Oval's on Opera, QuickTime, Pidgin
|
|
Chandan-2
|
Vulnerability Definitions for Opera, Apple QuickTime, and Pidgin Messanger.
Thanks!! Chandan www.secpod.com To unsubscribe, send an email message to [hidden email] with SIGNOFF OVAL-DISCUSSION-LIST in the BODY of the message. If you have difficulties, write to [hidden email]. <?xml version="1.0" encoding="UTF-8"?> <oval_definitions xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows windows-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#independent independent-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5 oval-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-common-5 oval-common-schema.xsd" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:oval="http://oval.mitre.org/XMLSchema/oval-common-5" xmlns:oval-def="http://oval.mitre.org/XMLSchema/oval-definitions-5"> <generator> <oval:product_name>The OVAL Repository</oval:product_name> <oval:schema_version>5.6</oval:schema_version> <oval:timestamp>2009-09-24T10:30:41.557-04:00</oval:timestamp> </generator> <definitions> <definition id="oval:com.secpod.oval:def:90091" version="1" class="vulnerability"> <metadata> <title>Apple QuickTime before 7.6.4 allows to execute arbitrary code or DOS Vulnerabilities</title> <affected family="windows"> <platform>Microsoft Windows XP</platform> <platform>Microsoft Windows Vista</platform> <product>Apple QuickTime</product> </affected> <reference source="CVE" ref_id="CVE-2009-2202" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2202"/> <description>Apple QuickTime before 7.6.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted H.264 movie file.</description> <oval_repository> <dates> <submitted date="2009-09-24T10:30:41"> <contributor organization="SecPod Technologies">Chandan S</contributor> </submitted> </dates> <status>INITIAL SUBMISSION</status> </oval_repository> </metadata> <criteria operator="OR"> <criteria operator="AND"> <criteria operator="OR"> <extend_definition comment="Microsoft Windows XP (x86) SP2 is installed" definition_ref="oval:org.mitre.oval:def:754"/> <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/> <extend_definition comment="Microsoft Windows Vista (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:1282"/> <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/> </criteria> <criterion comment="QuickTimePlayer.exe version is less than 7.6.4 (7.64.17.73)" test_ref="oval:com.secpod.oval:tst:90037"/> </criteria> </criteria> </definition> <definition id="oval:com.secpod.oval:def:90092" version="1" class="vulnerability"> <metadata> <title>Apple QuickTime before 7.6.4 allows Buffer Overflow Vulnerability</title> <affected family="windows"> <platform>Microsoft Windows XP</platform> <platform>Microsoft Windows Vista</platform> <product>Apple QuickTime</product> </affected> <reference source="CVE" ref_id="CVE-2009-2203" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2203"/> <description>Buffer overflow in Apple QuickTime before 7.6.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted MPEG-4 video file.</description> <oval_repository> <dates> <submitted date="2009-09-24T10:30:41"> <contributor organization="SecPod Technologies">Chandan S</contributor> </submitted> </dates> <status>INITIAL SUBMISSION</status> </oval_repository> </metadata> <criteria operator="OR"> <criteria operator="AND"> <criteria operator="OR"> <extend_definition comment="Microsoft Windows XP (x86) SP2 is installed" definition_ref="oval:org.mitre.oval:def:754"/> <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/> <extend_definition comment="Microsoft Windows Vista (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:1282"/> <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/> </criteria> <criterion comment="QuickTimePlayer.exe version is less than 7.6.4 (7.64.17.73)" test_ref="oval:com.secpod.oval:tst:90037"/> </criteria> </criteria> </definition> <definition id="oval:com.secpod.oval:def:90093" version="1" class="vulnerability"> <metadata> <title>Apple QuickTime before 7.6.4 allows Heap-based buffer overflow Vulnerability</title> <affected family="windows"> <platform>Microsoft Windows XP</platform> <platform>Microsoft Windows Vista</platform> <product>Apple QuickTime</product> </affected> <reference source="CVE" ref_id="CVE-2009-2798" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2798"/> <description>Heap-based buffer overflow in Apple QuickTime before 7.6.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted FlashPix file.</description> <oval_repository> <dates> <submitted date="2009-09-24T10:30:41"> <contributor organization="SecPod Technologies">Chandan S</contributor> </submitted> </dates> <status>INITIAL SUBMISSION</status> </oval_repository> </metadata> <criteria operator="OR"> <criteria operator="AND"> <criteria operator="OR"> <extend_definition comment="Microsoft Windows XP (x86) SP2 is installed" definition_ref="oval:org.mitre.oval:def:754"/> <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/> <extend_definition comment="Microsoft Windows Vista (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:1282"/> <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/> </criteria> <criterion comment="QuickTimePlayer.exe version is less than 7.6.4 (7.64.17.73)" test_ref="oval:com.secpod.oval:tst:90037"/> </criteria> </criteria> </definition> <definition id="oval:com.secpod.oval:def:90094" version="1" class="vulnerability"> <metadata> <title>Apple QuickTime before 7.6.4 allows Heap-based buffer overflow and DOS Vulnerabilities</title> <affected family="windows"> <platform>Microsoft Windows XP</platform> <platform>Microsoft Windows Vista</platform> <product>Apple QuickTime</product> </affected> <reference source="CVE" ref_id="CVE-2009-2799" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2799"/> <description>Heap-based buffer overflow in Apple QuickTime before 7.6.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted H.264 movie file.</description> <oval_repository> <dates> <submitted date="2009-09-24T10:30:41"> <contributor organization="SecPod Technologies">Chandan S</contributor> </submitted> </dates> <status>INITIAL SUBMISSION</status> </oval_repository> </metadata> <criteria operator="OR"> <criteria operator="AND"> <criteria operator="OR"> <extend_definition comment="Microsoft Windows XP (x86) SP2 is installed" definition_ref="oval:org.mitre.oval:def:754"/> <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/> <extend_definition comment="Microsoft Windows Vista (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:1282"/> <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/> </criteria> <criterion comment="QuickTimePlayer.exe version is less than 7.6.4 (7.64.17.73)" test_ref="oval:com.secpod.oval:tst:90037"/> </criteria> </criteria> </definition> <definition id="oval:org.mitre.oval:def:754" version="2" class="inventory"> <metadata> <title>Microsoft Windows XP (x86) SP2 is installed</title> <affected family="windows"> <platform>Microsoft Windows XP</platform> </affected> <reference source="CPE" ref_id="cpe:/o:microsoft:windows_xp::sp2:x86"/> <description>A version of Microsoft Windows XP (x86) Service Pack 2 is installed.</description> <oval_repository> <dates> <submitted date="2007-03-05T09:00:00"> <contributor organization="The MITRE Corporation">Andrew Buttner</contributor> </submitted> <status_change date="2007-03-05T09:00:00">DRAFT</status_change> <status_change date="2007-03-21T16:17:26.869-04:00">INTERIM</status_change> <status_change date="2007-04-10T13:44:28.583-04:00">ACCEPTED</status_change> <modified comment="Changed the CPE reference" date="2008-04-04T11:17:00.434-04:00"> <contributor organization="The MITRE Corporation">Andrew Buttner</contributor> </modified> <status_change date="2008-04-04T11:29:22.458-04:00">INTERIM</status_change> <status_change date="2008-04-21T04:00:24.359-04:00">ACCEPTED</status_change> </dates> <status>ACCEPTED</status> </oval_repository> </metadata> <criteria operator="AND"> <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/> <criterion comment="a version of Microsoft Windows XP is installed" test_ref="oval:org.mitre.oval:tst:3"/> <criterion comment="a version of Windows for the x86 architecture is installed" test_ref="oval:org.mitre.oval:tst:3823"/> <criterion comment="Win2K/XP/2003 service pack 2 is installed" test_ref="oval:org.mitre.oval:tst:3019"/> </criteria> </definition> <definition id="oval:org.mitre.oval:def:5631" version="1" class="inventory"> <metadata> <title>Microsoft Windows XP (x86) SP3 is installed</title> <affected family="windows"> <platform>Microsoft Windows XP</platform> </affected> <reference source="CPE" ref_id="cpe:/o:microsoft:windows_xp::sp3:x86"/> <description>A version of Microsoft Windows XP (x86) Service Pack 3 is installed.</description> <oval_repository> <dates> <submitted date="2008-06-10T14:50:00"> <contributor organization="Secure Elements, Inc.">Sudhir Gandhe</contributor> </submitted> <status_change date="2008-06-12T13:58:47.155-04:00">DRAFT</status_change> <status_change date="2008-06-30T04:00:18.370-04:00">INTERIM</status_change> <status_change date="2008-07-21T04:00:18.901-04:00">ACCEPTED</status_change> </dates> <status>ACCEPTED</status> </oval_repository> </metadata> <criteria operator="AND"> <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/> <criterion comment="a version of Microsoft Windows XP is installed" test_ref="oval:org.mitre.oval:tst:3"/> <criterion comment="a version of Windows for the x86 architecture is installed" test_ref="oval:org.mitre.oval:tst:3823"/> <criterion comment="Win2K/XP/2003 service pack 3 is installed" test_ref="oval:org.mitre.oval:tst:7814"/> </criteria> </definition> <definition id="oval:org.mitre.oval:def:4873" version="1" class="inventory"> <metadata> <title>Microsoft Windows Vista (32-bit) Service Pack 1 is installed</title> <affected family="windows"> <platform>Microsoft Windows Vista</platform> </affected> <reference source="CPE" ref_id="cpe:/o:microsoft:windows_vista::sp1:x86"/> <description>The operating system installed on the system is Microsoft Windows Vista (32-bit) Service Pack 1</description> <oval_repository> <dates> <submitted date="2008-03-26T10:44:02"> <contributor organization="Secure Elements, Inc.">Sudhir Gandhe</contributor> </submitted> <status_change date="2008-03-26T16:27:29.495-04:00">DRAFT</status_change> <modified comment="Changed the CPE reference" date="2008-04-04T11:17:00.108-04:00"> <contributor organization="The MITRE Corporation">Andrew Buttner</contributor> </modified> <status_change date="2008-04-21T04:00:20.428-04:00">INTERIM</status_change> <status_change date="2008-05-12T04:00:14.497-04:00">ACCEPTED</status_change> </dates> <status>ACCEPTED</status> </oval_repository> </metadata> <criteria> <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/> <criterion comment="Windows Vista is installed" test_ref="oval:org.mitre.oval:tst:7914"/> <criterion negate="true" comment="a version of Windows for the x64 architecture is installed" test_ref="oval:org.mitre.oval:tst:3653"/> <criterion comment="Win2K/XP/2003/Vista service pack 1 is installed" test_ref="oval:org.mitre.oval:tst:2843"/> </criteria> </definition> <definition id="oval:org.mitre.oval:def:1282" version="2" class="inventory"> <metadata> <title>Microsoft Windows Vista (32-bit) is installed</title> <affected family="windows"> <platform>Microsoft Windows Vista</platform> </affected> <reference source="CPE" ref_id="cpe:/o:microsoft:windows_vista:::x86"/> <description>The operating system installed on the system is Microsoft Windows Vista (32-bit)</description> <oval_repository> <dates> <submitted date="2007-04-11T11:27:37.975-04:00"> <contributor organization="The MITRE Corporation">Jonathan Baker</contributor> </submitted> <status_change date="2007-04-11T12:15:00.000-04:00">DRAFT</status_change> <status_change date="2007-04-30T08:18:46.566-04:00">INTERIM</status_change> <status_change date="2007-05-23T15:05:26.800-04:00">ACCEPTED</status_change> <modified