Making Security Measurable
 › 
OVAL
 › 
OVAL Repository Forum

May PT

2 Messages Forum Options Options
Embed this topic
Permalink
Sudhir Gandhe
May PT
Reply Threaded MoreMore options
Print post
Permalink
Some javascript/style in this post has been disabled (why?)

Attached are the OVAL definitions that address the vulnerabilities covered by – MS08-026, MS08-027 and MS08-028.

 

 

-SG

To unsubscribe, send an email message to LISTSERV@... with SIGNOFF OVAL-DISCUSSION-LIST in the BODY of the message. If you have difficulties, write to OVAL-DISCUSSION-LIST-request@....
<?xml version="1.0" encoding="UTF-8"?>
<oval_definitions xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-definitions-5#oval-repository-metadata-schema oval-repository-metadata-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#windows windows-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5 oval-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-common-5 oval-common-schema.xsd" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:oval="http://oval.mitre.org/XMLSchema/oval-common-5" xmlns:oval-def="http://oval.mitre.org/XMLSchema/oval-definitions-5">
  <generator>
    <oval:product_name>The OVAL Repository</oval:product_name>
    <oval:schema_version>5.4</oval:schema_version>
    <oval:timestamp>2008-05-13T13:25:42.945-04:00</oval:timestamp>
  </generator>
  <definitions>
    <definition id="oval:org.mitre.oval:def:973" version="1" class="inventory">
      <metadata>
        <title>Microsoft Word 2002 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:word:2002"/>
        <description>The application Microsoft Word 2002 is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-10-11T05:29:41">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-10-13T14:55:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-10-31T19:35:52.155-05:00">INTERIM</status_change>
            <status_change date="2006-11-21T21:28:03.268-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <criterion comment="Word 2002 is installed" test_ref="oval:org.mitre.oval:tst:2641"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:475" version="2" class="inventory">
      <metadata>
        <title>Microsoft Word 2003 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:word:2003"/>
        <description>The application Microsoft Word 2003 is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-07-25T12:05:33">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-09-27T12:29:28.006-04:00">INTERIM</status_change>
            <status_change date="2006-10-16T15:58:41.875-04:00">ACCEPTED</status_change>
            <modified comment="Added CPE reference" date="2007-05-01T10:21:00.612-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-05-01T10:24:26.639-04:00">INTERIM</status_change>
            <status_change date="2007-05-23T15:05:47.004-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <criterion comment="Word 2003 is installed" test_ref="oval:org.mitre.oval:tst:2649"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:455" version="1" class="inventory">
      <metadata>
        <title>Microsoft Word 2000 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:word:2000"/>
        <description>The application Microsoft Word 2000 is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-10-11T05:29:41">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-10-13T14:55:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-10-31T19:35:42.657-05:00">INTERIM</status_change>
            <status_change date="2006-11-21T21:27:52.358-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <criterion comment="Word 2000 is installed" test_ref="oval:org.mitre.oval:tst:2836"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2074" version="1" class="inventory">
      <metadata>
        <title>Microsoft Word 2007 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Vista</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:word:2007"/>
        <description>The application Microsoft Word 2007 is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-05-09T10:04:48">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2007-05-09T12:53:06-04:00">DRAFT</status_change>
            <status_change date="2007-05-31T15:26:40.196-04:00">INTERIM</status_change>
            <status_change date="2007-06-15T11:07:38.680-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <criterion comment="Word 2007 is installed" test_ref="oval:org.mitre.oval:tst:4142"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1853" version="1" class="inventory">
      <metadata>
        <title>Microsoft Office Compatibility Pack is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Vista</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:office_compatibility_pack"/>
        <description>The application Microsoft Office Compatibility Pack is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-05-09T10:04:48">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2007-05-09T12:53:06-04:00">DRAFT</status_change>
            <status_change date="2007-05-31T15:26:35.851-04:00">INTERIM</status_change>
