updates to defs 5236 and 4287

[Jeff Ito-2]

The attached definitions have been updated to reflect Microsoft's
updating of MS07-064 and MS08-033.



Jeff Ito

To unsubscribe, send an email message to LISTSERV@... with
SIGNOFF OVAL-DISCUSSION-LIST
in the BODY of the message.  If you have difficulties, write to OVAL-DISCUSSION-LIST-request@....

<?xml version="1.0" encoding="UTF-8"?>
<oval_definitions xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows windows-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#independent independent-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5 oval-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-common-5 oval-common-schema.xsd" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:oval="http://oval.mitre.org/XMLSchema/oval-common-5" xmlns:oval-def="http://oval.mitre.org/XMLSchema/oval-definitions-5">
  <generator>
    <oval:product_name>The OVAL Repository</oval:product_name>
    <oval:schema_version>5.4</oval:schema_version>
    <oval:timestamp>2008-07-17T09:39:31.359-04:00</oval:timestamp>
  </generator>
  <definitions>
    <definition id="oval:org.mitre.oval:def:4287" version="1" class="vulnerability">
      <metadata>
        <title>Microsoft DirectX Code Execution Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Vista</platform>
          <product>DirectX</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-3895" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3895"/>
        <description>Buffer overflow in Microsoft DirectShow in Microsoft DirectX 7.0 through 10.0 allows remote attackers to execute arbitrary code via a crafted (1) WAV or (2) AVI file.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-12-13T20:49:00">
              <contributor organization="Secure Elements, Inc.">Jeff Ito</contributor>
            </submitted>
            <status_change date="2007-12-14T15:11:07.454-05:00">DRAFT</status_change>
            <status_change date="2007-12-31T04:00:36.732-05:00">INTERIM</status_change>
            <status_change date="2008-02-04T10:16:31.515-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software section">
        <criteria operator="AND" comment="DirectX 7 on Windows 2000 SP4">
          <extend_definition comment="Microsoft Windows 2000 SP4 or later is installed" definition_ref="oval:org.mitre.oval:def:229"/>
          <criterion comment="DirectX 7.0x Installed" test_ref="oval:org.mitre.oval:tst:1296"/>
          <criterion comment="the version of Quartz.dll is less than 6.1.9.733" test_ref="oval:org.mitre.oval:tst:6029"/>
        </criteria>
        <criteria operator="AND" comment="DirectX 8.1 on Windows 2000 SP4">
          <extend_definition comment="Microsoft Windows 2000 SP4 or later is installed" definition_ref="oval:org.mitre.oval:def:229"/>
          <criterion comment="DirectX 8.1 Installed" test_ref="oval:org.mitre.oval:tst:6805"/>
          <criterion comment="the version of Quartz.dll is less than 6.3.1.890" test_ref="oval:org.mitre.oval:tst:6230"/>
        </criteria>
        <criteria operator="AND" comment="DirectX 9.0c on Windows 2000 SP4">
          <extend_definition comment="Microsoft Windows 2000 SP4 or later is installed" definition_ref="oval:org.mitre.oval:def:229"/>
          <criterion comment="DirectX 9.0x Installed" test_ref="oval:org.mitre.oval:tst:601"/>
          <criterion comment="the version of Quartz.dll is less than 6.5.1.908" test_ref="oval:org.mitre.oval:tst:6541"/>
        </criteria>
        <criteria operator="AND" comment="DirectX 9.0c on Win XP SP2">
          <extend_definition comment="Microsoft Windows XP SP2 is installed" definition_ref="oval:org.mitre.oval:def:521"/>
          <criterion comment="DirectX 9.0x Installed" test_ref="oval:org.mitre.oval:tst:601"/>
          <criterion comment="the version of Quartz.dll is less than 6.5.2600.3243" test_ref="oval:org.mitre.oval:tst:6770"/>
        </criteria>
        <criteria operator="AND" comment="DirectX 9.0c on Win XP SP1 64bit">
          <extend_definition comment="Microsoft Windows XP SP1 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:480"/>
          <criterion comment="DirectX 9.0x Installed" test_ref="oval:org.mitre.oval:tst:601"/>
          <criterion comment="the version of Quartz.dll is less than 6.5.3790.3035" test_ref="oval:org.mitre.oval:tst:6513"/>
        </criteria>
        <criteria operator="AND" comment="DirectX 9.0c on Win XP SP2 64bit">
          <extend_definition comment="Microsoft Windows XP SP2 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:1799"/>
          <criterion comment="DirectX 9.0x Installed" test_ref="oval:org.mitre.oval:tst:601"/>
          <criterion comment="the version of Quartz.dll is less than 6.5.3790.4178" test_ref="oval:org.mitre.oval:tst:6203"/>
        </criteria>
        <criteria operator="AND" comment="DirectX 9.0c on 2003">
          <criteria operator="OR">
            <extend_definition comment="Microsoft Windows Server 2003 SP1 (x86) is installed" definition_ref="oval:org.mitre.oval:def:565"/>
            <extend_definition comment="Microsoft Windows Server 2003 (x64) is installed" definition_ref="oval:org.mitre.oval:def:730"/>
            <extend_definition comment="Microsoft Windows Server 2003 (ia64) SP1 is installed" definition_ref="oval:org.mitre.oval:def:1205"/>
          </criteria>
          <criterion comment="DirectX 9.0x Installed" test_ref="oval:org.mitre.oval:tst:601"/>
          <criterion comment="the version of Quartz.dll is less than 6.5.3790.3035" test_ref="oval:org.mitre.oval:tst:6513"/>
        </criteria>
        <criteria operator="AND" comment="DirectX 9.0c on 2003 SP2">
          <criteria operator="OR">
            <extend_definition comment="Microsoft Windows Server 2003 SP2 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1935"/>
            <extend_definition comment="Microsoft Windows Server 2003 SP2 (x64) is installed" definition_ref="oval:org.mitre.oval:def:2161"/>
            <extend_definition comment="Microsoft Windows Server 2003 (ia64) SP2 is installed" definition_ref="oval:org.mitre.oval:def:1442"/>
          </criteria>
