oval:org.mitre.oval:def:12664

Definition Id: oval:org.mitre.oval:def:12664

Oval ID:	oval:org.mitre.oval:def:12664
Title:	XML External Entities Resolution Vulnerability
Description:	The XML Editor in Microsoft InfoPath 2007 SP2 and 2010; SQL Server 2005 SP3 and SP4 and 2008 SP1, SP2, and R2; SQL Server Management Studio Express (SSMSE) 2005; and Visual Studio 2005 SP1, 2008 SP1, and 2010 does not properly handle external entities, which allows remote attackers to read arbitrary files via a crafted .disco (Web Service Discovery) file, aka "XML External Entities Resolution Vulnerability."
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2011-1280	Version:	33
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows Server 2008 Microsoft Windows 7	Product(s):	Microsoft Office InfoPath 2007 Microsoft Office InfoPath 2010 Microsoft SQL Server 2005 Microsoft SQL Server 2005 Express Edition Microsoft SQL Server Management Studio Express (SSMSE) 2005 Microsoft SQL Server 2008 Microsoft SQL Server 2008 R2 Microsoft Visual Studio 2005 Microsoft Visual Studio 2008 Microsoft Visual Studio 2010
Definition Synopsis:
Vulnerable Microsoft Office InfoPath 2007 Microsoft InfoPath 2007 is installed AND NOT KB2510061 is installed AND Vulnerable Microsoft Office InfoPath 2010 Microsoft InfoPath 2010 is installed AND NOT Check if Microsoft Office 2010 SP1 or greater is installed AND NOT KB2510065 is installed OR SQL Server 2005 Service Pack 3 Microsoft SQL Server 2005 Microsoft SQL Server 2005 Microsoft SQL Server 2005 is installed AND HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Microsoft SQL Server\90\DTS\Setup\\SP equals 3 AND Microsoft SQL Server 2005 SP3 is installed AND SQL 2005 Microsoft SQL Server 2005 SP3 Database Engine The version of Sqlservr.exe is less than 2005.90.4060.0 OR QFE The version of Sqlservr.exe is greater than or equal to 2005.90.4207.0 AND The version of Sqlservr.exe is less than 2005.90.4340.0 OR Microsoft SQL Server 2005 SP3 Analysis Services Microsoft SQL Server 2005 Analysis Services is installed AND GDR or QFE The version of Msmdsrv.exe is less than 9.0.4060.0 OR QFE The version of Msmdsrv.exe is greater than or equal to 9.0.4207.0 AND The version of Msmdsrv.exe is less than 9.0.4340.0 OR Microsoft SQL Server 2005 SP3 Notification Services Microsoft SQL Server 2005 Notification Services is installed AND GDR or QFE The version of Nsservice.exe is less than 9.0.4060.0 OR QFE The version of Nsservice.exe is greater than or equal to 9.0.4207.0 AND The version of Nsservice.exe is less than 9.0.4340.0 OR Microsoft SQL Server 2005 SP3 Reporting Services Microsoft SQL Server 2005 Reporting Services is installed AND GDR or QFE The version of Reportingservicesservice.exe is less than 9.0.4060.0 OR QFE The version of Reportingservicesservice.exe is greater than or equal to 9.0.4207.0 AND The version of Reportingservicesservice.exe is less than 9.0.4340.0 OR Microsoft SQL Server 2005 SP3 Integration Services Microsoft SQL Server 2005 Integration Services is installed AND GDR or QFE The version of Msdtssrvr.exe is less than 9.0.4060.0 OR QFE The version of Msdtssrvr.exe is greater than or equal to 9.0.4207.0 AND The version of Msdtssrvr.exe is less than 9.0.4340.0 OR Microsoft SQL Server 2005 SP3 Tools Microsoft SQL Server 2005 Tools is installed AND GDR or QFE The version of Sqlwb.exe is less than 2005.90.4060.0 OR QFE The version of Sqlwb.exe is greater than or equal to 2005.90.4207.0 AND The version of Sqlwb.exe is less than 2005.90.4340.0 OR SQL Server 2005 Service Pack 4 SQL 2005 SP4 SQL 2005 Microsoft SQL Server 2005 is installed AND HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Microsoft SQL Server\90\DTS\Setup\\SP equals 4 AND Microsoft SQL Server 2005 SP4 is installed AND SQL 2005 Components Microsoft SQL Server 2005 SP4 Database Engine The version of Sqlservr.exe is less than 2005.90.5057.0 OR QFE The version of Sqlservr.exe is greater than or equal to 2005.90.5200.0 AND The version of Sqlservr.exe is less than 2005.90.5292.0 