            <status_change date="2007-06-15T11:07:35.894-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <criterion comment="Microsoft Office Compatibility Pack is installed" test_ref="oval:org.mitre.oval:tst:3480"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:737" version="1" class="inventory">
      <metadata>
        <title>Microsoft Word Viewer is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:word_viewer"/>
        <description>The application Microsoft Word Viewer is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-10-11T05:29:41">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-10-13T14:55:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-10-31T19:35:50.456-05:00">INTERIM</status_change>
            <status_change date="2006-11-21T21:28:01.162-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <criterion comment="Word Viewer is installed." test_ref="oval:org.mitre.oval:tst:38"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:734" version="1" class="inventory">
      <metadata>
        <title>Microsoft Publisher 2002 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:publisher:2002"/>
        <description>The application Microsoft Publisher 2002 is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-09-21T07:56:35">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-09-22T20:15:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-10-07T09:15:52.736-04:00">INTERIM</status_change>
            <status_change date="2006-10-24T09:15:59.910-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <criterion comment="Publisher 2002 is installed" test_ref="oval:org.mitre.oval:tst:140"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:427" version="1" class="inventory">
      <metadata>
        <title>Microsoft Publisher 2000 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:publisher:2000"/>
        <description>The application Microsoft Publisher 2000 is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-09-21T07:56:35">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-09-22T20:15:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-10-07T09:15:47.243-04:00">INTERIM</status_change>
            <status_change date="2006-10-24T09:15:54.950-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <criterion comment="Publisher 2000 is installed" test_ref="oval:org.mitre.oval:tst:22"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:239" version="1" class="inventory">
      <metadata>
        <title>Microsoft Publisher 2003 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:publisher:2003"/>
        <description>The application Microsoft Publisher 2003 is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-09-21T07:56:35">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-09-22T20:15:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-10-07T09:15:44.565-04:00">INTERIM</status_change>
            <status_change date="2006-10-24T09:15:51.748-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <criterion comment="Publisher 2003 is installed" test_ref="oval:org.mitre.oval:tst:24"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2127" version="1" class="inventory">
      <metadata>
        <title>Microsoft Publisher 2007 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows Server 2003</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:publisher:2007"/>
        <description>The application Microsoft Publisher 2007 is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-11T01:02:31">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2007-07-11T14:58:45.054-04:00">DRAFT</status_change>
            <status_change date="2007-08-01T22:26:15.951-04:00">INTERIM</status_change>
            <status_change date="2007-08-20T08:04:40.605-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <criterion comment="Publisher 2007 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:4062"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:229" version="2" class="inventory">
      <metadata>
        <title>Microsoft Windows 2000 SP4 or later is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
        </affected>
        <description>The operating system installed on the system is Microsoft Windows 2000 SP4.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-07-25T12:05:33">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-07-27T20:15:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-09-27T12:29:16.978-04:00">INTERIM</status_change>
            <status_change date="2006-10-16T15:58:35.885-04:00">ACCEPTED</status_change>
            <modified comment="Added CPE reference." date="2007-04-30T07:48:00.915-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-04-30T08:11:20.008-04:00">INTERIM</status_change>
            <status_change date="2007-05-23T15:05:40.599-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/>
        <criterion comment="Windows 2000 is installed" test_ref="oval:org.mitre.oval:tst:2"/>
        <criterion comment="SP4 or later Installed" test_ref="oval:org.mitre.oval:tst:3073"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:754" version="2" class="inventory">
      <metadata>
        <title>Microsoft Windows XP (x86) SP2 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/o:microsoft:windows_xp::sp2:x86"/>