          <criterion comment="DirectX 9.0x Installed" test_ref="oval:org.mitre.oval:tst:601"/>
          <criterion comment="the version of Quartz.dll is less than 6.5.3790.4178" test_ref="oval:org.mitre.oval:tst:6203"/>
        </criteria>
        <criteria operator="AND" comment="DirectX 10.0 on Vista">
          <extend_definition comment="Microsoft Windows Vista is installed" definition_ref="oval:org.mitre.oval:def:228"/>
          <criterion comment="the version of Quartz.dll is less than 6.6.6000.16587" test_ref="oval:org.mitre.oval:tst:6690"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:730" version="2" class="inventory">
      <metadata>
        <title>Microsoft Windows Server 2003 (x64) is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/o:microsoft:windows_2003:::x64"/>
        <description>A version of Microsoft Windows Server 2003 (x64) is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-03-05T09:00:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <status_change date="2007-03-05T09:00:00">DRAFT</status_change>
            <status_change date="2007-03-21T16:17:25.745-04:00">INTERIM</status_change>
            <status_change date="2007-04-10T13:44:28.055-04:00">ACCEPTED</status_change>
            <modified comment="Changed the CPE reference" date="2008-04-04T11:17:00.114-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2008-04-04T11:29:06.138-04:00">INTERIM</status_change>
            <status_change date="2008-04-21T04:00:24.051-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/>
        <criterion comment="a version of Microsoft Windows Server 2003 is installed" test_ref="oval:org.mitre.oval:tst:4"/>
        <criterion comment="a version of Windows for the x64 architecture is installed" test_ref="oval:org.mitre.oval:tst:3653"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:565" version="2" class="inventory">
      <metadata>
        <title>Microsoft Windows Server 2003 SP1 (x86) is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/o:microsoft:windows_2003::sp1:x86"/>
        <description>A version of Microsoft Windows Server 2003 Service Pack 1 (x86) is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-07-25T12:05:33">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-07-27T20:15:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-09-27T12:29:31.197-04:00">INTERIM</status_change>
            <status_change date="2006-10-16T15:58:44.696-04:00">ACCEPTED</status_change>
            <modified comment="Changed the CPE reference" date="2008-04-04T11:17:00.371-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2008-04-04T11:28:41.395-04:00">INTERIM</status_change>
            <status_change date="2008-04-21T04:00:23.334-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/>
        <criterion comment="a version of Microsoft Windows Server 2003 is installed" test_ref="oval:org.mitre.oval:tst:4"/>
        <criterion comment="a version of Windows for the x86 architecture is installed" test_ref="oval:org.mitre.oval:tst:3823"/>
        <criterion comment="Win2K/XP/2003/Vista service pack 1 is installed" test_ref="oval:org.mitre.oval:tst:2843"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:521" version="3" class="inventory">
      <metadata>
        <title>Microsoft Windows XP SP2 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/o:microsoft:windows_xp::sp2"/>
        <description>The operating system installed on the system is Microsoft Windows XP SP2.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-07-25T12:05:33">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-07-27T20:15:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-09-27T12:29:29.930-04:00">INTERIM</status_change>
            <status_change date="2006-10-16T15:58:43.496-04:00">ACCEPTED</status_change>
            <modified comment="Added CPE reference." date="2007-04-30T07:48:00.073-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-04-30T08:00:54.097-04:00">INTERIM</status_change>
            <status_change date="2007-05-23T15:05:48.210-04:00">ACCEPTED</status_change>
            <modified comment="Changed the CPE reference" date="2008-04-04T11:17:00.488-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2008-04-04T11:27:40.511-04:00">INTERIM</status_change>
            <status_change date="2008-04-21T04:00:20.931-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <extend_definition comment="Microsoft Windows XP is installed" definition_ref="oval:org.mitre.oval:def:105"/>
        <criterion comment="Win2K/XP/2003 service pack 2 (or later) is installed" test_ref="oval:org.mitre.oval:tst:2837"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:480" version="2" class="inventory">
      <metadata>
        <title>Microsoft Windows XP SP1 (64-bit) is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/o:microsoft:windows_xp::sp1:64bit"/>
        <description>The operating system installed on the system is Microsoft Windows XP SP1 (64-bit).</description>
        <oval_repository>
          <dates>
            <submitted date="2006-07-25T12:05:33">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-07-27T20:15:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-09-27T12:29:28.342-04:00">INTERIM</status_change>
            <status_change date="2006-10-16T15:58:42.090-04:00">ACCEPTED</status_change>
            <modified comment="Changed the CPE reference" date="2008-04-04T11:17:00.311-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2008-04-04T11:27:13.333-04:00">INTERIM</status_change>
            <status_change date="2008-04-21T04:00:19.883-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <extend_definition comment="Microsoft Windows XP is installed" definition_ref="oval:org.mitre.oval:def:105"/>
        <criterion comment="a version of Windows for the ia64 architecture is installed" test_ref="oval:org.mitre.oval:tst:2747"/>
        <criterion comment="Win2K/XP/2003/Vista service pack 1 is installed" test_ref="oval:org.mitre.oval:tst:2843"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:229" version="2" class="inventory">
      <metadata>
        <title>Microsoft Windows 2000 SP4 or later is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