comment="Vista test updated because of the conflictions with Server 2008" date="2008-03-26T10:51:02.210-04:00"> <contributor organization="Secure Elements, Inc.">Sudhir Gandhe</contributor> </modified> <status_change date="2008-03-31T04:00:20.410-04:00">INTERIM</status_change> <modified comment="Changed the CPE reference" date="2008-04-04T11:17:00.749-04:00"> <contributor organization="The MITRE Corporation">Andrew Buttner</contributor> </modified> <status_change date="2008-04-21T04:00:11.683-04:00">ACCEPTED</status_change> </dates> <status>ACCEPTED</status> </oval_repository> </metadata> <criteria> <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/> <criterion comment="Windows Vista is installed" test_ref="oval:org.mitre.oval:tst:7914"/> <criterion negate="true" comment="a version of Windows for the x64 architecture is installed" test_ref="oval:org.mitre.oval:tst:3653"/> </criteria> </definition> </definitions> <tests> <registry_test id="oval:org.mitre.oval:tst:3019" version="1" comment="Win2K/XP/2003 service pack 2 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <object object_ref="oval:org.mitre.oval:obj:717"/> <state state_ref="oval:org.mitre.oval:ste:2827"/> </registry_test> <registry_test id="oval:org.mitre.oval:tst:7814" version="1" comment="Win2K/XP/2003 service pack 3 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <object object_ref="oval:org.mitre.oval:obj:717"/> <state state_ref="oval:org.mitre.oval:ste:3794"/> </registry_test> <registry_test id="oval:org.mitre.oval:tst:3823" version="1" comment="a version of Windows for the x86 architecture is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <object object_ref="oval:org.mitre.oval:obj:1576"/> <state state_ref="oval:org.mitre.oval:ste:3649"/> </registry_test> <registry_test id="oval:org.mitre.oval:tst:3" version="1" comment="a version of Microsoft Windows XP is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <object object_ref="oval:org.mitre.oval:obj:123"/> <state state_ref="oval:org.mitre.oval:ste:3"/> </registry_test> <registry_test id="oval:org.mitre.oval:tst:2843" version="1" comment="Win2K/XP/2003/Vista service pack 1 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <object object_ref="oval:org.mitre.oval:obj:717"/> <state state_ref="oval:org.mitre.oval:ste:2662"/> </registry_test> <family_test id="oval:org.mitre.oval:tst:99" version="1" comment="the installed operating system is part of the Microsoft Windows family" check_existence="at_least_one_exists" check="only one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent"> <object object_ref="oval:org.mitre.oval:obj:99"/> <state state_ref="oval:org.mitre.oval:ste:99"/> </family_test> <registry_test id="oval:org.mitre.oval:tst:7914" version="1" comment="Windows Vista is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <object object_ref="oval:org.mitre.oval:obj:5590"/> <state state_ref="oval:org.mitre.oval:ste:3828"/> </registry_test> <registry_test id="oval:org.mitre.oval:tst:3653" version="2" comment="a version of Windows for the x64 architecture is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <object object_ref="oval:org.mitre.oval:obj:1576"/> <state state_ref="oval:org.mitre.oval:ste:3180"/> </registry_test> <file_test id="oval:com.secpod.oval:tst:90037" version="1" comment="QuickTimePlayer.exe version is less than 7.6.4 (7.64.17.73)" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <object object_ref="oval:org.mitre.oval:obj:6558"/> <state state_ref="oval:com.secpod.oval:ste:90037"/> </file_test> </tests> <objects> <registry_object id="oval:org.mitre.oval:obj:123" version="1" comment="Registry key that hold the current windows os version" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <hive>HKEY_LOCAL_MACHINE</hive> <key>SOFTWARE\Microsoft\Windows NT\CurrentVersion</key> <name>CurrentVersion</name> </registry_object> <registry_object id="oval:org.mitre.oval:obj:717" version="1" comment="This registry key holds the service pack installed on the host if one is present." xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <hive>HKEY_LOCAL_MACHINE</hive> <key>SOFTWARE\Microsoft\Windows NT\CurrentVersion</key> <name>CSDVersion</name> </registry_object> <family_object id="oval:org.mitre.oval:obj:99" version="1" comment="This is the default family object. Only one family object should exist." xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent"/> <registry_object id="oval:org.mitre.oval:obj:5590" version="1" comment="This registry key ProductName" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <hive>HKEY_LOCAL_MACHINE</hive> <key>SOFTWARE\Microsoft\Windows NT\CurrentVersion</key> <name>ProductName</name> </registry_object> <registry_object id="oval:org.mitre.oval:obj:1576" version="1" comment="This registry key identifies the architecture on the system" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <hive>HKEY_LOCAL_MACHINE</hive> <key>SYSTEM\CurrentControlSet\Control\Session Manager\Environment</key> <name>PROCESSOR_ARCHITECTURE</name> </registry_object> <file_object id="oval:org.mitre.oval:obj:6558" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <path var_ref="oval:org.mitre.oval:var:92" var_check="all"/> <filename>QuickTimePlayer.exe</filename> </file_object> <registry_object id="oval:org.mitre.oval:obj:5628" version="1" comment="The registry key that holds the location of the program files directory." xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <hive>HKEY_LOCAL_MACHINE</hive> <key>SOFTWARE\Apple Computer, Inc.\QuickTime</key> <name>InstallDir</name> </registry_object> </objects> <states> <registry_state id="oval:org.mitre.oval:ste:2827" version="1" comment="The registry key has a value of Service Pack 2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <value>Service Pack 2</value> </registry_state> <registry_state id="oval:org.mitre.oval:ste:3794" version="1" comment="The registry key has a value of Service Pack 3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <value>Service Pack 3</value> </registry_state> <registry_state id="oval:org.mitre.oval:ste:3649" version="1" comment="x86 architecture" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <value>x86</value> </registry_state> <registry_state id="oval:org.mitre.oval:ste:3" version="1" comment="The registry key has a value of 5.1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <value>5.1</value> </registry_state> <registry_state id="oval:org.mitre.oval:ste:2662" version="1" comment="The registry key has a value of Service Pack 1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <value>Service Pack 1</value> </registry_state> <family_state id="oval:org.mitre.oval:ste:99" version="1" comment="Microsoft Windows family" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent"> <family>windows</family> </family_state> <registry_state id="oval:org.mitre.oval:ste:3828" version="1" comment="The registry key matches with Vista" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <value operation="pattern match">.*[Vv]ista.*</value> </registry_state> <registry_state id="oval:org.mitre.oval:ste:3180" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <value>amd64</value> </registry_state> <file_state id="oval:com.secpod.oval:ste:90037" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <version datatype="version" operation="less than">7.64.17.73</version> </file_state> </states> <variables> <local_variable id="oval:org.mitre.oval:var:92" version="1" comment="QuickTime directory" datatype="string"> <concat> <object_component item_field="value" object_ref="oval:org.mitre.oval:obj:5628"/> <literal_component>\</literal_component> </concat> </local_variable> </variables> </oval_definitions> <?xml version="1.0" encoding="UTF-8"?> <oval_definitions xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows windows-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#independent independent-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5 oval-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-common-5 oval-common-schema.xsd" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:oval="http://oval.mitre.org/XMLSchema/oval-common-5" xmlns:oval-def="http://oval.mitre.org/XMLSchema/oval-definitions-5"> <generator> <oval:product_name>The OVAL Repository</oval:product_name> <oval:schema_version>5.6</oval:schema_version> <oval:timestamp>2009-09-24T12:57:10.430-04:00</oval:timestamp> </generator> <definitions> <definition id="oval:com.secpod.oval:def:90095" version="0" class="vulnerability"> <metadata> <title>Opera before 10.00 does not properly handle a \0 character or invalid wildcard character</title> <affected family="windows"> <platform>Microsoft Windows XP</platform> <platform>Microsoft Windows Vista</platform> <product>Opera Browser</product> </affected> <reference source="CVE" ref_id="CVE-2009-3044" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3044"/> <description>Opera before 10.00 does not properly handle a (1) '\0' character or (2) invalid wildcard character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority.</description> <oval_repository> <dates> <submitted date="2009-09-24T12:57:10"> <contributor organization="SecPod Technologies">Chandan S</contributor> </submitted> </dates> <status>INITIAL SUBMISSION</status> </oval_repository> </metadata> <criteria operator="OR"> <criteria operator="AND"> <criteria operator="OR"> <extend_definition comment="Microsoft Windows XP (x86) SP2 is installed" definition_ref="oval:org.mitre.oval:def:754"/> <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/> <extend_definition comment="Microsoft Windows Vista (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:1282"/> <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/> </criteria> <criterion comment="Opera.exe version less than 10.0" test_ref="oval:com.secpod.oval:tst:90038"/> </criteria> </criteria> </definition> <definition id="oval:com.secpod.oval:def:90096" version="0" class="vulnerability"> <metadata> <title>Opera before 10.00 trusts root X.509 certificates signed with the MD2 algorithm</title> <affected family="windows"> <platform>Microsoft Windows XP</platform> <platform>Microsoft Windows Vista</platform> <product>Opera Browser</product> </affected> <reference source="CVE" ref_id="CVE-2009-3045" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3045"/> <description>Opera before 10.00 trusts root X.509 certificates signed with the MD2 algorithm, which makes it easier for man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted server certificate.</description> <oval_repository> <dates> <submitted date="2009-09-24T12:57:10"> <contributor organization="SecPod Technologies">Chandan S</contributor> </submitted> </dates> <status>INITIAL SUBMISSION</status> </oval_repository> </metadata> <criteria operator="OR"> <criteria operator="AND"> <criteria operator="OR"> <extend_definition comment="Microsoft Windows XP (x86) SP2 is installed" definition_ref="oval:org.mitre.oval:def:754"/> <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/> <extend_definition comment="Microsoft Windows Vista (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:1282"/> <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/> </criteria> <criterion comment="Opera.exe version less than 10.0" test_ref="oval:com.secpod.oval:tst:90038"/> </criteria> </criteria> </definition> <definition id="oval:com.secpod.oval:def:90097" version="0" class="vulnerability"> <metadata> <title>Opera before 10.00 does not check all intermediate X.509 certificates for revocation</title> <affected family="windows"> <platform>Microsoft Windows XP</platform> <platform>Microsoft Windows Vista</platform> <product>Opera Browser</product> </affected> <reference source="CVE" ref_id="CVE-2009-3046" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3046"/> <description>Opera before 10.00 does not check all intermediate X.509 certificates for revocation, which makes it easier for remote SSL servers to bypass validation of the certificate chain via a revoked certificate.