oval:org.mitre.oval:def:14973

Definition Id: oval:org.mitre.oval:def:14973

Oval ID:	oval:org.mitre.oval:def:14973
Title:	Expression Design Insecure Library Loading Vulnerability
Description:	Untrusted search path vulnerability in Microsoft Expression Design; Expression Design SP1; and Expression Design 2, 3, and 4 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .xpr or .DESIGN file, aka "Expression Design Insecure Library Loading Vulnerability."
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2012-0016	Version:	3
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows 7	Product(s):	Microsoft Expression Design 1 Microsoft Expression Design 2 Microsoft Expression Design 3 Microsoft Expression Design 4
Definition Synopsis:
Vulnerable Microsoft Expression Design (KB2675064) Microsoft Expression Design 1 RTM is installed AND the version of GraphicsCore.dll is less than 4.0.2712.1 OR Vulnerable Microsoft Expression Design Service Pack 1 (KB2667724) Microsoft Expression Design 1 Service Pack 1 is installed AND the version of GraphicsCore.dll is less than 4.0.2920.1 on 32bit OR Vulnerable Microsoft Expression 2 (KB2667725) Microsoft Expression Design 2 is installed AND the version of GraphicsCore.dll is less than 5.0.1379.1 OR Vulnerable Microsoft Expression 3 (KB2667727) Microsoft Expression Design 3 is installed AND the version of GraphicsCore.dll is less than 6.0.1746.0 OR Vulnerable Microsoft Expression 4 (KB2667730) Microsoft Expression Design 4 is installed AND the version of GraphicsCore.dll is less than 7.0.30202.0

Definition Id: oval:org.mitre.oval:def:14893

Oval ID:	oval:org.mitre.oval:def:14893
Title:	Microsoft Expression Design 1 RTM is installed
Description:	Microsoft Expression Design 1 RTM is installed
Family:	windows	Class:	inventory
Reference(s):	cpe:/a:microsoft:expression_design:-	Version:	8
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows 7	Product(s):	Microsoft Expression Design 1
Definition Synopsis:
The registry key that holds the location of Microsoft Expression (32/64bit) exists AND The version of Design.exe is greater than or equal to 4.0.0.0 AND The version of Design.exe is less than 4.0.2920.0
Referenced By:
oval:org.mitre.oval:def:14973

Definition Id: oval:org.mitre.oval:def:14913

Oval ID:	oval:org.mitre.oval:def:14913
Title:	Microsoft Expression Design 1 Service Pack 1 is installed
Description:	Microsoft Expression Design 1 Service Pack 1 is installed
Family:	windows	Class:	inventory
Reference(s):	cpe:/a:microsoft:expression_design:-:sp1	Version:	8
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows 7	Product(s):	Microsoft Expression Design 1
Definition Synopsis:
The registry key that holds the location of Microsoft Expression (32/64bit) exists AND The version of Design.exe is greater than or equal to 4.0.2920.0 AND The version of Design.exe is less than 5.0.0.0
Referenced By:
oval:org.mitre.oval:def:14973

Definition Id: oval:org.mitre.oval:def:15010

Oval ID:	oval:org.mitre.oval:def:15010
Title:	Microsoft Expression Design 2 is installed
Description:	Microsoft Expression Design 2 is installed
Family:	windows	Class:	inventory
Reference(s):	cpe:/a:microsoft:expression_design:2	Version:	8
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows 7	Product(s):	Microsoft Expression Design 2
Definition Synopsis:
The registry key that holds the location of Microsoft Expression (32/64bit) exists AND The version of Design.exe is greater than or equal to 5.0.0.0 AND The version of Design.exe is less than 6.0.0.0
Referenced By:
oval:org.mitre.oval:def:14973

Definition Id: oval:org.mitre.oval:def:15115

Oval ID:	oval:org.mitre.oval:def:15115
Title:	Microsoft Expression Design 3 is installed
Description:	Microsoft Expression Design 3 is installed
Family:	windows	Class:	inventory
Reference(s):	cpe:/a:microsoft:expression_design:3	Version:	8
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows 7	Product(s):	Microsoft Expression Design 3
Definition Synopsis:
The registry key that holds the location of Microsoft Expression (32/64bit) exists AND The version of Design.exe is greater than or equal to 6.0.0.0 AND The version of Design.exe is less than 7.0.0.0
Referenced By:
oval:org.mitre.oval:def:14973

Definition Id: oval:org.mitre.oval:def:14877

Oval ID:	oval:org.mitre.oval:def:14877
Title:	Microsoft Expression Design 4 is installed
Description:	Microsoft Expression Design 4 is installed
Family:	windows	Class:	inventory
Reference(s):	cpe:/a:microsoft:expression_design:4	Version:	8
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows 7	Product(s):	Microsoft Expression Design 4
Definition Synopsis:
The registry key that holds the location of Microsoft Expression (32/64bit) exists AND The version of Design.exe is greater than or equal to 7.0.0.0 (32bit) AND The version of Design.exe is less than 8.0.0.0 (32bit)
Referenced By:
oval:org.mitre.oval:def:14973

Copyright Security-Database 2006-2024 - Powered by themself ;) in 0.0346s

Facebook rss twitter linkedin mail