        </affected>
        <description>The operating system installed on the system is Microsoft Windows 2000 SP4.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-07-25T12:05:33">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-07-27T20:15:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-09-27T12:29:16.978-04:00">INTERIM</status_change>
            <status_change date="2006-10-16T15:58:35.885-04:00">ACCEPTED</status_change>
            <modified comment="Added CPE reference." date="2007-04-30T07:48:00.915-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-04-30T08:11:20.008-04:00">INTERIM</status_change>
            <status_change date="2007-05-23T15:05:40.599-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/>
        <criterion comment="Windows 2000 is installed" test_ref="oval:org.mitre.oval:tst:2"/>
        <criterion comment="SP4 or later Installed" test_ref="oval:org.mitre.oval:tst:3073"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:228" version="3" class="inventory">
      <metadata>
        <title>Microsoft Windows Vista is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows Vista</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/o:microsoft:windows_vista"/>
        <description>The operating system installed on the system is Microsoft Windows Vista</description>
        <oval_repository>
          <dates>
            <submitted date="2007-02-13T12:46:06">
              <contributor organization="Secure Elements, Inc.">Dragos Prisaca</contributor>
            </submitted>
            <status_change date="2007-02-13T14:53:06-04:00">DRAFT</status_change>
            <status_change date="2007-03-21T16:17:12.775-04:00">INTERIM</status_change>
            <status_change date="2007-04-13T15:13:39.760-04:00">ACCEPTED</status_change>
            <modified comment="Added CPE reference." date="2007-04-30T07:48:00.893-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-04-30T07:56:25.929-04:00">INTERIM</status_change>
            <status_change date="2007-05-23T15:05:40.286-04:00">ACCEPTED</status_change>
            <modified comment="Vista test updated because of the conflictions with Server 2008" date="2008-03-26T10:51:02.210-04:00">
              <contributor organization="Secure Elements, Inc.">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2008-03-31T04:00:22.690-04:00">INTERIM</status_change>
            <modified comment="Changed the CPE reference" date="2008-04-04T11:17:00.315-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2008-04-21T04:00:18.129-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/>
        <criterion comment="Windows Vista is installed" test_ref="oval:org.mitre.oval:tst:7914"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2161" version="2" class="inventory">
      <metadata>
        <title>Microsoft Windows Server 2003 SP2 (x64) is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/o:microsoft:windows_2003::sp2:x64"/>
        <description>A version of Microsoft Windows Server 2003 SP2 (x64) is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-10T18:34:24">
              <contributor organization="Secure Elements, Inc.">Sudhir Gandhe</contributor>
            </submitted>
            <status_change date="2007-07-10T18:34:24">DRAFT</status_change>
            <status_change date="2007-08-01T22:26:16.096-04:00">INTERIM</status_change>
            <status_change date="2007-08-20T08:04:40.731-04:00">ACCEPTED</status_change>
            <modified comment="Changed the CPE reference" date="2008-04-04T11:17:00.780-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2008-04-04T11:25:55.801-04:00">INTERIM</status_change>
            <status_change date="2008-04-21T04:00:17.838-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/>
        <criterion comment="a version of Microsoft Windows Server 2003 is installed" test_ref="oval:org.mitre.oval:tst:4"/>
        <criterion comment="a version of Windows for the x64 architecture is installed" test_ref="oval:org.mitre.oval:tst:3653"/>
        <criterion comment="Win2K/XP/2003 service pack 2 is installed" test_ref="oval:org.mitre.oval:tst:3019"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1935" version="2" class="inventory">
      <metadata>
        <title>Microsoft Windows Server 2003 SP2 (x86) is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/o:microsoft:windows_2003::sp2:x86"/>
        <description>A version of Microsoft Windows Server 2003 Service Pack 2 (x86) is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-04-09T09:49:32">
              <contributor organization="Secure Elements, Inc.">Sudhir Gandhe</contributor>
            </submitted>
            <status_change date="2007-04-09T11:20:00.000-05:00">DRAFT</status_change>
            <status_change date="2007-04-25T19:52:21.584-04:00">INTERIM</status_change>
            <modified comment="Dropped tst:4078 in favor of existing tst:3019." date="2007-04-26T13:47:00.955-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-05-23T15:05:34.661-04:00">ACCEPTED</status_change>
            <modified comment="Changed the CPE reference" date="2008-04-04T11:17:00.742-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2008-04-04T11:25:17.766-04:00">INTERIM</status_change>
            <status_change date="2008-04-21T04:00:15.390-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/>
        <criterion comment="a version of Microsoft Windows Server 2003 is installed" test_ref="oval:org.mitre.oval:tst:4"/>
        <criterion comment="a version of Windows for the x86 architecture is installed" test_ref="oval:org.mitre.oval:tst:3823"/>
        <criterion comment="Win2K/XP/2003 service pack 2 is installed" test_ref="oval:org.mitre.oval:tst:3019"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1799" version="2" class="inventory">
      <metadata>
        <title>Microsoft Windows XP SP2 (64-bit) is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/o:microsoft:windows_xp::sp2:64bit"/>
        <description>The operating system installed on the system is Microsoft Windows XP SP2 (64-bit).</description>
        <oval_repository>
          <dates>