        <description>A version of Microsoft Windows XP (x86) Service Pack 2 is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-03-05T09:00:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <status_change date="2007-03-05T09:00:00">DRAFT</status_change>
            <status_change date="2007-03-21T16:17:26.869-04:00">INTERIM</status_change>
            <status_change date="2007-04-10T13:44:28.583-04:00">ACCEPTED</status_change>
            <modified comment="Changed the CPE reference" date="2008-04-04T11:17:00.434-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2008-04-04T11:29:22.458-04:00">INTERIM</status_change>
            <status_change date="2008-04-21T04:00:24.359-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:org.mitre.oval:tst:99" comment="the installed operating system is part of the Microsoft Windows family"/>
        <criterion test_ref="oval:org.mitre.oval:tst:3" comment="a version of Microsoft Windows XP is installed"/>
        <criterion test_ref="oval:org.mitre.oval:tst:3823" comment="a version of Windows for the x86 architecture is installed"/>
        <criterion test_ref="oval:org.mitre.oval:tst:3019" comment="Win2K/XP/2003 service pack 2 is installed"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:565" version="2" class="inventory">
      <metadata>
        <title>Microsoft Windows Server 2003 SP1 (x86) is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/o:microsoft:windows_2003::sp1:x86"/>
        <description>A version of Microsoft Windows Server 2003 Service Pack 1 (x86) is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-07-25T12:05:33">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-07-27T20:15:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-09-27T12:29:31.197-04:00">INTERIM</status_change>
            <status_change date="2006-10-16T15:58:44.696-04:00">ACCEPTED</status_change>
            <modified comment="Changed the CPE reference" date="2008-04-04T11:17:00.371-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2008-04-04T11:28:41.395-04:00">INTERIM</status_change>
            <status_change date="2008-04-21T04:00:23.334-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/>
        <criterion comment="a version of Microsoft Windows Server 2003 is installed" test_ref="oval:org.mitre.oval:tst:4"/>
        <criterion comment="a version of Windows for the x86 architecture is installed" test_ref="oval:org.mitre.oval:tst:3823"/>
        <criterion comment="Win2K/XP/2003/Vista service pack 1 is installed" test_ref="oval:org.mitre.oval:tst:2843"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:730" version="2" class="inventory">
      <metadata>
        <title>Microsoft Windows Server 2003 (x64) is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/o:microsoft:windows_2003:::x64"/>
        <description>A version of Microsoft Windows Server 2003 (x64) is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-03-05T09:00:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <status_change date="2007-03-05T09:00:00">DRAFT</status_change>
            <status_change date="2007-03-21T16:17:25.745-04:00">INTERIM</status_change>
            <status_change date="2007-04-10T13:44:28.055-04:00">ACCEPTED</status_change>
            <modified comment="Changed the CPE reference" date="2008-04-04T11:17:00.114-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2008-04-04T11:29:06.138-04:00">INTERIM</status_change>
            <status_change date="2008-04-21T04:00:24.051-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/>
        <criterion comment="a version of Microsoft Windows Server 2003 is installed" test_ref="oval:org.mitre.oval:tst:4"/>
        <criterion comment="a version of Windows for the x64 architecture is installed" test_ref="oval:org.mitre.oval:tst:3653"/>
      </criteria>
    </definition>
   
    <definition id="oval:com.secure-elements.oval:def:9967" version="1" class="vulnerability">
      <metadata>
        <title>Object Parsing Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Vista</platform>
          <product>Microsoft Word</product>
          <product>Microsoft Office Compatibility Pack</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1091" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1091"/>
        <description>Unspecified vulnerability in Microsoft Word in Office 2000 and XP SP3, 2003 SP2 and SP3, and 2007 Office System SP1 and earlier allows remote attackers to execute arbitrary code via a Rich Text Format (.rtf) file with a malformed string that triggers a "memory calculation error" and a heap-based buffer overflow, aka "Object Parsing Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-13T13:39:00">
              <contributor organization="Secure Elements, Inc.">Sudhir Gandhe</contributor>
            </submitted>
          </dates>
          <status>INITIAL SUBMISSION</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="Word 2000">
          <extend_definition comment="Microsoft Word 2000 is installed" definition_ref="oval:org.mitre.oval:def:455"/>
          <criterion comment="the version of Winword.exe is less than 9.0.0.8970" test_ref="oval:com.secure-elements.oval:tst:99671"/>