</description> <oval_repository> <dates> <submitted date="2009-09-24T12:57:10"> <contributor organization="SecPod Technologies">Chandan S</contributor> </submitted> </dates> <status>INITIAL SUBMISSION</status> </oval_repository> </metadata> <criteria operator="OR"> <criteria operator="AND"> <criteria operator="OR"> <extend_definition comment="Microsoft Windows XP (x86) SP2 is installed" definition_ref="oval:org.mitre.oval:def:754"/> <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/> <extend_definition comment="Microsoft Windows Vista (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:1282"/> <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/> </criteria> <criterion comment="Opera.exe version less than 10.0" test_ref="oval:com.secpod.oval:tst:90038"/> </criteria> </criteria> </definition> <definition id="oval:com.secpod.oval:def:90098" version="0" class="vulnerability"> <metadata> <title>Opera before 10.00 allow remote attacks to spoof URLs</title> <affected family="windows"> <platform>Microsoft Windows XP</platform> <platform>Microsoft Windows Vista</platform> <product>Opera Browser</product> </affected> <reference source="CVE" ref_id="CVE-2009-3047" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3047"/> <description>Opera before 10.00, when a collapsed address bar is used, does not properly update the domain name from the previously visited site to the currently visited site, which might allow remote attackers to spoof URLs.</description> <oval_repository> <dates> <submitted date="2009-09-24T12:57:10"> <contributor organization="SecPod Technologies">Chandan S</contributor> </submitted> </dates> <status>INITIAL SUBMISSION</status> </oval_repository> </metadata> <criteria operator="OR"> <criteria operator="AND"> <criteria operator="OR"> <extend_definition comment="Microsoft Windows XP (x86) SP2 is installed" definition_ref="oval:org.mitre.oval:def:754"/> <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/> <extend_definition comment="Microsoft Windows Vista (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:1282"/> <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/> </criteria> <criterion comment="Opera.exe version less than 10.0" test_ref="oval:com.secpod.oval:tst:90038"/> </criteria> </criteria> </definition> <definition id="oval:com.secpod.oval:def:90099" version="0" class="vulnerability"> <metadata> <title>Opera before 10.00 does not properly implement the INPUT TYPE=file functionality</title> <affected family="windows"> <platform>Microsoft Windows XP</platform> <platform>Microsoft Windows Vista</platform> <product>Opera Browser</product> </affected> <reference source="CVE" ref_id="CVE-2009-3048" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3048"/> <description>Opera before 10.00 does not properly implement the "INPUT TYPE=file" functionality, which allows remote attackers to trick a user into uploading an unintended file via vectors involving a "dropped file." </description> <oval_repository> <dates> <submitted date="2009-09-24T12:57:10"> <contributor organization="SecPod Technologies">Chandan S</contributor> </submitted> </dates> <status>INITIAL SUBMISSION</status> </oval_repository> </metadata> <criteria operator="OR"> <criteria operator="AND"> <criteria operator="OR"> <extend_definition comment="Microsoft Windows XP (x86) SP2 is installed" definition_ref="oval:org.mitre.oval:def:754"/> <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/> <extend_definition comment="Microsoft Windows Vista (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:1282"/> <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/> </criteria> <criterion comment="Opera.exe version less than 10.0" test_ref="oval:com.secpod.oval:tst:90038"/> </criteria> </criteria> </definition> <definition id="oval:com.secpod.oval:def:90100" version="0" class="vulnerability"> <metadata> <title>Opera before 10.00 does not properly display all characters in Internationalized Domain Names</title> <affected family="windows"> <platform>Microsoft Windows XP</platform> <platform>Microsoft Windows Vista</platform> <product>Opera Browser</product> </affected> <reference source="CVE" ref_id="CVE-2009-3049" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3049"/> <description></description> <oval_repository> <dates> <submitted date="2009-09-24T12:57:10"> <contributor organization="SecPod Technologies">Chandan S</contributor> </submitted> </dates> <status>INITIAL SUBMISSION</status> </oval_repository> </metadata> <criteria operator="OR"> <criteria operator="AND"> <criteria operator="OR"> <extend_definition comment="Microsoft Windows XP (x86) SP2 is installed" definition_ref="oval:org.mitre.oval:def:754"/> <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/> <extend_definition comment="Microsoft Windows Vista (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:1282"/> <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/> </criteria> <criterion comment="Opera.exe version less than 10.0" test_ref="oval:com.secpod.oval:tst:90038"/> </criteria> </criteria> </definition> <definition id="oval:org.mitre.oval:def:754" version="2" class="inventory"> <metadata> <title>Microsoft Windows XP (x86) SP2 is installed</title> <affected family="windows"> <platform>Microsoft Windows XP</platform> </affected> <reference source="CPE" ref_id="cpe:/o:microsoft:windows_xp::sp2:x86"/> <description>A version of Microsoft Windows XP (x86) Service Pack 2 is installed.</description> <oval_repository> <dates> <submitted date="2007-03-05T09:00:00"> <contributor organization="The MITRE Corporation">Andrew Buttner</contributor> </submitted> <status_change date="2007-03-05T09:00:00">DRAFT</status_change> <status_change date="2007-03-21T16:17:26.869-04:00">INTERIM</status_change> <status_change date="2007-04-10T13:44:28.583-04:00">ACCEPTED</status_change> <modified comment="Changed the CPE reference" date="2008-04-04T11:17:00.434-04:00"> <contributor organization="The MITRE Corporation">Andrew Buttner</contributor> </modified> <status_change date="2008-04-04T11:29:22.458-04:00">INTERIM</status_change> <status_change date="2008-04-21T04:00:24.359-04:00">ACCEPTED</status_change> </dates> <status>ACCEPTED</status> </oval_repository> </metadata> <criteria operator="AND"> <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/> <criterion comment="a version of Microsoft Windows XP is installed" test_ref="oval:org.mitre.oval:tst:3"/> <criterion comment="a version of Windows for the x86 architecture is installed" test_ref="oval:org.mitre.oval:tst:3823"/> <criterion comment="Win2K/XP/2003 service pack 2 is installed" test_ref="oval:org.mitre.oval:tst:3019"/> </criteria> </definition> <definition id="oval:org.mitre.oval:def:5631" version="1" class="inventory"> <metadata> <title>Microsoft Windows XP (x86) SP3 is installed</title> <affected family="windows"> <platform>Microsoft Windows XP</platform> </affected> <reference source="CPE" ref_id="cpe:/o:microsoft:windows_xp::sp3:x86"/> <description>A version of Microsoft Windows XP (x86) Service Pack 3 is installed.</description> <oval_repository> <dates> <submitted date="2008-06-10T14:50:00"> <contributor organization="Secure Elements, Inc.">Sudhir Gandhe</contributor> </submitted> <status_change date="2008-06-12T13:58:47.155-04:00">DRAFT</status_change> <status_change date="2008-06-30T04:00:18.370-04:00">INTERIM</status_change> <status_change date="2008-07-21T04:00:18.901-04:00">ACCEPTED</status_change> </dates> <status>ACCEPTED</status> </oval_repository> </metadata> <criteria operator="AND"> <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/> <criterion comment="a version of Microsoft Windows XP is installed" test_ref="oval:org.mitre.oval:tst:3"/> <criterion comment="a version of Windows for the x86 architecture is installed" test_ref="oval:org.mitre.oval:tst:3823"/> <criterion comment="Win2K/XP/2003 service pack 3 is installed" test_ref="oval:org.mitre.oval:tst:7814"/> </criteria> </definition> <definition id="oval:org.mitre.oval:def:4873" version="1" class="inventory"> <metadata> <title>Microsoft Windows Vista (32-bit) Service Pack 1 is installed</title> <affected family="windows"> <platform>Microsoft Windows Vista</platform> </affected> <reference source="CPE" ref_id="cpe:/o:microsoft:windows_vista::sp1:x86"/> <description>The operating system installed on the system is Microsoft Windows Vista (32-bit) Service Pack 1</description> <oval_repository> <dates> <submitted date="2008-03-26T10:44:02"> <contributor organization="Secure Elements, Inc.">Sudhir Gandhe</contributor> </submitted> <status_change date="2008-03-26T16:27:29.495-04:00">DRAFT</status_change> <modified comment="Changed the CPE reference" date="2008-04-04T11:17:00.108-04:00"> <contributor organization="The MITRE Corporation">Andrew Buttner</contributor> </modified> <status_change date="2008-04-21T04:00:20.428-04:00">INTERIM</status_change> <status_change date="2008-05-12T04:00:14.497-04:00">ACCEPTED</status_change> </dates> <status>ACCEPTED</status> </oval_repository> </metadata> <criteria> <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/> <criterion comment="Windows Vista is installed" test_ref="oval:org.mitre.oval:tst:7914"/> <criterion negate="true" comment="a version of Windows for the x64 architecture is installed" test_ref="oval:org.mitre.oval:tst:3653"/> <criterion comment="Win2K/XP/2003/Vista service pack 1 is installed" test_ref="oval:org.mitre.oval:tst:2843"/> </criteria> </definition> <definition id="oval:org.mitre.oval:def:1282" version="2" class="inventory"> <metadata> <title>Microsoft Windows Vista (32-bit) is installed</title> <affected family="windows"> <platform>Microsoft Windows Vista</platform> </affected> <reference source="CPE" ref_id="cpe:/o:microsoft:windows_vista:::x86"/> <description>The operating system installed on the system is Microsoft Windows Vista (32-bit)</description> <oval_repository> <dates> <submitted date="2007-04-11T11:27:37.975-04:00"> <contributor organization="The MITRE Corporation">Jonathan Baker</contributor> </submitted> <status_change date="2007-04-11T12:15:00.000-04:00">DRAFT</status_change> <status_change date="2007-04-30T08:18:46.566-04:00">INTERIM</status_change> <status_change date="2007-05-23T15:05:26.800-04:00">ACCEPTED</status_change> <modified comment="Vista test updated because of the conflictions with Server 2008" date="2008-03-26T10:51:02.210-04:00"> <contributor organization="Secure Elements, Inc.">Sudhir Gandhe</contributor> </modified> <status_change date="2008-03-31T04:00:20.410-04:00">INTERIM</status_change> <modified comment="Changed the CPE reference" date="2008-04-04T11:17:00.749-04:00"> <contributor organization="The MITRE Corporation">Andrew Buttner</contributor> </modified> <status_change date="2008-04-21T04:00:11.683-04:00">ACCEPTED</status_change> </dates> <status>ACCEPTED</status> </oval_repository> </metadata> <criteria> <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/> <criterion comment="Windows Vista is installed" test_ref="oval:org.mitre.oval:tst:7914"/> <criterion negate="true" comment="a version of Windows for the x64 architecture is installed" test_ref="oval:org.mitre.oval:tst:3653"/> </criteria> </definition> </definitions> <tests> <registry_test id="oval:org.mitre.oval:tst:3019" version="1" comment="Win2K/XP/2003 service pack 2 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <object object_ref="oval:org.mitre.oval:obj:717"/> <state state_ref="oval:org.mitre.oval:ste:2827"/> </registry_test> <registry_test id="oval:org.mitre.oval:tst:7814" version="1" comment="Win2K/XP/2003 service pack 3 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <object object_ref="oval:org.mitre.oval:obj:717"/> <state state_ref="oval:org.mitre.oval:ste:3794"/> </registry_test> <registry_test id="oval:org.mitre.oval:tst:3823" version="1" comment="a version of Windows for the x86 architecture is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <object object_ref="oval:org.mitre.oval:obj:1576"/> <state