            <submitted date="2007-04-11T08:08:51">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2007-04-12T20:15:00.000-04:00">DRAFT</status_change>
            <status_change date="2007-04-30T08:18:47.475-04:00">INTERIM</status_change>
            <status_change date="2007-05-23T15:05:31.948-04:00">ACCEPTED</status_change>
            <modified comment="Changed the CPE reference" date="2008-04-04T11:17:00.158-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2008-04-04T11:24:05.185-04:00">INTERIM</status_change>
            <status_change date="2008-04-21T04:00:14.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <extend_definition comment="Microsoft Windows XP is installed" definition_ref="oval:org.mitre.oval:def:105"/>
        <criterion comment="a version of Windows for the ia64 architecture is installed" test_ref="oval:org.mitre.oval:tst:2747"/>
        <criterion comment="Win2K/XP/2003 service pack 2 (or later) is installed" test_ref="oval:org.mitre.oval:tst:2837"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:105" version="3" class="inventory">
      <metadata>
        <title>Microsoft Windows XP is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/o:microsoft:windows_xp"/>
        <description>The operating system installed on the system is Microsoft Windows XP.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-06-26T12:55:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <status_change date="2006-06-26T12:55:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Added CPE reference." date="2007-04-30T07:48:00.244-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-04-30T08:01:55.267-04:00">INTERIM</status_change>
            <status_change date="2007-05-23T15:05:25.969-04:00">ACCEPTED</status_change>
            <modified comment="Changed the CPE reference" date="2008-04-04T11:17:00.073-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2008-04-04T11:27:52.098-04:00">INTERIM</status_change>
            <status_change date="2008-04-21T04:00:10.499-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/>
        <criterion comment="a version of Microsoft Windows XP is installed" test_ref="oval:org.mitre.oval:tst:3"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1442" version="2" class="inventory">
      <metadata>
        <title>Microsoft Windows Server 2003 (ia64) SP2 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/o:microsoft:windows_2003::sp2:itanium"/>
        <description>A version of Microsoft Windows Server 2003 (ia64) Service Pack 2 is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-08-15T09:28:35">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2007-08-15T09:28:35">DRAFT</status_change>
            <status_change date="2007-10-24T17:10:53.045-04:00">INTERIM</status_change>
            <status_change date="2007-11-13T12:00:59.698-05:00">ACCEPTED</status_change>
            <modified comment="Changed the CPE reference" date="2008-04-04T11:17:00.098-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2008-04-04T11:23:15.120-04:00">INTERIM</status_change>
            <status_change date="2008-04-21T04:00:12.481-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/>
        <criterion comment="a version of Microsoft Windows Server 2003 is installed" test_ref="oval:org.mitre.oval:tst:4"/>
        <criterion comment="a version of Windows for the ia64 architecture is installed" test_ref="oval:org.mitre.oval:tst:2747"/>
        <criterion comment="Win2K/XP/2003 service pack 2 (or later) is installed" test_ref="oval:org.mitre.oval:tst:2837"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1205" version="2" class="inventory">
      <metadata>
        <title>Microsoft Windows Server 2003 (ia64) SP1 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/o:microsoft:windows_2003::sp1:itanium"/>
        <description>A version of Microsoft Windows Server 2003 (ia64) Service Pack 1 is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-03-05T09:00:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <status_change date="2007-03-05T09:00:00">DRAFT</status_change>
            <status_change date="2007-03-21T16:16:45.596-04:00">INTERIM</status_change>
            <status_change date="2007-04-10T13:44:19.196-04:00">ACCEPTED</status_change>
            <modified comment="Changed the CPE reference" date="2008-04-04T11:17:00.275-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2008-04-04T11:22:23.300-04:00">INTERIM</status_change>
            <status_change date="2008-04-21T04:00:10.886-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/>
        <criterion comment="a version of Microsoft Windows Server 2003 is installed" test_ref="oval:org.mitre.oval:tst:4"/>
        <criterion comment="a version of Windows for the ia64 architecture is installed" test_ref="oval:org.mitre.oval:tst:2747"/>
        <criterion comment="Win2K/XP/2003/Vista service pack 1 is installed" test_ref="oval:org.mitre.oval:tst:2843"/>
      </criteria>
    </definition>
  </definitions>
  <tests>
    <registry_test id="oval:org.mitre.oval:tst:601" version="1" comment="DirectX 9.0x Installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:499"/>
      <state state_ref="oval:org.mitre.oval:ste:545"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:3073" version="1" comment="SP4 or later Installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:717"/>
      <state state_ref="oval:org.mitre.oval:ste:2878"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:2" version="1" comment="Windows 2000 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:123"/>
      <state state_ref="oval:org.mitre.oval:ste:2"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:7914" version="1" comment="Windows Vista is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:5590"/>
      <state state_ref="oval:org.mitre.oval:ste:3828"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:3653" version="2" comment="a version of Windows for the x64 architecture is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1576"/>
      <state state_ref="oval:org.mitre.oval:ste:3180"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:3823" version="1" comment="a version of Windows for the x86 architecture is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1576"/>