OR Microsoft SQL Server 2005 SP4 Analysis Services Microsoft SQL Server 2005 Analysis Services is installed AND GDR or QFE The version of Msmdsrv.exe is less than 9.0.5057.0 OR QFE The version of Msmdsrv.exe is greater than or equal to 9.0.5200.0 AND The version of Msmdsrv.exe is less than 9.0.5292.0 OR Microsoft SQL Server 2005 SP4 Notification Services Microsoft SQL Server 2005 Notification Services is installed AND GDR or QFE The version of Nsservice.exe is less than 9.0.5057.0 OR QFE The version of Nsservice.exe is greater than or equal to 9.0.5200.0 AND The version of Nsservice.exe is less than 9.0.5292.0 OR Microsoft SQL Server 2005 SP4 Reporting Services Microsoft SQL Server 2005 Reporting Services is installed AND GDR or QFE The version of Reportingservicesservice.exe is less than 9.0.5057.0 OR QFE The version of Reportingservicesservice.exe is greater than or equal to 9.0.5200.0 AND The version of Reportingservicesservice.exe is less than 9.0.5292.0 OR Microsoft SQL Server 2005 SP4 Integration Services Microsoft SQL Server 2005 Integration Services is installed AND GDR or QFE The version of Msdtssrvr.exe is less than 9.0.5057.0 OR QFE The version of Msdtssrvr.exe is greater than or equal to 9.0.5200.0 AND The version of Msdtssrvr.exe is less than 9.0.5292.0 OR Microsoft SQL Server 2005 SP4 Tools Microsoft SQL Server 2005 Tools is installed AND GDR or QFE The version of Sqlwb.exe is less than 2005.90.5057.0 OR QFE The version of Sqlwb.exe is greater than or equal to 2005.90.5200.0 AND The version of Sqlwb.exe is less than 2005.90.5292.0 OR SQL Server 2008 Service Pack 1 SQL 2008 SQL 2008 Microsoft SQL Server 2008 is installed AND HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Microsoft SQL Server\100\DTS\Setup\\SP equals 1 AND Microsoft SQL Server 2008 SP1 is installed AND SQL 2008 DSCI Microsoft SQL Server 2008 Database Services Core Instance The version of Sqlservr.exe is less than 2007.100.2573.0 OR QFE The version of Sqlservr.exe is greater than or equal to 2007.100.2800.0 AND The version of Sqlservr.exe is less than 2007.100.2841.0 OR Management Studio The version of Sql_ssms_keyfile is less than 2007.100.2573.0 OR QFE The version of sql_ssms_keyfile.dll is greater than or equal to 2007.100.2800.0 AND The version of sql_ssms_keyfile.dll is less than 2007.100.2841.0 OR SQL Server 2008 Service Pack 2 SQL 2008 SP2 SQL 2008 SP2 Microsoft SQL Server 2008 is installed AND HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Microsoft SQL Server\100\DTS\Setup\\SP equals 2 AND Microsoft SQL Server 2008 SP2 is installed AND SQL 2008 DSCI Microsoft SQL Server 2008 Database Services Core Instance The version of Sqlservr.exe is less than 2007.100.4064.0 OR QFE The version of Sqlservr.exe is greater than or equal to 2007.100.4300.0 AND The version of Sqlservr.exe is less than 2007.100.4311.0 OR Management Studio The version of Sql_ssms_keyfile is less than 2007.100.4064.0 OR QFE The version of sql_ssms_keyfile.dll is greater than or equal to 2007.100.4300.0 AND The version of sql_ssms_keyfile.dll is less than 2007.100.4311.0 OR SQL Server 2008 R2 Microsoft SQL Server 2008 R2 is installed AND Check if HKLM\SOFTWARE\Microsoft\Microsoft SQL Server\.\Setup!SQLPath exists AND Microsoft SQL Server 2008 R2 Database Services Core Instance The version of Sqlservr.exe is less than 2009.100.1617.0 AND The version of Sqlservr.exe is greater than or equal to 2009.100.1700.0 and less than 2009.100.1790.0 OR Microsoft Visual Studio 2005 Microsoft Visual Studio 2005 is installed. AND The version of Microsoft.XmlEditor.dll is less than 2.0.50727.5065 OR Microsoft Visual Studio 2008 Microsoft Visual Studio 2008 is installed AND The version of Microsoft.XmlEditor.dll is less than 3.5.30729.5665 OR Microsoft Visual Studio 2010 Microsoft Visual Studio 2010 is installed AND Check if HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Microsoft Visual Studio 2010.!InstallLocation exists AND The version of Microsoft.XmlEditor.dll is less than 10.0.30319.462