state_ref="oval:org.mitre.oval:ste:3649"/> </registry_test> <registry_test id="oval:org.mitre.oval:tst:3" version="1" comment="a version of Microsoft Windows XP is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <object object_ref="oval:org.mitre.oval:obj:123"/> <state state_ref="oval:org.mitre.oval:ste:3"/> </registry_test> <registry_test id="oval:org.mitre.oval:tst:2843" version="1" comment="Win2K/XP/2003/Vista service pack 1 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <object object_ref="oval:org.mitre.oval:obj:717"/> <state state_ref="oval:org.mitre.oval:ste:2662"/> </registry_test> <family_test id="oval:org.mitre.oval:tst:99" version="1" comment="the installed operating system is part of the Microsoft Windows family" check_existence="at_least_one_exists" check="only one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent"> <object object_ref="oval:org.mitre.oval:obj:99"/> <state state_ref="oval:org.mitre.oval:ste:99"/> </family_test> <registry_test id="oval:org.mitre.oval:tst:7914" version="1" comment="Windows Vista is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <object object_ref="oval:org.mitre.oval:obj:5590"/> <state state_ref="oval:org.mitre.oval:ste:3828"/> </registry_test> <registry_test id="oval:org.mitre.oval:tst:3653" version="2" comment="a version of Windows for the x64 architecture is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <object object_ref="oval:org.mitre.oval:obj:1576"/> <state state_ref="oval:org.mitre.oval:ste:3180"/> </registry_test> <file_test id="oval:com.secpod.oval:tst:90038" version="1" comment="Opera.exe version less than 10.0" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <object object_ref="oval:org.mitre.oval:obj:6638"/> <state state_ref="oval:com.secpod.oval:ste:90038"/> </file_test> </tests> <objects> <registry_object id="oval:org.mitre.oval:obj:123" version="1" comment="Registry key that hold the current windows os version" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <hive>HKEY_LOCAL_MACHINE</hive> <key>SOFTWARE\Microsoft\Windows NT\CurrentVersion</key> <name>CurrentVersion</name> </registry_object> <registry_object id="oval:org.mitre.oval:obj:717" version="1" comment="This registry key holds the service pack installed on the host if one is present." xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <hive>HKEY_LOCAL_MACHINE</hive> <key>SOFTWARE\Microsoft\Windows NT\CurrentVersion</key> <name>CSDVersion</name> </registry_object> <family_object id="oval:org.mitre.oval:obj:99" version="1" comment="This is the default family object. Only one family object should exist." xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent"/> <registry_object id="oval:org.mitre.oval:obj:5590" version="1" comment="This registry key ProductName" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <hive>HKEY_LOCAL_MACHINE</hive> <key>SOFTWARE\Microsoft\Windows NT\CurrentVersion</key> <name>ProductName</name> </registry_object> <registry_object id="oval:org.mitre.oval:obj:1576" version="1" comment="This registry key identifies the architecture on the system" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <hive>HKEY_LOCAL_MACHINE</hive> <key>SYSTEM\CurrentControlSet\Control\Session Manager\Environment</key> <name>PROCESSOR_ARCHITECTURE</name> </registry_object> <file_object id="oval:org.mitre.oval:obj:6638" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <path var_ref="oval:org.mitre.oval:var:938"/> <filename>opera.exe</filename> </file_object> <registry_object id="oval:org.mitre.oval:obj:309" version="1" comment="The registry key that holds the location of the program files directory." xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <hive>HKEY_LOCAL_MACHINE</hive> <key>SOFTWARE\Microsoft\Windows\CurrentVersion</key> <name>ProgramFilesDir</name> </registry_object> </objects> <states> <registry_state id="oval:org.mitre.oval:ste:2827" version="1" comment="The registry key has a value of Service Pack 2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <value>Service Pack 2</value> </registry_state> <registry_state id="oval:org.mitre.oval:ste:3794" version="1" comment="The registry key has a value of Service Pack 3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <value>Service Pack 3</value> </registry_state> <registry_state id="oval:org.mitre.oval:ste:3649" version="1" comment="x86 architecture" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <value>x86</value> </registry_state> <registry_state id="oval:org.mitre.oval:ste:3" version="1" comment="The registry key has a value of 5.1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <value>5.1</value> </registry_state> <registry_state id="oval:org.mitre.oval:ste:2662" version="1" comment="The registry key has a value of Service Pack 1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <value>Service Pack 1</value> </registry_state> <family_state id="oval:org.mitre.oval:ste:99" version="1" comment="Microsoft Windows family" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent"> <family>windows</family> </family_state> <registry_state id="oval:org.mitre.oval:ste:3828" version="1" comment="The registry key matches with Vista" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <value operation="pattern match">.*[Vv]ista.*</value> </registry_state> <registry_state id="oval:org.mitre.oval:ste:3180" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <value>amd64</value> </registry_state> <file_state id="oval:com.secpod.oval:ste:90038" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <version datatype="version" operation="less than">10.0</version> </file_state> </states> <variables> <local_variable id="oval:org.mitre.oval:var:938" version="1" comment="Opera directory" datatype="string"> <concat> <object_component item_field="value" object_ref="oval:org.mitre.oval:obj:309"/> <literal_component>\opera</literal_component> </concat> </local_variable> </variables> </oval_definitions> <?xml version="1.0" encoding="UTF-8"?> <oval_definitions xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows windows-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#independent independent-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5 oval-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-common-5 oval-common-schema.xsd" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:oval="http://oval.mitre.org/XMLSchema/oval-common-5" xmlns:oval-def="http://oval.mitre.org/XMLSchema/oval-definitions-5"> <generator> <oval:product_name>The OVAL Repository</oval:product_name> <oval:schema_version>5.6</oval:schema_version> <oval:timestamp>2009-09-24T01:41:17.430-04:00</oval:timestamp> </generator> <definitions> <definition id="oval:com.secpod.oval:def:90101" version="0" class="vulnerability"> <metadata> <title>Pidgin before 2.6.2 allow denial of service via TOPIC message</title> <affected family="windows"> <platform>Microsoft Windows 2K</platform> <platform>Microsoft Windows XP</platform> <platform>Microsoft Windows 2003</platform> <platform>Microsoft Windows Vista</platform> <product>Pidgin Messanger</product> </affected> <reference source="CVE" ref_id="CVE-2009-2703" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2703"/> <description>ibpurple/protocols/irc/msgs.c in the IRC protocol plugin in libpurple in Pidgin before 2.6.2 allows remote IRC servers to cause a denial of service (NULL pointer dereference and application crash) via a TOPIC message that lacks a topic string.</description> <oval_repository> <dates> <submitted date="2009-09-24T01:41:17"> <contributor organization="SecPod Technologies">Chandan S</contributor> </submitted> </dates> <status>INITIAL SUBMISSION</status> </oval_repository> </metadata> <criteria operator="OR"> <criteria operator="AND"> <criteria operator="OR"> <extend_definition comment="Microsoft Windows 2000 (x86) is installed" definition_ref="oval:org.mitre.oval:def:85"/> <extend_definition comment="Microsoft Windows XP (x86) SP2 is installed" definition_ref="oval:org.mitre.oval:def:754"/> <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/> <extend_definition comment="Microsoft Windows Vista (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:1282"/> <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/> <extend_definition comment="Microsoft Windows Server 2003 SP1 (x86) is installed" definition_ref="oval:org.mitre.oval:def:565"/> <extend_definition comment="Microsoft Windows Server 2003 SP2 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1935"/> </criteria> <criterion comment="Pidgin version less than 2.6.2" test_ref="oval:com.secpod.oval:tst:90039"/> </criteria> </criteria> </definition> <definition id="oval:com.secpod.oval:def:90102" version="0" class="vulnerability"> <metadata> <title>Pidgin before 2.6.2 allow denial of service via SLP invite message</title> <affected family="windows"> <platform>Microsoft Windows 2K</platform> <platform>Microsoft Windows XP</platform> <platform>Microsoft Windows 2003</platform> <platform>Microsoft Windows Vista</platform> <product>Pidgin Messanger</product> </affected> <reference source="CVE" ref_id="CVE-2009-3083" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3083"/> <description>The msn_slp_sip_recv function in libpurple/protocols/msn/slp.c in the MSN protocol plugin in libpurple in Pidgin before 2.6.2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an SLP invite message that lacks certain required fields, as demonstrated by a malformed message from a KMess client.</description> <oval_repository> <dates> <submitted date="2009-09-24T01:41:17"> <contributor organization="SecPod Technologies">Chandan S</contributor> </submitted> </dates> <status>INITIAL SUBMISSION</status> </oval_repository> </metadata> <criteria operator="OR"> <criteria operator="AND"> <criteria operator="OR"> <extend_definition comment="Microsoft Windows 2000 (x86) is installed" definition_ref="oval:org.mitre.oval:def:85"/> <extend_definition comment="Microsoft Windows XP (x86) SP2 is installed" definition_ref="oval:org.mitre.oval:def:754"/> <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/> <extend_definition comment="Microsoft Windows Vista (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:1282"/> <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/> <extend_definition comment="Microsoft Windows Server 2003 SP1 (x86) is installed" definition_ref="oval:org.mitre.oval:def:565"/> <extend_definition comment="Microsoft Windows Server 2003 SP2 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1935"/> </criteria> <criterion comment="Pidgin version less than 2.6.2" test_ref="oval:com.secpod.oval:tst:90039"/> </criteria> </criteria> </definition> <definition id="oval:com.secpod.oval:def:90103" version="0" class="vulnerability"> <metadata> <title>Pidgin before 2.6.2 allow denial of service via handwritten (aka Ink) message</title> <affected family="windows"> <platform>Microsoft Windows 2K</platform> <platform>Microsoft Windows XP</platform> <platform>Microsoft Windows 2003</platform> <platform>Microsoft Windows Vista</platform> <product>Pidgin Messanger</product> </affected> <reference source="CVE" ref_id="CVE-2009-3084" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3084"/> <description>The msn_slp_process_msg function in libpurple/protocols/msn/slpcall.c in the MSN protocol plugin in libpurple 2.6.0 and 2.6.1, as used in Pidgin before 2.6.2, allows remote attackers to cause a denial of service (application crash) via a handwritten (aka Ink) message, related to an uninitialized variable and the incorrect "UTF16-LE" charset name.