      <state state_ref="oval:org.mitre.oval:ste:3649"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:3019" version="1" comment="Win2K/XP/2003 service pack 2 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:717"/>
      <state state_ref="oval:org.mitre.oval:ste:2827"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:3" version="1" comment="a version of Microsoft Windows XP is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:123"/>
      <state state_ref="oval:org.mitre.oval:ste:3"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:2837" version="1" comment="Win2K/XP/2003 service pack 2 (or later) is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:717"/>
      <state state_ref="oval:org.mitre.oval:ste:2656"/>
    </registry_test>
    <family_test id="oval:org.mitre.oval:tst:99" version="1" comment="the installed operating system is part of the Microsoft Windows family" check_existence="at_least_one_exists" check="only one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:org.mitre.oval:obj:99"/>
      <state state_ref="oval:org.mitre.oval:ste:99"/>
    </family_test>
    <registry_test id="oval:org.mitre.oval:tst:4" version="1" comment="a version of Microsoft Windows Server 2003 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:123"/>
      <state state_ref="oval:org.mitre.oval:ste:4"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:2843" version="1" comment="Win2K/XP/2003/Vista service pack 1 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:717"/>
      <state state_ref="oval:org.mitre.oval:ste:2662"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:2747" version="1" comment="a version of Windows for the ia64 architecture is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1576"/>
      <state state_ref="oval:org.mitre.oval:ste:2568"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:6805" version="1" comment="DirectX 8.1 Installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:499"/>
      <state state_ref="oval:org.mitre.oval:ste:3502"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:6770" version="1" comment="the version of Quartz.dll is less than 6.5.2600.3243" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:704"/>
      <state state_ref="oval:org.mitre.oval:ste:3330"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:6736" version="1" comment="DirectX 9.0c Installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:499"/>
      <state state_ref="oval:org.mitre.oval:ste:3244"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:6690" version="1" comment="the version of Quartz.dll is less than 6.6.6000.16587" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:704"/>
      <state state_ref="oval:org.mitre.oval:ste:3270"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:6541" version="1" comment="the version of Quartz.dll is less than 6.5.1.908" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:704"/>
      <state state_ref="oval:org.mitre.oval:ste:3373"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:6513" version="1" comment="the version of Quartz.dll is less than 6.5.3790.3035" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:704"/>
      <state state_ref="oval:org.mitre.oval:ste:3357"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:6230" version="1" comment="the version of Quartz.dll is less than 6.3.1.890" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:704"/>
      <state state_ref="oval:org.mitre.oval:ste:3772"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:6203" version="1" comment="the version of Quartz.dll is less than 6.5.3790.4178" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:704"/>
      <state state_ref="oval:org.mitre.oval:ste:2970"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:6029" version="1" comment="the version of Quartz.dll is less than 6.1.9.733" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:704"/>
      <state state_ref="oval:org.mitre.oval:ste:3377"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:1296" version="1" comment="DirectX 7.0x Installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:499"/>
      <state state_ref="oval:org.mitre.oval:ste:1165"/>
    </registry_test>
  </tests>
  <objects>
    <registry_object id="oval:org.mitre.oval:obj:5590" version="1" comment="This registry key  ProductName" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows NT\CurrentVersion</key>
      <name>ProductName</name>
    </registry_object>
    <family_object id="oval:org.mitre.oval:obj:99" version="1" comment="This is the default family object. Only one family object should exist." xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent"/>
    <registry_object id="oval:org.mitre.oval:obj:123" version="1" comment="Registry key that hold the current windows os version" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows NT\CurrentVersion</key>
      <name>CurrentVersion</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:717" version="1" comment="This registry key holds the service pack installed on the host if one is present." xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows NT\CurrentVersion</key>
      <name>CSDVersion</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:1576" version="1" comment="This registry key identifies the architecture on the system" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SYSTEM\CurrentControlSet\Control\Session Manager\Environment</key>
      <name>PROCESSOR_ARCHITECTURE</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:704" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200"/>
      <filename>Quartz.dll</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:219" version="1" comment="This registry key identifies the system root." xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows NT\CurrentVersion</key>
      <name>SystemRoot</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:499" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\DirectX</key>
      <name>Version</name>
    </registry_object>
  </objects>