        </criteria>
        <criteria operator="AND" comment="Word 2002">
          <extend_definition comment="Microsoft Word 2002 is installed" definition_ref="oval:org.mitre.oval:def:973"/>
          <criterion comment="the version of Winword.exe is less than 10.0.6843.0" test_ref="oval:com.secure-elements.oval:tst:99672"/>
        </criteria>
        <criteria operator="AND" comment="Word 2003">
          <extend_definition comment="Microsoft Word 2003 is installed" definition_ref="oval:org.mitre.oval:def:475"/>
          <criterion comment="the version of Winword.exe is less than 11.0.8215.0" test_ref="oval:com.secure-elements.oval:tst:99673"/>
        </criteria>
        <criteria operator="AND" comment="Word Viewer 2003">
          <extend_definition comment="Microsoft Word Viewer 2003 is installed" definition_ref="oval:org.mitre.oval:def:737"/>
          <criterion comment="the version of Wordview.exe is less than 11.0.8212.0" test_ref="oval:com.secure-elements.oval:tst:99674"/>
        </criteria>
        <criteria operator="AND" comment="Word 2007">
          <extend_definition comment="Microsoft Word 2007 is installed" definition_ref="oval:org.mitre.oval:def:2074"/>
          <criterion comment="the version of Winword.exe is less than 12.0.6308.5000" test_ref="oval:com.secure-elements.oval:tst:99675"/>
        </criteria>
        <criteria operator="AND" comment="Office Compatibility Pack 2007">
          <extend_definition comment="Microsoft Office Compatibility Pack is installed" definition_ref="oval:org.mitre.oval:def:1853"/>
          <criterion comment="the version of Wrdcnv.dll is less than 12.0.6312.5000" test_ref="oval:com.secure-elements.oval:tst:99676"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:com.secure-elements.oval:def:9966" version="1" class="vulnerability">
      <metadata>
        <title>Word Cascading Style Sheet (CSS) Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Vista</platform>
          <product>Microsoft Word</product>
          <product>Microsoft Office Compatibility Pack</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1434" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1434"/>
        <description>Unspecified vulnerability in Microsoft Word in Office 2000 and XP SP3, 2003 SP2 and SP3, and 2007 Office System SP1 and earlier allows remote attackers to execute arbitrary code via a Word file with a malformed Cascading Style Sheet (CSS) value, related to a "memory handling error" that triggers memory corruption.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-13T13:39:00">
              <contributor organization="Secure Elements, Inc.">Sudhir Gandhe</contributor>
            </submitted>
          </dates>
          <status>INITIAL SUBMISSION</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="Word 2000">
          <extend_definition comment="Microsoft Word 2000 is installed" definition_ref="oval:org.mitre.oval:def:455"/>
          <criterion comment="the version of Winword.exe is less than 9.0.0.8970" test_ref="oval:com.secure-elements.oval:tst:99671"/>
        </criteria>
        <criteria operator="AND" comment="Word 2002">
          <extend_definition comment="Microsoft Word 2002 is installed" definition_ref="oval:org.mitre.oval:def:973"/>
          <criterion comment="the version of Winword.exe is less than 10.0.6843.0" test_ref="oval:com.secure-elements.oval:tst:99672"/>
        </criteria>
        <criteria operator="AND" comment="Word 2003">
          <extend_definition comment="Microsoft Word 2003 is installed" definition_ref="oval:org.mitre.oval:def:475"/>
          <criterion comment="the version of Winword.exe is less than 11.0.8215.0" test_ref="oval:com.secure-elements.oval:tst:99673"/>
        </criteria>
        <criteria operator="AND" comment="Word Viewer 2003">
          <extend_definition comment="Microsoft Word Viewer 2003 is installed" definition_ref="oval:org.mitre.oval:def:737"/>
          <criterion comment="the version of Wordview.exe is less than 11.0.8212.0" test_ref="oval:com.secure-elements.oval:tst:99674"/>
        </criteria>
        <criteria operator="AND" comment="Word 2007">
          <extend_definition comment="Microsoft Word 2007 is installed" definition_ref="oval:org.mitre.oval:def:2074"/>
          <criterion comment="the version of Winword.exe is less than 12.0.6308.5000" test_ref="oval:com.secure-elements.oval:tst:99675"/>
        </criteria>
        <criteria operator="AND" comment="Office Compatibility Pack 2007">
          <extend_definition comment="Microsoft Office Compatibility Pack is installed" definition_ref="oval:org.mitre.oval:def:1853"/>
          <criterion comment="the version of Wrdcnv.dll is less than 12.0.6312.5000" test_ref="oval:com.secure-elements.oval:tst:99676"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:com.secure-elements.oval:def:9965" version="1" class="vulnerability">
      <metadata>
        <title>Publisher Object Handler Validation Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Vista</platform>
          <product>Microsoft Publisher</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-0119" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0119"/>