Definition Id: oval:org.mitre.oval:def:5401

Oval ID:	oval:org.mitre.oval:def:5401
Title:	Microsoft Visual Studio 2008 is installed
Description:	Microsoft Visual Studio 2008 is installed.
Family:	windows	Class:	inventory
Reference(s):	cpe:/a:microsoft:visual_studio:2008	Version:	5
Platform(s):	Microsoft Windows XP Microsoft Windows Vista Microsoft Windows Server 2003 Microsoft Windows Server 2008	Product(s):
Definition Synopsis:
devenv.exe exists as a Microsoft Visual Studio 2008 component AND Check if HKLM\SOFTWARE\Microsoft\VisualStudio\9.0!InstallDir exists
Referenced By:
oval:org.mitre.oval:def:12664

Definition Id: oval:org.mitre.oval:def:7533

Oval ID:	oval:org.mitre.oval:def:7533
Title:	Microsoft Visual Studio 2010 is installed
Description:	Microsoft Visual Studio 2010 is installed
Family:	windows	Class:	inventory
Reference(s):	cpe:/a:microsoft:visual_studio:2010	Version:	7
Platform(s):	Microsoft Windows XP Microsoft Windows Vista Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows 7 Microsoft Windows Server 2008 R2	Product(s):	Microsoft Visual Studio 2010
Definition Synopsis:
Check if Microsoft Visual Studio 2010 is installed AND Check if HKLM\SOFTWARE\Microsoft\VisualStudio\10.0!InstallDir exists
Referenced By:
oval:org.mitre.oval:def:12664

Definition Id: oval:org.mitre.oval:def:7345

Oval ID:	oval:org.mitre.oval:def:7345
Title:	Microsoft InfoPath 2007 is installed
Description:	The application Microsoft InfoPath 2007 is installed.
Family:	windows	Class:	inventory
Reference(s):	cpe:/a:microsoft:infopath:2007	Version:	11
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2	Product(s):	Microsoft InfoPath 2007
Definition Synopsis:
InfoPath 2007 is installed AND Check if HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\infopath.exe!Path exists AND the version of infopath.exe is greater than or equal 12.0.0.0 AND the version of infopath.exe is less than 13.0.0.0
Referenced By:
oval:org.mitre.oval:def:12664

Definition Id: oval:org.mitre.oval:def:426

Oval ID:	oval:org.mitre.oval:def:426
Title:	Microsoft Visual Studio 2005 is installed.
Description:	Microsoft Visual Studio 2005 is installed.
Family:	windows	Class:	inventory
Reference(s):	cpe:/a:microsoft:visual_studio:2005	Version:	9
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2	Product(s):	Microsoft Visual Studio 2005
Definition Synopsis:
devenv.exe exists as a Microsoft Visual Studio 2005 component AND Check if HKLM\Software\Microsoft\VisualStudio\8.0!InstallDir exists
Referenced By:
oval:org.mitre.oval:def:12664

Definition Id: oval:org.mitre.oval:def:6082

Oval ID:	oval:org.mitre.oval:def:6082
Title:	Microsoft SQL Server 2005 is installed
Description:	Microsoft SQL Server 2005 is installed.
Family:	windows	Class:	inventory
Reference(s):	cpe:/a:microsoft:sql_server:2005	Version:	17
Platform(s):	Microsoft Windows 2000 Microsoft Windows 7 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows XP	Product(s):	Microsoft SQL Server 2005
Definition Synopsis:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Microsoft SQL Server\90\DTS\Setup\\Version is greater than 9.0.0.0 AND SQL Server instance with version between 9.0.0.0 and 10.0.0.0 SQL Server instances with version greater than 9.0.0.0 exist AND SQL Server instances with version less than 10.0.0.0 exist
Referenced By:
oval:org.mitre.oval:def:12664 oval:org.mitre.oval:def:12664

Definition Id: oval:org.mitre.oval:def:8471

Oval ID:	oval:org.mitre.oval:def:8471
Title:	Microsoft SQL Server 2005 SP3 is installed
Description:	Microsoft SQL Server 2005 SP3 is installed.
Family:	windows	Class:	inventory
Reference(s):	cpe:/a:microsoft:sql_server:2005:sp3	Version:	14
Platform(s):	Microsoft Windows Server 2003 Microsoft Windows Server 2008	Product(s):	Microsoft SQL Server 2005
Definition Synopsis:
MS SQL Server 2005 SP3 is installed
Referenced By:
oval:org.mitre.oval:def:12664