  <states>
    <registry_state id="oval:org.mitre.oval:ste:545" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^4\.09.*$</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:2878" version="1" comment="Regex that matches Service pack is 4 or later" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^Service Pack [4-9]|\d{2,}$</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:2" version="1" comment="Registry key has a value of 5.0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>5.0</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:3828" version="1" comment="The registry key matches with Vista" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">.*[Vv]ista.*</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:3180" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>amd64</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:3649" version="1" comment="x86 architecture" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>x86</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:2827" version="1" comment="The registry key has a value of Service Pack 2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>Service Pack 2</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:3" version="1" comment="The registry key has a value of 5.1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>5.1</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:2656" version="1" comment="Regex that matches Service Pack 2 or later" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^Service Pack [2-9]|\d{2,}$</value>
    </registry_state>
    <family_state id="oval:org.mitre.oval:ste:99" version="1" comment="Microsoft Windows family" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <family>windows</family>
    </family_state>
    <registry_state id="oval:org.mitre.oval:ste:4" version="1" comment="The registry key has a value of 5.2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>5.2</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:2662" version="1" comment="The registry key has a value of Service Pack 1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>Service Pack 1</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:2568" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>ia64</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:3502" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^4\.[0]*8\.[0]*1\..*</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:3330" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.5.2600.3243</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:3244" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^4\.[0]*9\.[0]*\.0904$</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:3270" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.6.6000.16587</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:3373" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.5.1.908</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:3357" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.5.3790.3035</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:3772" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.3.1.890</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2970" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.5.3790.4178</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:3377" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.1.9.733</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:1165" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^4\.07.*</value>
    </registry_state>
  </states>
  <variables>
    <local_variable id="oval:org.mitre.oval:var:200" version="1" comment="Windows system 32 directory" datatype="string">
      <concat>
        <object_component item_field="value" object_ref="oval:org.mitre.oval:obj:219"/>
        <literal_component>\System32</literal_component>
      </concat>
    </local_variable>
  </variables>
</oval_definitions>
<?xml version="1.0" encoding="UTF-8"?>
<oval_definitions xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows windows-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#independent independent-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5 oval-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-common-5 oval-common-schema.xsd" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:oval="http://oval.mitre.org/XMLSchema/oval-common-5" xmlns:oval-def="http://oval.mitre.org/XMLSchema/oval-definitions-5">
  <generator>
    <oval:product_name>The OVAL Repository</oval:product_name>
    <oval:schema_version>5.4</oval:schema_version>
    <oval:timestamp>2008-07-17T09:34:39.473-04:00</oval:timestamp>
  </generator>
  <definitions>
    <definition id="oval:org.mitre.oval:def:5236" version="0" class="vulnerability">
      <metadata>
        <title>MJPEG Decoder Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <product>DirectX</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-0011" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0011"/>
        <description>Microsoft DirectX 8.1 through 9.0c, and DirectX on Microsoft XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008, does not properly perform MJPEG error checking, which allows remote attackers to execute arbitrary code via a crafted MJPEG stream in a (1) AVI or (2) ASF file, aka the "MJPEG Decoder Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2008-06-10T14:50:00">
              <contributor organization="Secure Elements, Inc.">Sudhir Gandhe</contributor>
            </submitted>
            <status_change date="2008-06-12T13:58:51.032-04:00">DRAFT</status_change>
            <status_change date="2008-06-30T04:00:11.306-04:00">INTERIM</status_change>
          </dates>
          <status>INTERIM</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="DirectX 8.1 on Windows 2000 SP4">
          <extend_definition comment="Microsoft Windows 2000 SP4 or later is installed" definition_ref="oval:org.mitre.oval:def:229"/>
          <criterion comment="DirectX 8.1 Installed" test_ref="oval:org.mitre.oval:tst:6805"/>
          <criterion comment="the version of Quartz.dll is less than 6.3.1.891" test_ref="oval:org.mitre.oval:tst:7847"/>