        <description>Unspecified vulnerability in Microsoft Publisher in Office 2000 and XP SP3, 2003 SP2 and SP3, and 2007 SP1 and earlier allows remote attackers to execute arbitrary code via a Publisher file with crafted object header data that triggers memory corruption, aka "Publisher Object Handler Validation Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-13T13:39:00">
              <contributor organization="Secure Elements, Inc.">Sudhir Gandhe</contributor>
            </submitted>
          </dates>
          <status>INITIAL SUBMISSION</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="Publisher 2000">
          <extend_definition comment="Microsoft Publisher 2000 is installed" definition_ref="oval:org.mitre.oval:def:427"/>
          <criterion comment="the version of Mspub.exe is less than 9.0.8932.0" test_ref="oval:com.secure-elements.oval:tst:99651"/>
        </criteria>
        <criteria operator="AND" comment="Publisher 2002">
          <extend_definition comment="Microsoft Publisher 2002 is installed" definition_ref="oval:org.mitre.oval:def:734"/>
          <criterion comment="the version of Mspub.exe is less than 10.0.6842.0" test_ref="oval:com.secure-elements.oval:tst:99652"/>
        </criteria>
        <criteria operator="AND" comment="Publisher 2003">
          <extend_definition comment="Microsoft Publisher 2003 is installed" definition_ref="oval:org.mitre.oval:def:239"/>
          <criterion comment="the version of Mspub.exe is less than 11.0.8212.0" test_ref="oval:com.secure-elements.oval:tst:99653"/>
        </criteria>
        <criteria operator="AND" comment="Publisher 2007">
          <extend_definition comment="Microsoft Publisher 2007 is installed" definition_ref="oval:org.mitre.oval:def:2127"/>
          <criterion comment="the version of Mspub.exe is less than 12.0.6308.5000" test_ref="oval:com.secure-elements.oval:tst:99654"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:com.secure-elements.oval:def:9964" version="1" class="vulnerability">
      <metadata>
        <title>Microsoft Jet Engine MDB File Parsing Stack Overflow Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Jet 4.0 Database Engine</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-6026" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6026"/>
        <description>Stack-based buffer overflow in Microsoft msjet40.dll 4.0.8618.0 (aka Microsoft Jet Engine), as used by Access 2003 in Microsoft Office 2003 SP3, allows user-assisted attackers to execute arbitrary code via a crafted MDB file. NOTE: this might be the same issue as CVE-2005-0944.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-13T13:39:00">
              <contributor organization="Secure Elements, Inc.">Sudhir Gandhe</contributor>
            </submitted>
          </dates>
          <status>INITIAL SUBMISSION</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="Windows 2000">
          <extend_definition comment="Microsoft Windows 2000 SP4 is installed" definition_ref="oval:org.mitre.oval:def:229"/>
          <criterion comment="the version of Msjet40.dll is less than 4.0.9511.0" test_ref="oval:com.secure-elements.oval:tst:99641"/>
        </criteria>
        <criteria operator="AND" comment="Windows XP">
          <extend_definition comment="Microsoft Windows XP SP2 is installed" definition_ref="oval:org.mitre.oval:def:754"/>
          <criterion comment="the version of Msjet40.dll is less than 4.0.9511.0" test_ref="oval:com.secure-elements.oval:tst:99641"/>
        </criteria>
        <criteria operator="AND" comment="Windows Server 2003">
          <extend_definition comment="Microsoft Windows Server 2003 SP1 is installed" definition_ref="oval:org.mitre.oval:def:565"/>
          <criterion comment="the version of Msjet40.dll is less than 4.0.9511.0" test_ref="oval:com.secure-elements.oval:tst:99641"/>
        </criteria>
      </criteria>
    </definition>
   
  </definitions>
  <tests>
    <family_test id="oval:org.mitre.oval:tst:99" version="1" comment="the installed operating system is part of the Microsoft Windows family" check_existence="at_least_one_exists" check="only one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:org.mitre.oval:obj:99"/>
      <state state_ref="oval:org.mitre.oval:ste:99"/>
    </family_test>
    <registry_test id="oval:org.mitre.oval:tst:3073" version="1" comment="SP4 or later Installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:717"/>
      <state state_ref="oval:org.mitre.oval:ste:2878"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:2" version="1" comment="Windows 2000 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:123"/>
      <state state_ref="oval:org.mitre.oval:ste:2"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:3" version="1" comment="a version of Microsoft Windows XP is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:123"/>