Definition Id: oval:org.mitre.oval:def:12454

Oval ID:	oval:org.mitre.oval:def:12454
Title:	Microsoft SQL Server 2008 is installed
Description:	Microsoft SQL Server 2008 is installed.
Family:	windows	Class:	inventory
Reference(s):	cpe:/a:microsoft:sql_server:2008	Version:	19
Platform(s):	Microsoft Windows 7 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows XP	Product(s):	Microsoft SQL Server 2008
Definition Synopsis:
SQL Server Integration Services version between 10.0.0.0 and 10.50.1600.1 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Microsoft SQL Server\100\DTS\Setup\\Version is greater than 10.0.0.0 AND HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Microsoft SQL Server\100\DTS\Setup\\Version is less than 10.50.1600.1 AND SQL Server instance with version between 10.0.0.0 and 10.50.1600.1 SQL Server instances with version greater than 10.0.0.0 exist AND SQL Server instances with version less than 10.50.1600.1 exist
Referenced By:
oval:org.mitre.oval:def:12664 oval:org.mitre.oval:def:12664

Definition Id: oval:org.mitre.oval:def:11846

Oval ID:	oval:org.mitre.oval:def:11846
Title:	Microsoft InfoPath 2010 is installed
Description:	The application Microsoft InfoPath 2010 is installed.
Family:	windows	Class:	inventory
Reference(s):	cpe:/a:microsoft:infopath:2010	Version:	9
Platform(s):	Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows XP Microsoft Windows Server 2008 Microsoft Windows Server 2012	Product(s):	Microsoft InfoPath 2010
Definition Synopsis:
InfoPath 2010 is installed AND Check if HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\infopath.exe!Path exists AND the version of infopath.exe is greater than or equal 14.0.0.0 AND the version of infopath.exe is less than 15.0.0.0
Referenced By:
oval:org.mitre.oval:def:12664

Definition Id: oval:org.mitre.oval:def:12596

Oval ID:	oval:org.mitre.oval:def:12596
Title:	Microsoft SQL Server 2008 R2 is installed
Description:	Microsoft SQL Server 2008 R2 is installed.
Family:	windows	Class:	inventory
Reference(s):	cpe:/a:microsoft:sql_server:2008:r2	Version:	11
Platform(s):	Microsoft Windows 7 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows XP	Product(s):	Microsoft SQL Server 2008 R2
Definition Synopsis:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Microsoft SQL Server\100\DTS\Setup\\Version is greater than or equal to 10.50.1600.1 AND SQL Server instance with version between 10.50.1600.1 and 11.0.0.0 SQL Server instances with version greater than or equal to 10.50.1600.1 exist AND SQL Server instances with version less than 11.0.0.0 exist
Referenced By:
oval:org.mitre.oval:def:12664

Definition Id: oval:org.mitre.oval:def:12310

Oval ID:	oval:org.mitre.oval:def:12310
Title:	Microsoft SQL Server 2008 SP2 is installed
Description:	Microsoft SQL Server 2008 SP2 is installed.
Family:	windows	Class:	inventory
Reference(s):	cpe:/a:microsoft:sql_server:2008:sp2	Version:	15
Platform(s):	Microsoft Windows Server 2003 Microsoft Windows Server 2008	Product(s):	Microsoft SQL Server 2008
Definition Synopsis:
MS SQL Server 2008 SP2 is installed
Referenced By:
oval:org.mitre.oval:def:12664

Definition Id: oval:org.mitre.oval:def:12442

Oval ID:	oval:org.mitre.oval:def:12442
Title:	Microsoft SQL Server 2005 SP4 is installed
Description:	Microsoft SQL Server 2005 SP4 is installed.
Family:	windows	Class:	inventory
Reference(s):	cpe:/a:microsoft:sql_server:2005:sp4	Version:	15
Platform(s):	Microsoft Windows Server 2003 Microsoft Windows Server 2008	Product(s):	Microsoft SQL Server 2005
Definition Synopsis:
MS SQL Server 2005 SP4 is installed
Referenced By:
oval:org.mitre.oval:def:12664

Definition Id: oval:org.mitre.oval:def:12723

Oval ID:	oval:org.mitre.oval:def:12723
Title:	Microsoft SQL Server 2008 SP1 is installed
Description:	Microsoft SQL Server 2008 SP1 is installed.
Family:	windows	Class:	inventory
Reference(s):	cpe:/a:microsoft:sql_server:2008:sp1	Version:	15
Platform(s):	Microsoft Windows Server 2003 Microsoft Windows Server 2008	Product(s):	Microsoft SQL Server 2008
Definition Synopsis:
MS SQL Server 2008 SP1 is installed
Referenced By:
oval:org.mitre.oval:def:12664

Copyright Security-Database 2006-2024 - Powered by themself ;) in 0.0898s

Facebook rss twitter linkedin mail