        </criteria>
        <criteria operator="AND" comment="DirectX 9.0 on Windows 2000 SP4">
          <extend_definition comment="Microsoft Windows 2000 SP4 or later is installed" definition_ref="oval:org.mitre.oval:def:229"/>
          <criterion comment="DirectX 9.0x Installed" test_ref="oval:org.mitre.oval:tst:601"/>
          <criterion comment="the version of Quartz.dll is less than 6.5.1.909" test_ref="oval:org.mitre.oval:tst:7882"/>
        </criteria>
        <criteria operator="AND" comment="DirectX 9.0 on Win XP SP2">
          <extend_definition comment="Microsoft Windows XP SP2 is installed" definition_ref="oval:org.mitre.oval:def:521"/>
          <criterion comment="DirectX 9.0x Installed" test_ref="oval:org.mitre.oval:tst:601"/>
          <criterion comment="the version of Quartz.dll is less than 6.5.2600.3367" test_ref="oval:org.mitre.oval:tst:7926"/>
        </criteria>
        <criteria operator="AND" comment="DirectX 9.0 on Win XP SP3">
          <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
          <criterion comment="DirectX 9.0x Installed" test_ref="oval:org.mitre.oval:tst:601"/>
          <criterion comment="the version of Quartz.dll is less than 6.5.2600.5596" test_ref="oval:org.mitre.oval:tst:7725"/>
        </criteria>
        <criteria operator="AND" comment="DirectX 9.0 on Win XP SP1 64bit">
          <extend_definition comment="Microsoft Windows XP SP1 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:480"/>
          <criterion comment="DirectX 9.0x Installed" test_ref="oval:org.mitre.oval:tst:601"/>
          <criterion comment="the version of Quartz.dll is less than 6.5.3790.3130" test_ref="oval:org.mitre.oval:tst:7765"/>
        </criteria>
        <criteria operator="AND" comment="DirectX 9.0 on Win XP SP2 64bit">
          <extend_definition comment="Microsoft Windows XP SP2 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:1799"/>
          <criterion comment="DirectX 9.0x Installed" test_ref="oval:org.mitre.oval:tst:601"/>
          <criterion comment="the version of Quartz.dll is less than 6.5.3790.4283" test_ref="oval:org.mitre.oval:tst:8024"/>
        </criteria>
        <criteria operator="AND" comment="DirectX 9.0 on 2003">
          <criteria operator="OR">
            <extend_definition comment="Microsoft Windows Server 2003 SP1 (x86) is installed" definition_ref="oval:org.mitre.oval:def:565"/>
            <extend_definition comment="Microsoft Windows Server 2003 (x64) is installed" definition_ref="oval:org.mitre.oval:def:730"/>
            <extend_definition comment="Microsoft Windows Server 2003 (ia64) SP1 is installed" definition_ref="oval:org.mitre.oval:def:1205"/>
          </criteria>
          <criterion comment="DirectX 9.0x Installed" test_ref="oval:org.mitre.oval:tst:601"/>
          <criterion comment="the version of Quartz.dll is less than 6.5.3790.3130" test_ref="oval:org.mitre.oval:tst:7765"/>
        </criteria>
        <criteria operator="AND" comment="DirectX 9.0 on 2003 SP2">
          <criteria operator="OR">
            <extend_definition comment="Microsoft Windows Server 2003 SP2 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1935"/>
            <extend_definition comment="Microsoft Windows Server 2003 SP2 (x64) is installed" definition_ref="oval:org.mitre.oval:def:2161"/>
            <extend_definition comment="Microsoft Windows Server 2003 (ia64) SP2 is installed" definition_ref="oval:org.mitre.oval:def:1442"/>
          </criteria>
          <criterion comment="DirectX 9.0x Installed" test_ref="oval:org.mitre.oval:tst:601"/>
          <criterion comment="the version of Quartz.dll is less than 6.5.3790.4283" test_ref="oval:org.mitre.oval:tst:8024"/>
        </criteria>
        <criteria operator="AND" comment="DirectX 10.0 on Vista">
          <extend_definition comment="Microsoft Windows Vista is installed" definition_ref="oval:org.mitre.oval:def:228"/>
          <criterion comment="the version of Quartz.dll is less than 6.6.6000.16681" test_ref="oval:org.mitre.oval:tst:8069"/>
        </criteria>
        <criteria operator="AND" comment="DirectX 10.0 on Vista SP1">
          <criteria operator="OR">
            <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
            <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
          </criteria>
          <criterion comment="the version of Quartz.dll is less than 6.6.6001.18063" test_ref="oval:org.mitre.oval:tst:8092"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:730" version="2" class="inventory">
      <metadata>
        <title>Microsoft Windows Server 2003 (x64) is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/o:microsoft:windows_2003:::x64"/>
        <description>A version of Microsoft Windows Server 2003 (x64) is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-03-05T09:00:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <status_change date="2007-03-05T09:00:00">DRAFT</status_change>
            <status_change date="2007-03-21T16:17:25.745-04:00">INTERIM</status_change>
            <status_change date="2007-04-10T13:44:28.055-04:00">ACCEPTED</status_change>
            <modified comment="Changed the CPE reference" date="2008-04-04T11:17:00.114-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2008-04-04T11:29:06.138-04:00">INTERIM</status_change>
            <status_change date="2008-04-21T04:00:24.051-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/>
        <criterion comment="a version of Microsoft Windows Server 2003 is installed" test_ref="oval:org.mitre.oval:tst:4"/>
        <criterion comment="a version of Windows for the x64 architecture is installed" test_ref="oval:org.mitre.oval:tst:3653"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:565" version="2" class="inventory">
      <metadata>
        <title>Microsoft Windows Server 2003 SP1 (x86) is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/o:microsoft:windows_2003::sp1:x86"/>
        <description>A version of Microsoft Windows Server 2003 Service Pack 1 (x86) is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-07-25T12:05:33">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-07-27T20:15:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-09-27T12:29:31.197-04:00">INTERIM</status_change>