      <state state_ref="oval:org.mitre.oval:ste:3"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:2641" version="1" comment="Word 2002 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1510"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:2649" version="1" comment="Word 2003 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1518"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:2836" version="1" comment="Word 2000 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1626"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:4142" version="0" check_existence="at_least_one_exists" check="at least one" comment="Word 2007 is installed" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1909"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:3480" version="0" comment="Microsoft Office Compatibility Pack is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:2156"/>
    </registry_test>
    <file_test id="oval:com.secure-elements.oval:tst:99671" version="1" comment="the version of Winword.exe is less than 9.0.0.8970" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:492"/>
      <state state_ref="oval:com.secure-elements.oval:ste:99671"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:38" version="1" comment="Word Viewer is installed." check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1517"/>
    </file_test>
    <file_test id="oval:com.secure-elements.oval:tst:99672" version="1" comment="the version of Winword.exe is less than 10.0.6843.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:492"/>
      <state state_ref="oval:com.secure-elements.oval:ste:99672"/>
    </file_test>
    <file_test id="oval:com.secure-elements.oval:tst:99673" version="1" comment="the version of Winword.exe is less than 11.0.8215.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:492"/>
      <state state_ref="oval:com.secure-elements.oval:ste:99673"/>
    </file_test>
    <file_test id="oval:com.secure-elements.oval:tst:99674" version="1" comment="the version of Wordview.exe is less than 11.0.8212.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1517"/>
      <state state_ref="oval:com.secure-elements.oval:ste:99674"/>
    </file_test>
    <file_test id="oval:com.secure-elements.oval:tst:99675" version="1" comment="the version of Winword.exe is less than 12.0.6308.5000" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:492"/>
      <state state_ref="oval:com.secure-elements.oval:ste:99675"/>
    </file_test>
    <file_test id="oval:com.secure-elements.oval:tst:99676" version="1" comment="the version of Wrdcnv.dll is less than 12.0.6312.5000" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:com.secure-elements.oval:obj:99676"/>
      <state state_ref="oval:com.secure-elements.oval:ste:99676"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:140" version="1" comment="Publisher 2002 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:189"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:22" version="1" comment="Publisher 2000 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:109"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:24" version="1" comment="Publisher 2003 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:158"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:4062" version="1" check_existence="at_least_one_exists" check="at least one" comment="Publisher 2007 is installed" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:2560"/>
    </registry_test>
    <file_test id="oval:com.secure-elements.oval:tst:99651" version="1" comment="the version of Mspub.exe is less than 9.0.8932.0" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:94"/>
      <state state_ref="oval:com.secure-elements.oval:ste:99651"/>
    </file_test>
    <file_test id="oval:com.secure-elements.oval:tst:99652" version="1" comment="the version of Mspub.exe is less than 10.0.6842.0" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:94"/>
      <state state_ref="oval:com.secure-elements.oval:ste:99652"/>
    </file_test>
    <file_test id="oval:com.secure-elements.oval:tst:99653" version="1" comment="the version of Mspub.exe is less than 11.0.8212.0" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:94"/>
      <state state_ref="oval:com.secure-elements.oval:ste:99653"/>
    </file_test>
    <file_test id="oval:com.secure-elements.oval:tst:99654" version="1" comment="the version of Mspub.exe is less than 12.0.6308.5000" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:94"/>
      <state state_ref="oval:com.secure-elements.oval:ste:99654"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:3823" version="1" comment="a version of Windows for the x86 architecture is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1576"/>
      <state state_ref="oval:org.mitre.oval:ste:3649"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:3019" version="1" comment="Win2K/XP/2003 service pack 2 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:717"/>
      <state state_ref="oval:org.mitre.oval:ste:2827"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:4" version="1" comment="a version of Microsoft Windows Server 2003 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:123"/>
      <state state_ref="oval:org.mitre.oval:ste:4"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:2843" version="1" comment="Win2K/XP/2003/Vista service pack 1 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:717"/>