</description> <oval_repository> <dates> <submitted date="2009-09-24T01:41:17"> <contributor organization="SecPod Technologies">Chandan S</contributor> </submitted> </dates> <status>INITIAL SUBMISSION</status> </oval_repository> </metadata> <criteria operator="OR"> <criteria operator="AND"> <criteria operator="OR"> <extend_definition comment="Microsoft Windows 2000 (x86) is installed" definition_ref="oval:org.mitre.oval:def:85"/> <extend_definition comment="Microsoft Windows XP (x86) SP2 is installed" definition_ref="oval:org.mitre.oval:def:754"/> <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/> <extend_definition comment="Microsoft Windows Vista (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:1282"/> <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/> <extend_definition comment="Microsoft Windows Server 2003 SP1 (x86) is installed" definition_ref="oval:org.mitre.oval:def:565"/> <extend_definition comment="Microsoft Windows Server 2003 SP2 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1935"/> </criteria> <criterion comment="Pidgin version less than 2.6.2" test_ref="oval:com.secpod.oval:tst:90039"/> </criteria> </criteria> </definition> <definition id="oval:com.secpod.oval:def:90104" version="0" class="vulnerability"> <metadata> <title>Pidgin before 2.6.2 allow denial of service via XHTML-IM content</title> <affected family="windows"> <platform>Microsoft Windows 2K</platform> <platform>Microsoft Windows XP</platform> <platform>Microsoft Windows 2003</platform> <platform>Microsoft Windows Vista</platform> <product>Pidgin Messanger</product> </affected> <reference source="CVE" ref_id="CVE-2009-3085" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3085"/> <description>The XMPP protocol plugin in libpurple in Pidgin before 2.6.2 does not properly handle an error IQ stanza during an attempted fetch of a custom smiley, which allows remote attackers to cause a denial of service (application crash) via XHTML-IM content with cid: images.</description> <oval_repository> <dates> <submitted date="2009-09-24T01:41:17"> <contributor organization="SecPod Technologies">Chandan S</contributor> </submitted> </dates> <status>INITIAL SUBMISSION</status> </oval_repository> </metadata> <criteria operator="OR"> <criteria operator="AND"> <criteria operator="OR"> <extend_definition comment="Microsoft Windows 2000 (x86) is installed" definition_ref="oval:org.mitre.oval:def:85"/> <extend_definition comment="Microsoft Windows XP (x86) SP2 is installed" definition_ref="oval:org.mitre.oval:def:754"/> <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/> <extend_definition comment="Microsoft Windows Vista (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:1282"/> <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/> <extend_definition comment="Microsoft Windows Server 2003 SP1 (x86) is installed" definition_ref="oval:org.mitre.oval:def:565"/> <extend_definition comment="Microsoft Windows Server 2003 SP2 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1935"/> </criteria> <criterion comment="Pidgin version less than 2.6.2" test_ref="oval:com.secpod.oval:tst:90039"/> </criteria> </criteria> </definition> <definition id="oval:org.mitre.oval:def:85" version="3" class="inventory"> <metadata> <title>Microsoft Windows 2000 is installed</title> <affected family="windows"> <platform>Microsoft Windows 2000</platform> </affected> <reference source="CPE" ref_id="cpe:/o:microsoft:windows_2000"/> <description>The operating system installed on the system is Microsoft Windows 2000.</description> <oval_repository> <dates> <submitted date="2006-06-26T12:55:00.000-04:00"> <contributor organization="The MITRE Corporation">Andrew Buttner</contributor> </submitted> <status_change date="2006-06-26T12:55:00.000-04:00">ACCEPTED</status_change> <modified comment="Added CPE reference." date="2007-04-30T07:48:00.142-04:00"> <contributor organization="The MITRE Corporation">Jonathan Baker</contributor> </modified> <status_change date="2007-04-30T08:03:27.160-04:00">INTERIM</status_change> <status_change date="2007-05-23T15:05:53.257-04:00">ACCEPTED</status_change> <modified comment="Changed the CPE reference" date="2008-04-04T11:17:00.718-04:00"> <contributor organization="The MITRE Corporation">Andrew Buttner</contributor> </modified> <status_change date="2008-04-04T11:29:31.741-04:00">INTERIM</status_change> <status_change date="2008-04-21T04:00:24.735-04:00">ACCEPTED</status_change> </dates> <status>ACCEPTED</status> </oval_repository> </metadata> <criteria operator="AND"> <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/> <criterion comment="Windows 2000 is installed" test_ref="oval:org.mitre.oval:tst:2"/> </criteria> </definition> <definition id="oval:org.mitre.oval:def:754" version="2" class="inventory"> <metadata> <title>Microsoft Windows XP (x86) SP2 is installed</title> <affected family="windows"> <platform>Microsoft Windows XP</platform> </affected> <reference source="CPE" ref_id="cpe:/o:microsoft:windows_xp::sp2:x86"/> <description>A version of Microsoft Windows XP (x86) Service Pack 2 is installed.</description> <oval_repository> <dates> <submitted date="2007-03-05T09:00:00"> <contributor organization="The MITRE Corporation">Andrew Buttner</contributor> </submitted> <status_change date="2007-03-05T09:00:00">DRAFT</status_change> <status_change date="2007-03-21T16:17:26.869-04:00">INTERIM</status_change> <status_change date="2007-04-10T13:44:28.583-04:00">ACCEPTED</status_change> <modified comment="Changed the CPE reference" date="2008-04-04T11:17:00.434-04:00"> <contributor organization="The MITRE Corporation">Andrew Buttner</contributor> </modified> <status_change date="2008-04-04T11:29:22.458-04:00">INTERIM</status_change> <status_change date="2008-04-21T04:00:24.359-04:00">ACCEPTED</status_change> </dates> <status>ACCEPTED</status> </oval_repository> </metadata> <criteria operator="AND"> <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/> <criterion comment="a version of Microsoft Windows XP is installed" test_ref="oval:org.mitre.oval:tst:3"/> <criterion comment="a version of Windows for the x86 architecture is installed" test_ref="oval:org.mitre.oval:tst:3823"/> <criterion comment="Win2K/XP/2003 service pack 2 is installed" test_ref="oval:org.mitre.oval:tst:3019"/> </criteria> </definition> <definition id="oval:org.mitre.oval:def:5631" version="1" class="inventory"> <metadata> <title>Microsoft Windows XP (x86) SP3 is installed</title> <affected family="windows"> <platform>Microsoft Windows XP</platform> </affected> <reference source="CPE" ref_id="cpe:/o:microsoft:windows_xp::sp3:x86"/> <description>A version of Microsoft Windows XP (x86) Service Pack 3 is installed.</description> <oval_repository> <dates> <submitted date="2008-06-10T14:50:00"> <contributor organization="Secure Elements, Inc.">Sudhir Gandhe</contributor> </submitted> <status_change date="2008-06-12T13:58:47.155-04:00">DRAFT</status_change> <status_change date="2008-06-30T04:00:18.370-04:00">INTERIM</status_change> <status_change date="2008-07-21T04:00:18.901-04:00">ACCEPTED</status_change> </dates> <status>ACCEPTED</status> </oval_repository> </metadata> <criteria operator="AND"> <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/> <criterion comment="a version of Microsoft Windows XP is installed" test_ref="oval:org.mitre.oval:tst:3"/> <criterion comment="a version of Windows for the x86 architecture is installed" test_ref="oval:org.mitre.oval:tst:3823"/> <criterion comment="Win2K/XP/2003 service pack 3 is installed" test_ref="oval:org.mitre.oval:tst:7814"/> </criteria> </definition> <definition id="oval:org.mitre.oval:def:565" version="2" class="inventory"> <metadata> <title>Microsoft Windows Server 2003 SP1 (x86) is installed</title> <affected family="windows"> <platform>Microsoft Windows Server 2003</platform> </affected> <reference source="CPE" ref_id="cpe:/o:microsoft:windows_2003::sp1:x86"/> <description>A version of Microsoft Windows Server 2003 Service Pack 1 (x86) is installed.</description> <oval_repository> <dates> <submitted date="2006-07-25T12:05:33"> <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor> </submitted> <status_change date="2006-07-27T20:15:00.000-04:00">DRAFT</status_change> <status_change date="2006-09-27T12:29:31.197-04:00">INTERIM</status_change> <status_change date="2006-10-16T15:58:44.696-04:00">ACCEPTED</status_change> <modified comment="Changed the CPE reference" date="2008-04-04T11:17:00.371-04:00"> <contributor organization="The MITRE Corporation">Andrew Buttner</contributor> </modified> <status_change date="2008-04-04T11:28:41.395-04:00">INTERIM</status_change> <status_change date="2008-04-21T04:00:23.334-04:00">ACCEPTED</status_change> </dates> <status>ACCEPTED</status> </oval_repository> </metadata> <criteria operator="AND"> <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/> <criterion comment="a version of Microsoft Windows Server 2003 is installed" test_ref="oval:org.mitre.oval:tst:4"/> <criterion comment="a version of Windows for the x86 architecture is installed" test_ref="oval:org.mitre.oval:tst:3823"/> <criterion comment="Win2K/XP/2003/Vista service pack 1 is installed" test_ref="oval:org.mitre.oval:tst:2843"/> </criteria> </definition> <definition id="oval:org.mitre.oval:def:1935" version="2" class="inventory"> <metadata> <title>Microsoft Windows Server 2003 SP2 (x86) is installed</title> <affected family="windows"> <platform>Microsoft Windows Server 2003</platform> </affected> <reference source="CPE" ref_id="cpe:/o:microsoft:windows_2003::sp2:x86"/> <description>A version of Microsoft Windows Server 2003 Service Pack 2 (x86) is installed.</description> <oval_repository> <dates> <submitted date="2007-04-09T09:49:32"> <contributor organization="Secure Elements, Inc.">Sudhir Gandhe</contributor> </submitted> <status_change date="2007-04-09T11:20:00.000-05:00">DRAFT</status_change> <status_change date="2007-04-25T19:52:21.584-04:00">INTERIM</status_change> <modified comment="Dropped tst:4078 in favor of existing tst:3019." date="2007-04-26T13:47:00.955-04:00"> <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor> </modified> <status_change date="2007-05-23T15:05:34.661-04:00">ACCEPTED</status_change> <modified comment="Changed the CPE reference" date="2008-04-04T11:17:00.742-04:00"> <contributor organization="The MITRE Corporation">Andrew Buttner</contributor> </modified> <status_change date="2008-04-04T11:25:17.766-04:00">INTERIM</status_change> <status_change date="2008-04-21T04:00:15.390-04:00">ACCEPTED</status_change> </dates> <status>ACCEPTED</status> </oval_repository> </metadata> <criteria operator="AND"> <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/> <criterion comment="a version of Microsoft Windows Server 2003 is installed" test_ref="oval:org.mitre.oval:tst:4"/> <criterion comment="a version of Windows for the x86 architecture is installed" test_ref="oval:org.mitre.oval:tst:3823"/> <criterion comment="Win2K/XP/2003 service pack 2 is installed" test_ref="oval:org.mitre.oval:tst:3019"/> </criteria> </definition> <definition id="oval:org.mitre.oval:def:4873" version="1" class="inventory"> <metadata> <title>Microsoft Windows Vista (32-bit) Service Pack 1 is installed</title> <affected family="windows"> <platform>Microsoft Windows Vista</platform> </affected> <reference source="CPE" ref_id="cpe:/o:microsoft:windows_vista::sp1:x86"/> <description>The operating system installed on the system is Microsoft Windows Vista (32-bit) Service Pack 1</description> <oval_repository> <dates> <submitted date="2008-03-26T10:44:02"> <contributor organization="Secure Elements, Inc.">Sudhir Gandhe</contributor> </submitted> <status_change date="2008-03-26T16:27:29.495-04:00">DRAFT</status_change> <modified comment="Changed the CPE reference" date="2008-04-04T11:17:00.108-04:00"> <contributor organization="The MITRE Corporation">Andrew Buttner</contributor> </modified> <status_change date="2008-04-21T04:00:20.428-04:00">INTERIM</status_change> <status_change date="2008-05-12T04:00:14.497-04:00">ACCEPTED</status_change> </dates> <status>ACCEPTED</status> </oval_repository> </metadata> <criteria> <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/> <criterion comment="Windows Vista is installed" test_ref="oval:org.mitre.oval:tst:7914"/> <criterion negate="true" comment="a version of Windows for the x64 architecture is installed" test_ref="oval:org.mitre.oval:tst:3653"/> <criterion