            <status_change date="2006-10-16T15:58:44.696-04:00">ACCEPTED</status_change>
            <modified comment="Changed the CPE reference" date="2008-04-04T11:17:00.371-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2008-04-04T11:28:41.395-04:00">INTERIM</status_change>
            <status_change date="2008-04-21T04:00:23.334-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/>
        <criterion comment="a version of Microsoft Windows Server 2003 is installed" test_ref="oval:org.mitre.oval:tst:4"/>
        <criterion comment="a version of Windows for the x86 architecture is installed" test_ref="oval:org.mitre.oval:tst:3823"/>
        <criterion comment="Win2K/XP/2003/Vista service pack 1 is installed" test_ref="oval:org.mitre.oval:tst:2843"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5631" version="0" class="inventory">
      <metadata>
        <title>Microsoft Windows XP (x86) SP3 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/o:microsoft:windows_xp::sp3:x86"/>
        <description>A version of Microsoft Windows XP (x86) Service Pack 3 is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-06-10T14:50:00">
              <contributor organization="Secure Elements, Inc.">Sudhir Gandhe</contributor>
            </submitted>
            <status_change date="2008-06-12T13:58:47.155-04:00">DRAFT</status_change>
            <status_change date="2008-06-30T04:00:18.370-04:00">INTERIM</status_change>
          </dates>
          <status>INTERIM</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/>
        <criterion comment="a version of Microsoft Windows XP is installed" test_ref="oval:org.mitre.oval:tst:3"/>
        <criterion comment="a version of Windows for the x86 architecture is installed" test_ref="oval:org.mitre.oval:tst:3823"/>
        <criterion comment="Win2K/XP/2003 service pack 3 is installed" test_ref="oval:org.mitre.oval:tst:7814"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:521" version="3" class="inventory">
      <metadata>
        <title>Microsoft Windows XP SP2 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/o:microsoft:windows_xp::sp2"/>
        <description>The operating system installed on the system is Microsoft Windows XP SP2.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-07-25T12:05:33">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-07-27T20:15:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-09-27T12:29:29.930-04:00">INTERIM</status_change>
            <status_change date="2006-10-16T15:58:43.496-04:00">ACCEPTED</status_change>
            <modified comment="Added CPE reference." date="2007-04-30T07:48:00.073-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-04-30T08:00:54.097-04:00">INTERIM</status_change>
            <status_change date="2007-05-23T15:05:48.210-04:00">ACCEPTED</status_change>
            <modified comment="Changed the CPE reference" date="2008-04-04T11:17:00.488-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2008-04-04T11:27:40.511-04:00">INTERIM</status_change>
            <status_change date="2008-04-21T04:00:20.931-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <extend_definition comment="Microsoft Windows XP is installed" definition_ref="oval:org.mitre.oval:def:105"/>
        <criterion comment="Win2K/XP/2003 service pack 2 (or later) is installed" test_ref="oval:org.mitre.oval:tst:2837"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:4873" version="1" class="inventory">
      <metadata>
        <title>Microsoft Windows Vista (32-bit) Service Pack 1 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows Vista</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/o:microsoft:windows_vista::sp1:x86"/>
        <description>The operating system installed on the system is Microsoft Windows Vista (32-bit) Service Pack 1</description>
        <oval_repository>
          <dates>
            <submitted date="2008-03-26T10:44:02">
              <contributor organization="Secure Elements, Inc.">Sudhir Gandhe</contributor>
            </submitted>
            <status_change date="2008-03-26T16:27:29.495-04:00">DRAFT</status_change>
            <modified comment="Changed the CPE reference" date="2008-04-04T11:17:00.108-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2008-04-21T04:00:20.428-04:00">INTERIM</status_change>
            <status_change date="2008-05-12T04:00:14.497-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/>
        <criterion comment="Windows Vista is installed" test_ref="oval:org.mitre.oval:tst:7914"/>
        <criterion negate="true" comment="a version of Windows for the x64 architecture is installed" test_ref="oval:org.mitre.oval:tst:3653"/>
        <criterion comment="Win2K/XP/2003/Vista service pack 1 is installed" test_ref="oval:org.mitre.oval:tst:2843"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:4870" version="1" class="inventory">
      <metadata>
        <title>Microsoft Windows Server 2008 (32-bit) is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/o:microsoft:windows_2008:::x86"/>
        <description>The operating system installed on the system is Microsoft Windows Server 2008
                    (32-bit)</description>
        <oval_repository>
          <dates>
            <submitted date="2008-03-26T10:44:02">
              <contributor organization="Secure Elements, Inc.">Sudhir Gandhe</contributor>
            </submitted>
            <status_change date="2008-03-26T16:27:25.280-04:00">DRAFT</status_change>
            <modified comment="Changed the CPE reference" date="2008-04-04T11:17:00.555-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2008-04-21T04:00:20.181-04:00">INTERIM</status_change>
            <status_change date="2008-05-12T04:00:10.618-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/>
        <criterion comment="Windows Server 2008 is installed" test_ref="oval:org.mitre.oval:tst:7697"/>
        <criterion negate="true" comment="a version of Windows for the x64 architecture is installed" test_ref="oval:org.mitre.oval:tst:3653"/>
      <