsoft:internet_explorer:9:::::::* cpe:2.3:a:microsoft:internet_explorer:8:::::::* cpe:2.3:a:microsoft:internet_explorer:7:::::::* cpe:2.3:a:microsoft:internet_explorer:6:::::::*	8
Application	Microsoft Office cpe:2.3:a:microsoft:office:2013:::::::* cpe:2.3:a:microsoft:office:2011::mac::::: cpe:2.3:a:microsoft:office:2010:sp1:x86:::::* cpe:2.3:a:microsoft:office:2010:sp1:x64:::::* cpe:2.3:a:microsoft:office:2007:sp3::::::	5
Application	Microsoft Office 2013 Rt cpe:2.3:a:microsoft:office_2013_rt:-:::::::*	1
Application	Microsoft Office Compatibility Pack cpe:2.3:a:microsoft:office_compatibility_pack::sp3::::::*	1
Application	Microsoft Office Web Apps cpe:2.3:a:microsoft:office_web_apps:2010:sp2:::::: cpe:2.3:a:microsoft:office_web_apps:2010:sp1:::::: cpe:2.3:a:microsoft:office_web_apps:2010:::::::*	3
Application	Microsoft Sharepoint Server cpe:2.3:a:microsoft:sharepoint_server:2013:::::::* cpe:2.3:a:microsoft:sharepoint_server:2010:sp2:::::: cpe:2.3:a:microsoft:sharepoint_server:2010:sp1:::::: cpe:2.3:a:microsoft:sharepoint_server:2007:sp3::::::	4
Application	Microsoft Silverlight cpe:2.3:a:microsoft:silverlight:5.1.20513.0:::::::* cpe:2.3:a:microsoft:silverlight:5.1.20125.0:::::::* cpe:2.3:a:microsoft:silverlight:5.1.10411.0:::::::* cpe:2.3:a:microsoft:silverlight:5.0.61118.0:::::::* cpe:2.3:a:microsoft:silverlight:5.0.60818.0:::::::* cpe:2.3:a:microsoft:silverlight:5.0.60818.0:rc:::::: cpe:2.3:a:microsoft:silverlight:5.0.60401.0:::::::* cpe:2.3:a:microsoft:silverlight:5.0:::::windows:: cpe:2.3:a:microsoft:silverlight:5.0::~~~windows~~::::: cpe:2.3:a:microsoft:silverlight:5.0:::::::* cpe:2.3:a:microsoft:silverlight:5:developer_runtime:::::: cpe:2.3:a:microsoft:silverlight:4.1.10111.0:::::::* cpe:2.3:a:microsoft:silverlight:4.1.10111:::::::* cpe:2.3:a:microsoft:silverlight:4.0.60831.0:::::::* cpe:2.3:a:microsoft:silverlight:4.0.60531.0:::::::* cpe:2.3:a:microsoft:silverlight:4.0.603310.0:::::::* cpe:2.3:a:microsoft:silverlight:4.0.60310.0:::::::* cpe:2.3:a:microsoft:silverlight:4.0.60129.0:::::::* cpe:2.3:a:microsoft:silverlight:4.0.51204.0:::::::* cpe:2.3:a:microsoft:silverlight:4.0.50917.0:::::::* cpe:2.3:a:microsoft:silverlight:4.0.50826.0:::::::* cpe:2.3:a:microsoft:silverlight:4.0.50524.00:::::::* cpe:2.3:a:microsoft:silverlight:4.0.50401.0:::::::* cpe:2.3:a:microsoft:silverlight:3.0.50106.0:::::::* cpe:2.3:a:microsoft:silverlight:3.0.40818.0:::::::* cpe:2.3:a:microsoft:silverlight:3.0.40723.0:::::::* cpe:2.3:a:microsoft:silverlight:3.0.40624.00:::::::* cpe:2.3:a:microsoft:silverlight:2.0.40115.00:::::::* cpe:2.3:a:microsoft:silverlight:2.0.31005.00:::::::* cpe:2.3:a:microsoft:silverlight::::::::	30
Application	Microsoft Word cpe:2.3:a:microsoft:word:2007:sp3:::::: cpe:2.3:a:microsoft:word:2003:sp3::::::	2
Os	Microsoft Windows 7 cpe:2.3:o:microsoft:windows_7::sp1:x86::::: cpe:2.3:o:microsoft:windows_7::sp1:x64::::: cpe:2.3:o:microsoft:windows_7:-:sp1:::::x86:* cpe:2.3:o:microsoft:windows_7:-:sp1:::::x64:*	4
Os	Microsoft Windows 8 cpe:2.3:o:microsoft:windows_8:-::::::x86: cpe:2.3:o:microsoft:windows_8:-::::::x64: cpe:2.3:o:microsoft:windows_8:-::::pro_n::x64:* cpe:2.3:o:microsoft:windows_8:-::::pro_n::x86:*	4
Os	Microsoft Windows Rt cpe:2.3:o:microsoft:windows_rt:-:::::::*	1
Os	Microsoft Windows Server 2003 cpe:2.3:o:microsoft:windows_server_2003::sp2::::::* cpe:2.3:o:microsoft:windows_server_2003:-:sp2:::::: cpe:2.3:o:microsoft:windows_server_2003:-:sp2:::::itanium:* cpe:2.3:o:microsoft:windows_server_2003:-:sp2:::::x64:*	4
Os	Microsoft Windows Server 2008 cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:::::x64:* cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:::::itanium:* cpe:2.3:o:microsoft:windows_server_2008::sp2:x86::::: cpe:2.3:o:microsoft:windows_server_2008::sp2:itanium::::: cpe:2.3:o:microsoft:windows_server_2008::sp2:x64::::: cpe:2.3:o:microsoft:windows_server_2008:-:sp2:::::itanium:* cpe:2.3:o:microsoft:windows_server_2008:-:sp2:::::x64:* cpe:2.3:o:microsoft:windows_server_2008:-:sp2:::::x86:*	8
Os	Microsoft Windows Server 2012 cpe:2.3:o:microsoft:windows_server_2012:-:::::::*	1
Os	Microsoft Windows Vista cpe:2.3:o:microsoft:windows_vista::sp2::::::* cpe:2.3:o:microsoft:windows_vista:-:sp2:::::: cpe:2.3:o:microsoft:windows_vista:-:sp2:::::x64:*	3
Os	Microsoft Windows Xp cpe:2.3:o:microsoft:windows_xp::sp3::::::* cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:::::* cpe:2.3:o:microsoft:windows_xp:-:sp3:::::: cpe:2.3:o:microsoft:windows_xp:-:sp2:::professional::x64:	4