comment="Win2K/XP/2003/Vista service pack 1 is installed" test_ref="oval:org.mitre.oval:tst:2843"/> </criteria> </definition> <definition id="oval:org.mitre.oval:def:1282" version="2" class="inventory"> <metadata> <title>Microsoft Windows Vista (32-bit) is installed</title> <affected family="windows"> <platform>Microsoft Windows Vista</platform> </affected> <reference source="CPE" ref_id="cpe:/o:microsoft:windows_vista:::x86"/> <description>The operating system installed on the system is Microsoft Windows Vista (32-bit)</description> <oval_repository> <dates> <submitted date="2007-04-11T11:27:37.975-04:00"> <contributor organization="The MITRE Corporation">Jonathan Baker</contributor> </submitted> <status_change date="2007-04-11T12:15:00.000-04:00">DRAFT</status_change> <status_change date="2007-04-30T08:18:46.566-04:00">INTERIM</status_change> <status_change date="2007-05-23T15:05:26.800-04:00">ACCEPTED</status_change> <modified comment="Vista test updated because of the conflictions with Server 2008" date="2008-03-26T10:51:02.210-04:00"> <contributor organization="Secure Elements, Inc.">Sudhir Gandhe</contributor> </modified> <status_change date="2008-03-31T04:00:20.410-04:00">INTERIM</status_change> <modified comment="Changed the CPE reference" date="2008-04-04T11:17:00.749-04:00"> <contributor organization="The MITRE Corporation">Andrew Buttner</contributor> </modified> <status_change date="2008-04-21T04:00:11.683-04:00">ACCEPTED</status_change> </dates> <status>ACCEPTED</status> </oval_repository> </metadata> <criteria> <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/> <criterion comment="Windows Vista is installed" test_ref="oval:org.mitre.oval:tst:7914"/> <criterion negate="true" comment="a version of Windows for the x64 architecture is installed" test_ref="oval:org.mitre.oval:tst:3653"/> </criteria> </definition> </definitions> <tests> <registry_test id="oval:org.mitre.oval:tst:2" version="1" comment="Windows 2000 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <object object_ref="oval:org.mitre.oval:obj:123"/> <state state_ref="oval:org.mitre.oval:ste:2"/> </registry_test> <registry_test id="oval:org.mitre.oval:tst:3019" version="1" comment="Win2K/XP/2003 service pack 2 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <object object_ref="oval:org.mitre.oval:obj:717"/> <state state_ref="oval:org.mitre.oval:ste:2827"/> </registry_test> <registry_test id="oval:org.mitre.oval:tst:7814" version="1" comment="Win2K/XP/2003 service pack 3 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <object object_ref="oval:org.mitre.oval:obj:717"/> <state state_ref="oval:org.mitre.oval:ste:3794"/> </registry_test> <registry_test id="oval:org.mitre.oval:tst:3823" version="1" comment="a version of Windows for the x86 architecture is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <object object_ref="oval:org.mitre.oval:obj:1576"/> <state state_ref="oval:org.mitre.oval:ste:3649"/> </registry_test> <registry_test id="oval:org.mitre.oval:tst:3" version="1" comment="a version of Microsoft Windows XP is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <object object_ref="oval:org.mitre.oval:obj:123"/> <state state_ref="oval:org.mitre.oval:ste:3"/> </registry_test> <registry_test id="oval:org.mitre.oval:tst:4" version="1" comment="a version of Microsoft Windows Server 2003 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <object object_ref="oval:org.mitre.oval:obj:123"/> <state state_ref="oval:org.mitre.oval:ste:4"/> </registry_test> <registry_test id="oval:org.mitre.oval:tst:2843" version="1" comment="Win2K/XP/2003/Vista service pack 1 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <object object_ref="oval:org.mitre.oval:obj:717"/> <state state_ref="oval:org.mitre.oval:ste:2662"/> </registry_test> <family_test id="oval:org.mitre.oval:tst:99" version="1" comment="the installed operating system is part of the Microsoft Windows family" check_existence="at_least_one_exists" check="only one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent"> <object object_ref="oval:org.mitre.oval:obj:99"/> <state state_ref="oval:org.mitre.oval:ste:99"/> </family_test> <registry_test id="oval:org.mitre.oval:tst:7914" version="1" comment="Windows Vista is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <object object_ref="oval:org.mitre.oval:obj:5590"/> <state state_ref="oval:org.mitre.oval:ste:3828"/> </registry_test> <registry_test id="oval:org.mitre.oval:tst:3653" version="2" comment="a version of Windows for the x64 architecture is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <object object_ref="oval:org.mitre.oval:obj:1576"/> <state state_ref="oval:org.mitre.oval:ste:3180"/> </registry_test> <registry_test id="oval:com.secpod.oval:tst:90039" version="1" comment="Pidgin version is less than 2.6.2" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <object object_ref="oval:com.secpod.oval:obj:90039"/> <state state_ref="oval:com.secpod.oval:ste:90039"/> </registry_test> </tests> <objects> <registry_object id="oval:org.mitre.oval:obj:123" version="1" comment="Registry key that hold the current windows os version" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <hive>HKEY_LOCAL_MACHINE</hive> <key>SOFTWARE\Microsoft\Windows NT\CurrentVersion</key> <name>CurrentVersion</name> </registry_object> <registry_object id="oval:org.mitre.oval:obj:717" version="1" comment="This registry key holds the service pack installed on the host if one is present." xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <hive>HKEY_LOCAL_MACHINE</hive> <key>SOFTWARE\Microsoft\Windows NT\CurrentVersion</key> <name>CSDVersion</name> </registry_object> <family_object id="oval:org.mitre.oval:obj:99" version="1" comment="This is the default family object. Only one family object should exist." xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent"/> <registry_object id="oval:org.mitre.oval:obj:5590" version="1" comment="This registry key ProductName" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <hive>HKEY_LOCAL_MACHINE</hive> <key>SOFTWARE\Microsoft\Windows NT\CurrentVersion</key> <name>ProductName</name> </registry_object> <registry_object id="oval:org.mitre.oval:obj:1576" version="1" comment="This registry key identifies the architecture on the system" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <hive>HKEY_LOCAL_MACHINE</hive> <key>SYSTEM\CurrentControlSet\Control\Session Manager\Environment</key> <name>PROCESSOR_ARCHITECTURE</name> </registry_object> <registry_object id="oval:com.secpod.oval:obj:90039" version="1" comment="The registry key that holds the version of the Pidgin" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <hive>HKEY_LOCAL_MACHINE</hive> <key>SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Pidgin</key> <name>DisplayVersion</name> </registry_object> </objects> <states> <registry_state id="oval:org.mitre.oval:ste:2662" version="1" comment="The registry key has a value of Service Pack 1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <value>Service Pack 1</value> </registry_state> <registry_state id="oval:org.mitre.oval:ste:2827" version="1" comment="The registry key has a value of Service Pack 2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <value>Service Pack 2</value> </registry_state> <registry_state id="oval:org.mitre.oval:ste:3794" version="1" comment="The registry key has a value of Service Pack 3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <value>Service Pack 3</value> </registry_state> <registry_state id="oval:org.mitre.oval:ste:3649" version="1" comment="x86 architecture" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <value>x86</value> </registry_state> <registry_state id="oval:org.mitre.oval:ste:2" version="1" comment="Registry key has a value of 5.0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <value>5.0</value> </registry_state> <registry_state id="oval:org.mitre.oval:ste:3" version="1" comment="The registry key has a value of 5.1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <value>5.1</value> </registry_state> <registry_state id="oval:org.mitre.oval:ste:4" version="1" comment="The registry key has a value of 5.2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <value>5.2</value> </registry_state> <family_state id="oval:org.mitre.oval:ste:99" version="1" comment="Microsoft Windows family" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent"> <family>windows</family> </family_state> <registry_state id="oval:org.mitre.oval:ste:3828" version="1" comment="The registry key matches with Vista" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <value operation="pattern match">.*[Vv]ista.*</value> </registry_state> <registry_state id="oval:org.mitre.oval:ste:3180" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <value>amd64</value> </registry_state> <registry_state id="oval:com.secpod.oval:ste:90039" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <value datatype="version" operation="less than">2.6.2</value> </registry_state> </states> </oval_definitions> <?xml version="1.0" encoding="UTF-8"?> <oval_definitions xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows windows-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#independent independent-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5 oval-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-common-5 oval-common-schema.xsd" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:oval="http://oval.mitre.org/XMLSchema/oval-common-5" xmlns:oval-def="http://oval.mitre.org/XMLSchema/oval-definitions-5"> <generator> <oval:product_name>The OVAL Repository</oval:product_name> <oval:schema_version>5.6</oval:schema_version> <oval:timestamp>2009-09-24T03:13:11.430-04:00</oval:timestamp> </generator> <definitions> <definition id="oval:com.secpod.oval:def:90105" version="0" class="vulnerability"> <metadata> <title>Pidgin before 2.5.9 allow denial of service via SLP (aka MSNSLP) messages</title> <affected family="windows"> <platform>Microsoft Windows 2K</platform> <platform>Microsoft Windows XP</platform> <platform>Microsoft Windows 2003</platform> <platform>Microsoft Windows Vista</platform> <product>Pidgin Messanger</product> </affected> <reference source="CVE" ref_id="CVE-2009-2694" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2694"/> <description>The msn_slplink_process_msg function in libpurple/protocols/msn/slplink.c in libpurple, as used in Pidgin (formerly Gaim) before 2.5.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) by sending multiple crafted SLP (aka MSNSLP) messages to trigger an overwrite of an arbitrary memory location.</description> <oval_repository> <dates> <submitted date="2009-09-24T03:13:11"> <contributor organization="SecPod Technologies">Chandan S</contributor> </submitted> </dates> <status>INITIAL SUBMISSION</status> </oval_repository> </metadata> <criteria operator="OR"> <criteria operator="AND"> <criteria operator="OR"> <extend_definition comment="Microsoft Windows 2000 (x86) is installed" definition_ref="oval:org.mitre.oval:def:85"/> <extend_definition comment="Microsoft Windows XP (x86) SP2 is installed" definition_ref="oval:org.mitre.oval:def:754"/> <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/> <extend_definition comment="Microsoft Windows Vista (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:1282"/> <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/> <extend_definition comment="Microsoft Windows Server 2003 SP1 (x86) is installed" definition_ref="oval:org.mitre.oval:def:565"/> <extend_definition comment="Microsoft Windows Server 2003 SP2 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1935"/> </criteria> <criterion comment="Pidgin version less than 2.5.9" test_ref="oval:com.secpod.oval:tst:90040"/> </criteria> </criteria> </definition> <definition id="oval:com.secpod.oval:def:90106" version="0" class="vulnerability"> <metadata> <title>Pidgin 2.6.0 and prior allow to cause a denial of service via Yahoo IM.