      <state state_ref="oval:org.mitre.oval:ste:2662"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:3653" version="2" comment="a version of Windows for the x64 architecture is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1576"/>
      <state state_ref="oval:org.mitre.oval:ste:3180"/>
    </registry_test>
    <file_test id="oval:com.secure-elements.oval:tst:99641" version="1" comment="the version of Msjet40.dll is less than 4.0.9511.0" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:com.secure-elements.oval:obj:99641"/>
      <state state_ref="oval:com.secure-elements.oval:ste:99641"/>
    </file_test>
  </tests>
  <objects>
    <family_object id="oval:org.mitre.oval:obj:99" version="1" comment="This is the default family object. Only one family object should exist." xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent"/>
    <registry_object id="oval:org.mitre.oval:obj:717" version="1" comment="This registry key holds the service pack installed on the host if one is present." xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows NT\CurrentVersion</key>
      <name>CSDVersion</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:123" version="1" comment="Registry key that hold the current windows os version" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows NT\CurrentVersion</key>
      <name>CurrentVersion</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:1510" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Office\10.0\Word\InstallRoot</key>
      <name xsi:nil="true"/>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:1518" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Office\11.0\Word\InstallRoot</key>
      <name xsi:nil="true"/>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:1626" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Office\9.0\Word\InstallRoot</key>
      <name xsi:nil="true"/>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:1909" version="0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Office\12.0\Word\InstallRoot</key>
      <name xsi:nil="true"/>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:2156" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Office\12.0\MOC</key>
      <name xsi:nil="true"/>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:492" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:221"/>
      <filename>winword.exe</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:493" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\Winword.exe</key>
      <name>Path</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:1517" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:221"/>
      <filename>wordview.exe</filename>
    </file_object>
    <file_object id="oval:com.secure-elements.oval:obj:99676" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:929"/>
      <filename>excelcnv.exe</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:309" version="1" comment="The registry key that holds the location of the program files directory." xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows\CurrentVersion</key>
      <name>ProgramFilesDir</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:189" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Office\10.0\Publisher\InstallRoot</key>
      <name xsi:nil="true"/>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:109" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Office\9.0\Publisher\InstallRoot</key>
      <name xsi:nil="true"/>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:158" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Office\11.0\Publisher\InstallRoot</key>
      <name>Path</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:2560" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Office\12.0\Publisher\InstallRoot</key>
      <name>Path</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:94" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:297"/>
      <filename>mspub.exe</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:2163" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\Mspub.exe</key>
      <name>Path</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:1576" version="1" comment="This registry key identifies the architecture on the system" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SYSTEM\CurrentControlSet\Control\Session Manager\Environment</key>
      <name>PROCESSOR_ARCHITECTURE</name>
    </registry_object>
    <file_object id="oval:com.secure-elements.oval:obj:99641" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200"/>
      <filename>Msjet40.dll</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:219" version="1" comment="This registry key identifies the system root." xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows NT\CurrentVersion</key>
      <name>SystemRoot</name>
    </registry_object>
  </objects>
  <states>
    <family_state id="oval:org.mitre.oval:ste:99" version="1" comment="Microsoft Windows family" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <family>windows</family>
    </family_state>