SAINT Exploits

Description	Link
Internet Explorer HTML Rendering Engine onLoseCapture Use-After-Free Vulnerability	More info here
Internet Explorer CDisplayPointer Object onpropertychange Use-After-Free	More info here

ExploitDB Exploits

id	Description
2014-02-11	Windows TrackPopupMenuEx Win32k NULL Page
2013-10-15	MS13-080 Microsoft Internet Explorer CDisplayPointer Use-After-Free
2013-10-02	Micorosft Internet Explorer SetMouseCapture Use-After-Free

Information Assurance Vulnerability Management (IAVM)

Date	Description
2013-12-12	IAVM : 2013-A-0232 - Multiple Vulnerabilities in Microsoft Windows Kernel-Mode Drivers Severity : Category I - VMSKEY : V0042582
2013-10-10	IAVM : 2013-A-0187 - Multiple Vulnerabilities in Microsoft .NET Framework Severity : Category I - VMSKEY : V0040753
2013-10-10	IAVM : 2013-B-0115 - Microsoft Office Word Remote Code Execution Vulnerabilities Severity : Category II - VMSKEY : V0040756
2013-10-10	IAVM : 2013-B-0114 - Multiple Vulnerabilities in Microsoft Office Excel Severity : Category II - VMSKEY : V0040757
2013-10-10	IAVM : 2013-A-0188 - Cumulative Security Update for Microsoft Internet Explorer Severity : Category I - VMSKEY : V0040759
2013-10-10	IAVM : 2013-A-0189 - Microsoft Windows Common Control Library Remote Code Execution Vulnerability Severity : Category II - VMSKEY : V0040760
2013-10-10	IAVM : 2013-A-0190 - Multiple Vulnerabilities in Microsoft Windows Kernel-Mode Drivers Severity : Category I - VMSKEY : V0040763
2013-10-10	IAVM : 2013-B-0117 - Microsoft Silverlight Information Disclosure Vulnerability Severity : Category II - VMSKEY : V0040764
2013-10-10	IAVM : 2013-B-0116 - Microsoft SharePoint Remote Code Execution Vulnerabilities Severity : Category II - VMSKEY : V0040765