</title> <affected family="windows"> <platform>Microsoft Windows 2K</platform> <platform>Microsoft Windows XP</platform> <platform>Microsoft Windows 2003</platform> <platform>Microsoft Windows Vista</platform> <product>Pidgin Messanger</product> </affected> <reference source="CVE" ref_id="CVE-2009-3025" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3025"/> <description>Unspecified vulnerability in Pidgin 2.6.0 allows remote attackers to cause a denial of service (crash) via a link in a Yahoo IM.</description> <oval_repository> <dates> <submitted date="2009-09-24T03:13:11"> <contributor organization="SecPod Technologies">Chandan S</contributor> </submitted> </dates> <status>INITIAL SUBMISSION</status> </oval_repository> </metadata> <criteria operator="OR"> <criteria operator="AND"> <criteria operator="OR"> <extend_definition comment="Microsoft Windows 2000 (x86) is installed" definition_ref="oval:org.mitre.oval:def:85"/> <extend_definition comment="Microsoft Windows XP (x86) SP2 is installed" definition_ref="oval:org.mitre.oval:def:754"/> <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/> <extend_definition comment="Microsoft Windows Vista (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:1282"/> <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/> <extend_definition comment="Microsoft Windows Server 2003 SP1 (x86) is installed" definition_ref="oval:org.mitre.oval:def:565"/> <extend_definition comment="Microsoft Windows Server 2003 SP2 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1935"/> </criteria> <criterion comment="Pidgin version less than or equal to 2.6.0" test_ref="oval:com.secpod.oval:tst:90041"/> </criteria> </criteria> </definition> <definition id="oval:com.secpod.oval:def:90107" version="0" class="vulnerability"> <metadata> <title>Pidgin 2.6.0 and prior does not follow the require TLS/SSL preference</title> <affected family="windows"> <platform>Microsoft Windows 2K</platform> <platform>Microsoft Windows XP</platform> <platform>Microsoft Windows 2003</platform> <platform>Microsoft Windows Vista</platform> <product>Pidgin Messanger</product> </affected> <reference source="CVE" ref_id="CVE-2009-3026" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3026"/> <description>protocols/jabber/auth.c in libpurple in Pidgin 2.6.0, and possibly other versions, does not follow the "require TLS/SSL" preference when connecting to older Jabber servers that do not follow the XMPP specification, which causes libpurple to connect to the server without the expected encryption and allows remote attackers to sniff sessions.</description> <oval_repository> <dates> <submitted date="2009-09-24T03:13:11"> <contributor organization="SecPod Technologies">Chandan S</contributor> </submitted> </dates> <status>INITIAL SUBMISSION</status> </oval_repository> </metadata> <criteria operator="OR"> <criteria operator="AND"> <criteria operator="OR"> <extend_definition comment="Microsoft Windows 2000 (x86) is installed" definition_ref="oval:org.mitre.oval:def:85"/> <extend_definition comment="Microsoft Windows XP (x86) SP2 is installed" definition_ref="oval:org.mitre.oval:def:754"/> <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/> <extend_definition comment="Microsoft Windows Vista (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:1282"/> <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/> <extend_definition comment="Microsoft Windows Server 2003 SP1 (x86) is installed" definition_ref="oval:org.mitre.oval:def:565"/> <extend_definition comment="Microsoft Windows Server 2003 SP2 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1935"/> </criteria> <criterion comment="Pidgin version less than or equal to 2.6.0" test_ref="oval:com.secpod.oval:tst:90041"/> </criteria> </criteria> </definition> <definition id="oval:org.mitre.oval:def:85" version="3" class="inventory"> <metadata> <title>Microsoft Windows 2000 is installed</title> <affected family="windows"> <platform>Microsoft Windows 2000</platform> </affected> <reference source="CPE" ref_id="cpe:/o:microsoft:windows_2000"/> <description>The operating system installed on the system is Microsoft Windows 2000.</description> <oval_repository> <dates> <submitted date="2006-06-26T12:55:00.000-04:00"> <contributor organization="The MITRE Corporation">Andrew Buttner</contributor> </submitted> <status_change date="2006-06-26T12:55:00.000-04:00">ACCEPTED</status_change> <modified comment="Added CPE reference." date="2007-04-30T07:48:00.142-04:00"> <contributor organization="The MITRE Corporation">Jonathan Baker</contributor> </modified> <status_change date="2007-04-30T08:03:27.160-04:00">INTERIM</status_change> <status_change date="2007-05-23T15:05:53.257-04:00">ACCEPTED</status_change> <modified comment="Changed the CPE reference" date="2008-04-04T11:17:00.718-04:00"> <contributor organization="The MITRE Corporation">Andrew Buttner</contributor> </modified> <status_change date="2008-04-04T11:29:31.741-04:00">INTERIM</status_change> <status_change date="2008-04-21T04:00:24.735-04:00">ACCEPTED</status_change> </dates> <status>ACCEPTED</status> </oval_repository> </metadata> <criteria operator="AND"> <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/> <criterion comment="Windows 2000 is installed" test_ref="oval:org.mitre.oval:tst:2"/> </criteria> </definition> <definition id="oval:org.mitre.oval:def:754" version="2" class="inventory"> <metadata> <title>Microsoft Windows XP (x86) SP2 is installed</title> <affected family="windows"> <platform>Microsoft Windows XP</platform> </affected> <reference source="CPE" ref_id="cpe:/o:microsoft:windows_xp::sp2:x86"/> <description>A version of Microsoft Windows XP (x86) Service Pack 2 is installed.</description> <oval_repository> <dates> <submitted date="2007-03-05T09:00:00"> <contributor organization="The MITRE Corporation">Andrew Buttner</contributor> </submitted> <status_change date="2007-03-05T09:00:00">DRAFT</status_change> <status_change date="2007-03-21T16:17:26.869-04:00">INTERIM</status_change> <status_change date="2007-04-10T13:44:28.583-04:00">ACCEPTED</status_change> <modified comment="Changed the CPE reference" date="2008-04-04T11:17:00.434-04:00"> <contributor organization="The MITRE Corporation">Andrew Buttner</contributor> </modified> <status_change date="2008-04-04T11:29:22.458-04:00">INTERIM</status_change> <status_change date="2008-04-21T04:00:24.359-04:00">ACCEPTED</status_change> </dates> <status>ACCEPTED</status> </oval_repository> </metadata> <criteria operator="AND"> <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/> <criterion comment="a version of Microsoft Windows XP is installed" test_ref="oval:org.mitre.oval:tst:3"/> <criterion comment="a version of Windows for the x86 architecture is installed" test_ref="oval:org.mitre.oval:tst:3823"/> <criterion comment="Win2K/XP/2003 service pack 2 is installed" test_ref="oval:org.mitre.oval:tst:3019"/> </criteria> </definition> <definition id="oval:org.mitre.oval:def:5631" version="1" class="inventory"> <metadata> <title>Microsoft Windows XP (x86) SP3 is installed</title> <affected family="windows"> <platform>Microsoft Windows XP</platform> </affected> <reference source="CPE" ref_id="cpe:/o:microsoft:windows_xp::sp3:x86"/> <description>A version of Microsoft Windows XP (x86) Service Pack 3 is installed.</description> <oval_repository> <dates> <submitted date="2008-06-10T14:50:00"> <contributor organization="Secure Elements, Inc.">Sudhir Gandhe</contributor> </submitted> <status_change date="2008-06-12T13:58:47.155-04:00">DRAFT</status_change> <status_change date="2008-06-30T04:00:18.370-04:00">INTERIM</status_change> <status_change date="2008-07-21T04:00:18.901-04:00">ACCEPTED</status_change> </dates> <status>ACCEPTED</status> </oval_repository> </metadata> <criteria operator="AND"> <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/> <criterion comment="a version of Microsoft Windows XP is installed" test_ref="oval:org.mitre.oval:tst:3"/> <criterion comment="a version of Windows for the x86 architecture is installed" test_ref="oval:org.mitre.oval:tst:3823"/> <criterion comment="Win2K/XP/2003 service pack 3 is installed" test_ref="oval:org.mitre.oval:tst:7814"/> </criteria> </definition> <definition id="oval:org.mitre.oval:def:565" version="2" class="inventory"> <metadata> <title>Microsoft Windows Server 2003 SP1 (x86) is installed</title> <affected family="windows"> <platform>Microsoft Windows Server 2003</platform> </affected> <reference source="CPE" ref_id="cpe:/o:microsoft:windows_2003::sp1:x86"/> <description>A version of Microsoft Windows Server 2003 Service Pack 1 (x86) is installed.</description> <oval_repository> <dates> <submitted date="2006-07-25T12:05:33"> <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor> </submitted> <status_change date="2006-07-27T20:15:00.000-04:00">DRAFT</status_change> <status_change date="2006-09-27T12:29:31.197-04:00">INTERIM</status_change> <status_change date="2006-10-16T15:58:44.696-04:00">ACCEPTED</status_change> <modified comment="Changed the CPE reference" date="2008-04-04T11:17:00.371-04:00"> <contributor organization="The MITRE Corporation">Andrew Buttner</contributor> </modified> <status_change date="2008-04-04T11:28:41.395-04:00">INTERIM</status_change> <status_change date="2008-04-21T04:00:23.334-04:00">ACCEPTED</status_change> </dates> <status>ACCEPTED</status> </oval_repository> </metadata> <criteria operator="AND"> <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/> <criterion comment="a version of Microsoft Windows Server 2003 is installed" test_ref="oval:org.mitre.oval:tst:4"/> <criterion comment="a version of Windows for the x86 architecture is installed" test_ref="oval:org.mitre.oval:tst:3823"/> <criterion comment="Win2K/XP/2003/Vista service pack 1 is installed" test_ref="oval:org.mitre.oval:tst:2843"/> </criteria> </definition> <definition id="oval:org.mitre.oval:def:1935" version="2" class="inventory"> <metadata> <title>Microsoft Windows Server 2003 SP2 (x86) is installed</title> <affected family="windows"> <platform>Microsoft Windows Server 2003</platform> </affected> <reference source="CPE" ref_id="cpe:/o:microsoft:windows_2003::sp2:x86"/> <description>A version of Microsoft Windows Server 2003 Service Pack 2 (x86) is installed.