    <registry_state id="oval:org.mitre.oval:ste:2878" version="1" comment="Regex that matches Service pack is 4 or later" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^Service Pack [4-9]|\d{2,}$</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:2" version="1" comment="Registry key has a value of 5.0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>5.0</value>
    </registry_state>
    <file_state id="oval:com.secure-elements.oval:ste:99671" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">9.0.0.8970</version>
    </file_state>
    <file_state id="oval:com.secure-elements.oval:ste:99672" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">10.0.6843.0</version>
    </file_state>
    <file_state id="oval:com.secure-elements.oval:ste:99673" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">11.0.8215.0</version>
    </file_state>
    <file_state id="oval:com.secure-elements.oval:ste:99674" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">11.0.8212.0</version>
    </file_state>
    <file_state id="oval:com.secure-elements.oval:ste:99675" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">12.0.6308.5000</version>
    </file_state>
    <file_state id="oval:com.secure-elements.oval:ste:99676" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">12.0.6312.5000</version>
    </file_state>
    <file_state id="oval:com.secure-elements.oval:ste:99651" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">9.0.8932.0</version>
    </file_state>
    <file_state id="oval:com.secure-elements.oval:ste:99652" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">10.0.6842.0</version>
    </file_state>
    <file_state id="oval:com.secure-elements.oval:ste:99653" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">11.0.8212.0</version>
    </file_state>
    <file_state id="oval:com.secure-elements.oval:ste:99654" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">12.0.6308.5000</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:3" version="1" comment="The registry key has a value of 5.1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>5.1</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:3649" version="1" comment="x86 architecture" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>x86</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:2827" version="1" comment="The registry key has a value of Service Pack 2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>Service Pack 2</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:4" version="1" comment="The registry key has a value of 5.2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>5.2</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:2662" version="1" comment="The registry key has a value of Service Pack 1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>Service Pack 1</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:3180" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>amd64</value>
    </registry_state>
    <file_state id="oval:com.secure-elements.oval:ste:99641" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">4.0.9511.0</version>
    </file_state>
  </states>
  <variables>
    <local_variable id="oval:org.mitre.oval:var:221" version="1" comment="Word install directory" datatype="string">
      <object_component item_field="value" object_ref="oval:org.mitre.oval:obj:493"/>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:929" version="0" comment="Office12 subdirectory  of  the ProgramFilesDir" datatype="string">
      <concat>
        <object_component item_field="value" object_ref="oval:org.mitre.oval:obj:309"/>
        <literal_component>\Microsoft Office\Office12</literal_component>
      </concat>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:297" version="1" comment="The path to mspub.exe" datatype="string">
      <object_component item_field="value" object_ref="oval:org.mitre.oval:obj:2163"/>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:200" version="1" comment="Windows system 32 directory" datatype="string">
      <concat>
        <object_component item_field="value" object_ref="oval:org.mitre.oval:obj:219"/>
        <literal_component>\System32</literal_component>
      </concat>
    </local_variable>
  </variables>
</oval_definitions>
Worrell, Bryan A.
Re: May PT
Reply Threaded MoreMore options
Print post
Permalink
Sudhir,

Thank you for your submission to the OVAL Repository.  Your updates
have been posted for further community review.

Thanks,
Bryan Worrell



__
Bryan Worrell    
The MITRE Corporation
bworrell@...




>-----Original Message-----
>From: Sudhir Gandhe [mailto:sgandhe@...]
>Sent: Wednesday, May 14, 2008 4:58 PM
>To: oval-discussion-list OVAL Discussion List/Closed Public Discussi
>Subject: [OVAL-DISCUSSION-LIST] May PT
>
>Attached are the OVAL definitions that address the vulnerabilities
>covered by - MS08-026, MS08-027 and MS08-028.
>
>
>
>
>
>-SG
>
>To unsubscribe, send an email message to LISTSERV@... with
>SIGNOFF OVAL-DISCUSSION-LIST in the BODY of the message. If you have
>difficulties, write to OVAL-DISCUSSION-LIST-request@....

To unsubscribe, send an email message to LISTSERV@... with
SIGNOFF OVAL-DISCUSSION-LIST
in the BODY of the message.  If you have difficulties, write to OVAL-DISCUSSION-LIST-request@....
Free Forum Powered by Nabble Forum Help