Snort® IPS/IDS

Date	Description
2019-04-11	Microsoft Internet Explorer CAnchorElement use after free attempt RuleID : 49375 - Revision : 1 - Type : BROWSER-IE
2019-04-11	Microsoft Internet Explorer CAnchorElement use after free attempt RuleID : 49374 - Revision : 1 - Type : BROWSER-IE
2016-03-24	Microsoft Internet Explorer swapNode memory corruption attempt RuleID : 37837 - Revision : 2 - Type : BROWSER-IE
2016-03-24	Microsoft Internet Explorer swapNode memory corruption attempt RuleID : 37836 - Revision : 2 - Type : BROWSER-IE
2015-03-31	Microsoft Internet Explorer CAnchorElement use after free attempt RuleID : 33606 - Revision : 3 - Type : BROWSER-IE
2015-03-31	Microsoft Internet Explorer CAnchorElement use after free attempt RuleID : 33605 - Revision : 3 - Type : BROWSER-IE
2014-05-01	Microsoft Internet Explorer HtmlLayout SmartObject use after free attempt RuleID : 30289 - Revision : 3 - Type : BROWSER-IE
2014-04-24	ATMFD Adobe font driver reserved command denial of service attempt RuleID : 30241 - Revision : 2 - Type : FILE-OTHER
2014-04-24	ATMFD Adobe font driver reserved command denial of service attempt RuleID : 30240 - Revision : 2 - Type : FILE-OTHER
2014-04-10	Microsoft Internet Explorer CAnchorElement use after free attempt RuleID : 30105 - Revision : 3 - Type : BROWSER-IE
2014-04-10	Microsoft Internet Explorer CAnchorElement use after free attempt RuleID : 30104 - Revision : 3 - Type : BROWSER-IE
2014-04-10	Microsoft Internet Explorer CAnchorElement use after free attempt RuleID : 30103 - Revision : 3 - Type : BROWSER-IE
2014-04-10	Microsoft Internet Explorer CAnchorElement use after free attempt RuleID : 30102 - Revision : 3 - Type : BROWSER-IE
2014-02-08	potential math library debugging RuleID : 29213 - Revision : 5 - Type : INDICATOR-OBFUSCATION
2014-01-30	Angler exploit kit XORed payload download attempt RuleID : 29066 - Revision : 5 - Type : EXPLOIT-KIT
2014-01-10	Angler exploit kit payload download attempt RuleID : 28616 - Revision : 4 - Type : EXPLOIT-KIT
2014-01-10	Angler exploit kit exploit download attempt RuleID : 28615 - Revision : 6 - Type : EXPLOIT-KIT
2014-01-10	Angler exploit kit landing page RuleID : 28614 - Revision : 3 - Type : EXPLOIT-KIT
2014-01-10	Angler exploit kit landing page - specific-structure RuleID : 28613 - Revision : 3 - Type : EXPLOIT-KIT
2014-01-10	Multiple exploit kit Silverlight exploit download RuleID : 28612 - Revision : 4 - Type : EXPLOIT-KIT
2014-01-10	Microsoft Internet Explorer swapNode memory corruption attempt RuleID : 28208 - Revision : 9 - Type : BROWSER-IE
2014-01-10	Microsoft Internet Explorer swapNode memory corruption attempt RuleID : 28207 - Revision : 9 - Type : BROWSER-IE
2014-01-10	Microsoft Office Word 2003 macro byte opcode large data structure arbitrary c... RuleID : 28206 - Revision : 3 - Type : FILE-OFFICE
2014-01-10	Microsoft Office Word 2003 macro byte opcode large data structure arbitrary c... RuleID : 28205 - Revision : 3 - Type : FILE-OFFICE
2014-01-10	Microsoft Internet Explorer deleted object memory corruption attempt RuleID : 28204 - Revision : 2 - Type : BROWSER-IE
2014-01-10	ATMFD Adobe font driver reserved command denial of service attempt RuleID : 28203 - Revision : 4 - Type : FILE-OTHER
2014-01-10	ATMFD Adobe font driver reserved command denial of service attempt RuleID : 28202 - Revision : 3 - Type : FILE-OTHER
2014-01-10	Microsoft SharePoint XSS attempt RuleID : 28201 - Revision : 3 - Type : SERVER-OTHER
2014-01-10	Microsoft Internet Explorer HtmlLayout SmartObject use after free attempt RuleID : 28163 - Revision : 4 - Type : BROWSER-IE
2014-01-10	Microsoft .NET XML digital signature denial of service attempt RuleID : 28162 - Revision : 4 - Type : FILE-OTHER
2014-01-10	Microsoft .NET XML digital signature denial of service attempt RuleID : 28161 - Revision : 4 - Type : FILE-OTHER
2014-01-10	Microsoft Internet Explorer CElement use after free attempt RuleID : 28160 - Revision : 2 - Type : BROWSER-IE
2014-01-10	Microsoft Internet Explorer CLayoutBlock use after free attempt RuleID : 28159 - Revision : 2 - Type : BROWSER-IE
2014-01-10	Microsoft Internet Explorer CLayoutBlock use after free attempt RuleID : 28158 - Revision : 2 - Type : BROWSER-IE
2014-01-10	Microsoft Internet Explorer STextBlockPosition use after free attempt RuleID : 28151 - Revision : 3 - Type : BROWSER-IE
2014-01-10	Microsoft Internet Explorer onlosecapture memory corruption attempt RuleID : 27944 - Revision : 11 - Type : BROWSER-IE
2014-01-10	Microsoft Internet Explorer onlosecapture memory corruption attempt RuleID : 27943 - Revision : 10 - Type : BROWSER-IE