</description> <oval_repository> <dates> <submitted date="2007-04-09T09:49:32"> <contributor organization="Secure Elements, Inc.">Sudhir Gandhe</contributor> </submitted> <status_change date="2007-04-09T11:20:00.000-05:00">DRAFT</status_change> <status_change date="2007-04-25T19:52:21.584-04:00">INTERIM</status_change> <modified comment="Dropped tst:4078 in favor of existing tst:3019." date="2007-04-26T13:47:00.955-04:00"> <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor> </modified> <status_change date="2007-05-23T15:05:34.661-04:00">ACCEPTED</status_change> <modified comment="Changed the CPE reference" date="2008-04-04T11:17:00.742-04:00"> <contributor organization="The MITRE Corporation">Andrew Buttner</contributor> </modified> <status_change date="2008-04-04T11:25:17.766-04:00">INTERIM</status_change> <status_change date="2008-04-21T04:00:15.390-04:00">ACCEPTED</status_change> </dates> <status>ACCEPTED</status> </oval_repository> </metadata> <criteria operator="AND"> <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/> <criterion comment="a version of Microsoft Windows Server 2003 is installed" test_ref="oval:org.mitre.oval:tst:4"/> <criterion comment="a version of Windows for the x86 architecture is installed" test_ref="oval:org.mitre.oval:tst:3823"/> <criterion comment="Win2K/XP/2003 service pack 2 is installed" test_ref="oval:org.mitre.oval:tst:3019"/> </criteria> </definition> <definition id="oval:org.mitre.oval:def:4873" version="1" class="inventory"> <metadata> <title>Microsoft Windows Vista (32-bit) Service Pack 1 is installed</title> <affected family="windows"> <platform>Microsoft Windows Vista</platform> </affected> <reference source="CPE" ref_id="cpe:/o:microsoft:windows_vista::sp1:x86"/> <description>The operating system installed on the system is Microsoft Windows Vista (32-bit) Service Pack 1</description> <oval_repository> <dates> <submitted date="2008-03-26T10:44:02"> <contributor organization="Secure Elements, Inc.">Sudhir Gandhe</contributor> </submitted> <status_change date="2008-03-26T16:27:29.495-04:00">DRAFT</status_change> <modified comment="Changed the CPE reference" date="2008-04-04T11:17:00.108-04:00"> <contributor organization="The MITRE Corporation">Andrew Buttner</contributor> </modified> <status_change date="2008-04-21T04:00:20.428-04:00">INTERIM</status_change> <status_change date="2008-05-12T04:00:14.497-04:00">ACCEPTED</status_change> </dates> <status>ACCEPTED</status> </oval_repository> </metadata> <criteria> <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/> <criterion comment="Windows Vista is installed" test_ref="oval:org.mitre.oval:tst:7914"/> <criterion negate="true" comment="a version of Windows for the x64 architecture is installed" test_ref="oval:org.mitre.oval:tst:3653"/> <criterion comment="Win2K/XP/2003/Vista service pack 1 is installed" test_ref="oval:org.mitre.oval:tst:2843"/> </criteria> </definition> <definition id="oval:org.mitre.oval:def:1282" version="2" class="inventory"> <metadata> <title>Microsoft Windows Vista (32-bit) is installed</title> <affected family="windows"> <platform>Microsoft Windows Vista</platform> </affected> <reference source="CPE" ref_id="cpe:/o:microsoft:windows_vista:::x86"/> <description>The operating system installed on the system is Microsoft Windows Vista (32-bit)</description> <oval_repository> <dates> <submitted date="2007-04-11T11:27:37.975-04:00"> <contributor organization="The MITRE Corporation">Jonathan Baker</contributor> </submitted> <status_change date="2007-04-11T12:15:00.000-04:00">DRAFT</status_change> <status_change date="2007-04-30T08:18:46.566-04:00">INTERIM</status_change> <status_change date="2007-05-23T15:05:26.800-04:00">ACCEPTED</status_change> <modified comment="Vista test updated because of the conflictions with Server 2008" date="2008-03-26T10:51:02.210-04:00"> <contributor organization="Secure Elements, Inc.">Sudhir Gandhe</contributor> </modified> <status_change date="2008-03-31T04:00:20.410-04:00">INTERIM</status_change> <modified comment="Changed the CPE reference" date="2008-04-04T11:17:00.749-04:00"> <contributor organization="The MITRE Corporation">Andrew Buttner</contributor> </modified> <status_change date="2008-04-21T04:00:11.683-04:00">ACCEPTED</status_change> </dates> <status>ACCEPTED</status> </oval_repository> </metadata> <criteria> <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/> <criterion comment="Windows Vista is installed" test_ref="oval:org.mitre.oval:tst:7914"/> <criterion negate="true" comment="a version of Windows for the x64 architecture is installed" test_ref="oval:org.mitre.oval:tst:3653"/> </criteria> </definition> </definitions> <tests> <registry_test id="oval:org.mitre.oval:tst:2" version="1" comment="Windows 2000 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <object object_ref="oval:org.mitre.oval:obj:123"/> <state state_ref="oval:org.mitre.oval:ste:2"/> </registry_test> <registry_test id="oval:org.mitre.oval:tst:3019" version="1" comment="Win2K/XP/2003 service pack 2 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <object object_ref="oval:org.mitre.oval:obj:717"/> <state state_ref="oval:org.mitre.oval:ste:2827"/> </registry_test> <registry_test id="oval:org.mitre.oval:tst:7814" version="1" comment="Win2K/XP/2003 service pack 3 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <object object_ref="oval:org.mitre.oval:obj:717"/> <state state_ref="oval:org.mitre.oval:ste:3794"/> </registry_test> <registry_test id="oval:org.mitre.oval:tst:3823" version="1" comment="a version of Windows for the x86 architecture is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <object object_ref="oval:org.mitre.oval:obj:1576"/> <state state_ref="oval:org.mitre.oval:ste:3649"/> </registry_test> <registry_test id="oval:org.mitre.oval:tst:3" version="1" comment="a version of Microsoft Windows XP is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <object object_ref="oval:org.mitre.oval:obj:123"/> <state state_ref="oval:org.mitre.oval:ste:3"/> </registry_test> <registry_test id="oval:org.mitre.oval:tst:4" version="1" comment="a version of Microsoft Windows Server 2003 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <object object_ref="oval:org.mitre.oval:obj:123"/> <state state_ref="oval:org.mitre.oval:ste:4"/> </registry_test> <registry_test id="oval:org.mitre.oval:tst:2843" version="1" comment="Win2K/XP/2003/Vista service pack 1 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <object object_ref="oval:org.mitre.oval:obj:717"/> <state state_ref="oval:org.mitre.oval:ste:2662"/> </registry_test> <family_test id="oval:org.mitre.oval:tst:99" version="1" comment="the installed operating system is part of the Microsoft Windows family" check_existence="at_least_one_exists" check="only one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent"> <object object_ref="oval:org.mitre.oval:obj:99"/> <state state_ref="oval:org.mitre.oval:ste:99"/> </family_test> <registry_test id="oval:org.mitre.oval:tst:7914" version="1" comment="Windows Vista is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <object object_ref="oval:org.mitre.oval:obj:5590"/> <state state_ref="oval:org.mitre.oval:ste:3828"/> </registry_test> <registry_test id="oval:org.mitre.oval:tst:3653" version="2" comment="a version of Windows for the x64 architecture is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <object object_ref="oval:org.mitre.oval:obj:1576"/> <state state_ref="oval:org.mitre.oval:ste:3180"/> </registry_test> <registry_test id="oval:com.secpod.oval:tst:90040" version="1" comment="Pidgin version is less than 2.5.9" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <object object_ref="oval:com.secpod.oval:obj:90039"/> <state state_ref="oval:com.secpod.oval:ste:90040"/> </registry_test> <registry_test id="oval:com.secpod.oval:tst:90041" version="1" comment="Pidgin version is less than or equal to 2.6.0" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <object object_ref="oval:com.secpod.oval:obj:90039"/> <state state_ref="oval:com.secpod.oval:ste:90041"/> </registry_test> </tests> <objects> <registry_object id="oval:org.mitre.oval:obj:123" version="1" comment="Registry key that hold the current windows os version" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <hive>HKEY_LOCAL_MACHINE</hive> <key>SOFTWARE\Microsoft\Windows NT\CurrentVersion</key> <name>CurrentVersion</name> </registry_object> <registry_object id="oval:org.mitre.oval:obj:717" version="1" comment="This registry key holds the service pack installed on the host if one is present." xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <hive>HKEY_LOCAL_MACHINE</hive> <key>SOFTWARE\Microsoft\Windows NT\CurrentVersion</key> <name>CSDVersion</name> </registry_object> <family_object id="oval:org.mitre.oval:obj:99" version="1" comment="This is the default family object. Only one family object should exist." xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent"/> <registry_object id="oval:org.mitre.oval:obj:5590" version="1" comment="This registry key ProductName" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <hive>HKEY_LOCAL_MACHINE</hive> <key>SOFTWARE\Microsoft\Windows NT\CurrentVersion</key> <name>ProductName</name> </registry_object> <registry_object id="oval:org.mitre.oval:obj:1576" version="1" comment="This registry key identifies the architecture on the system" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <hive>HKEY_LOCAL_MACHINE</hive> <key>SYSTEM\CurrentControlSet\Control\Session Manager\Environment</key> <name>PROCESSOR_ARCHITECTURE</name> </registry_object> <registry_object id="oval:com.secpod.oval:obj:90039" version="1" comment="The registry key that holds the version of the Pidgin" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <hive>HKEY_LOCAL_MACHINE</hive> <key>SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Pidgin</key> <name>DisplayVersion</name> </registry_object> </objects> <states> <registry_state id="oval:org.mitre.oval:ste:2662" version="1" comment="The registry key has a value of Service Pack 1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <value>Service Pack 1</value> </registry_state> <registry_state id="oval:org.mitre.oval:ste:2827" version="1" comment="The registry key has a value of Service Pack 2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <value>Service Pack 2</value> </registry_state> <registry_state id="oval:org.mitre.oval:ste:3794" version="1" comment="The registry key has a value of Service Pack 3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <value>Service Pack 3</value> </registry_state> <registry_state id="oval:org.mitre.oval:ste:3649" version="1" comment="x86 architecture" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <value>x86</value> </registry_state> <registry_state id="oval:org.mitre.oval:ste:2" version="1" comment="Registry key has a value of 5.0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <value>5.0</value> </registry_state> <registry_state id="oval:org.mitre.oval:ste:3" version="1" comment="The registry key has a value of 5.1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <value>5.1</value> </registry_state> <registry_state id="oval:org.mitre.oval:ste:4" version="1" comment="The registry key has a value of 5.2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <value>5.2</value> </registry_state> <family_state id="oval:org.mitre.oval:ste:99" version="1" comment="Microsoft Windows family" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent"> <family>windows</family> </family_state> <registry_state id="oval:org.mitre.oval:ste:3828" version="1" comment="The registry key matches with Vista" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <value operation="pattern match">.*[Vv]ista.*</value> </registry_state> <registry_state id="oval:org.mitre.oval:ste:3180" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <value>amd64</value> </registry_state> <registry_state id="oval:com.secpod.oval:ste:90040" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <value datatype="version" operation="less than">2.5.9</value> </registry_state> <registry_state id="oval:com.secpod.oval:ste:90041" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"> <value datatype="version" operation="less than or equal">2.6.0</value> </registry_state> </states> </oval_definitions> |
||||||||||||||||
bakerj
|
Chandan,
Thank you for the new vulnerability definitions. They have now been reviewed and posted to the OVAL Repository. Please note on future submissions that the affected platform should use: <platform>Microsoft Windows Server 2003</platform> And not: <platform>Microsoft Windows 2003</platform> And use: <platform>Microsoft Windows 2000</platform> And not: <platform>Microsoft Windows 2K</platform> Also note that when using a @var_ref the Schematron rules require a @var_check also be set. I corrected both of these issues. Thanks, Jon ============================================ Jonathan O. Baker G022 - IA Industry Collaboration The MITRE Corporation Email: [hidden email] >-----Original Message----- >From: chandan [mailto:[hidden email]] >Sent: Thursday, September 24, 2009 7:19 AM >To: oval-discussion-list OVAL Discussion List/Closed Public Discussi >Subject: [OVAL-DISCUSSION-LIST] Oval's on Opera, QuickTime, Pidgin > >Vulnerability Definitions for Opera, Apple QuickTime, and Pidgin >Messanger. > >Thanks!! >Chandan >www.secpod.com > >To unsubscribe, send an email message to [hidden email] with >SIGNOFF OVAL-DISCUSSION-LIST >in the BODY of the message. If you have difficulties, write to OVAL- >[hidden email]. To unsubscribe, send an email message to [hidden email] with SIGNOFF OVAL-DISCUSSION-LIST in the BODY of the message. If you have difficulties, write to [hidden email]. |
||||||||||||||||
| Free Embeddable Forum Powered by Nabble | Help |