Nessus® Vulnerability Scanner

Date	Description
2013-10-09	Name : An application installed on the remote Mac OS X host is affected by a remote ... File : macosx_ms13-085.nasl - Type : ACT_GATHER_INFO
2013-10-09	Name : A multimedia application framework installed on the remote Mac OS X host is a... File : macosx_ms13-087.nasl - Type : ACT_GATHER_INFO
2013-10-09	Name : The remote host is affected by multiple code execution vulnerabilities. File : smb_nt_ms13-080.nasl - Type : ACT_GATHER_INFO
2013-10-09	Name : The Windows kernel drivers on the remote host are affected by multiple vulner... File : smb_nt_ms13-081.nasl - Type : ACT_GATHER_INFO
2013-10-09	Name : The .NET Framework install on the remote Windows host could allow arbitrary c... File : smb_nt_ms13-082.nasl - Type : ACT_GATHER_INFO
2013-10-09	Name : A library on the remote Windows host has an integer overflow vulnerability. File : smb_nt_ms13-083.nasl - Type : ACT_GATHER_INFO
2013-10-09	Name : The remote host is affected by multiple vulnerabilities. File : smb_nt_ms13-084.nasl - Type : ACT_GATHER_INFO
2013-10-09	Name : The Microsoft Office component installed on the remote host is affected by mu... File : smb_nt_ms13-085.nasl - Type : ACT_GATHER_INFO
2013-10-09	Name : The Microsoft Office component installed on the remote host is affected by mu... File : smb_nt_ms13-086.nasl - Type : ACT_GATHER_INFO
2013-10-09	Name : A browser enhancement on the remote Windows host is affected by an informatio... File : smb_nt_ms13-087.nasl - Type : ACT_GATHER_INFO

Alert History

If you want to see full details history, please login or register.

Date	Informations
2013-12-20 13:23:55	Multiple Updates
2013-10-16 00:18:43	First insertion

Global Informations

Type	Count
CWE ID(s)	23
Oval ID(s)	27
CPE ID(s)	95
Saint Exploit(s)	2
ExploitDB Exploit(s)	3
IAVM(s)	9
Snort® Rule(s)	37
Nessus® Exploit(s)	10

	Related
10	CVE-2013-3195
9.3	CVE-2013-3894
9.3	CVE-2013-3893
9.3	CVE-2013-3892
9.3	CVE-2013-3891
9.3	CVE-2013-3890
9.3	CVE-2013-3889
9.3	CVE-2013-3886
9.3	CVE-2013-3885
9.3	CVE-2013-3882
9.3	CVE-2013-3875
9.3	CVE-2013-3874
9.3	CVE-2013-3873
9.3	CVE-2013-3872
9.3	CVE-2013-3128
8.8	CVE-2013-3897
7.8	CVE-2013-3861
7.8	CVE-2013-3860
7.2	CVE-2013-3888
7.2	CVE-2013-3881
7.2	CVE-2013-3879
7.2	CVE-2013-3200
6.8	CVE-2013-3895
5.5	CVE-2013-3896
3.5	CVE-2013-3880
Info : listing not affected by your CVSS Env Score

Same Subject	Severity
Login to view 25 more Alert(s)