<?xml version="1.0" encoding="UTF-8"?>
<oval_definitions xmlns:oval="http://oval.mitre.org/XMLSchema/oval-common-5" xmlns:win-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" xmlns:oval-def="http://oval.mitre.org/XMLSchema/oval-definitions-5" xmlns:ind-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5"
   xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-common-5 http://oval.mitre.org/language/download/schema/version5.3/ovaldefinition/complete/oval-common-schema.xsd    http://oval.mitre.org/XMLSchema/oval-definitions-5 http://oval.mitre.org/language/download/schema/version5.3/ovaldefinition/complete/oval-definitions-schema.xsd    http://oval.mitre.org/XMLSchema/oval-definitions-5#windows http://oval.mitre.org/language/download/schema/version5.3/ovaldefinition/complete/windows-definitions-schema.xsd    http://oval.mitre.org/XMLSchema/oval-definitions-5#independent http://oval.mitre.org/language/download/schema/version5.3/ovaldefinition/complete/independent-definitions-schema.xsd">
   <generator>
      <oval:product_name>National Institute of Standards and Technology</oval:product_name>
      <oval:schema_version>5.3</oval:schema_version>
      <oval:timestamp>2011-09-23T09:24:13.001-04:00</oval:timestamp>
   </generator>
   <!-- ==================================================================================================== -->
   <!-- =========================================== DEFINITIONS ============================================ -->
   <!-- ==================================================================================================== -->
   <definitions>
      <definition id="oval:gov.nist.fdcc.patch:def:400" version="4" class="patch">
         <metadata>
            <title>MS08-030: Vulnerability in Bluetooth Stack Could Allow Remote Code Execution (951376)</title>
            <affected family="windows">
               <platform>Microsoft Windows XP</platform>
               <platform>Microsoft Windows Vista</platform>
            </affected>
            <reference source="CVE" ref_id="CVE-2008-1453" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1453"/>
            <reference source="Microsoft" ref_id="MS08-030" ref_url="http://www.microsoft.com/technet/security/bulletin/MS08-030.mspx"/>
            <reference source="Microsoft" ref_id="KB951376" ref_url="http://support.microsoft.com/kb/951376"/>
            <reference source="OVAL" ref_id="oval:org.mitre.oval:def:4730" ref_url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:4730"/>
            <description>Microsoft has released MS08-030 to address security issues in Internet Explorer as documented by CVE-2008-1453.</description>
         </metadata>
         <criteria operator="AND">
            <criterion comment="Bthport.sys does exist" negate="true" test_ref="oval:org.mitre.oval:tst:7805"/>
            <criteria operator="OR">
               <criteria operator="AND" comment="Windows XP (32-bit) SP2">
                  <extend_definition comment="Microsoft Windows XP (x86) SP2 is installed" definition_ref="oval:org.mitre.oval:def:754"/>
                  <criterion comment="Bthport.sys version is less than 5.1.2600.3351" test_ref="oval:org.mitre.oval:tst:7093"/>
               </criteria>
               <criteria operator="AND" comment="Windows XP (64-bit) SP2">
                  <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
                  <criterion comment="Bthport.sys version is less than 5.2.3790.4274" test_ref="oval:gov.nist.fdcc.patch:tst:115281"/>
               </criteria>
               <criteria operator="AND" comment="Windows XP Service Pack 3">
                  <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
                  <criterion comment="Bthport.sys version is less than 5.1.2600.5580" test_ref="oval:org.mitre.oval:tst:8009"/>
               </criteria>
               <criteria operator="AND" comment="Windows Vista Service Pack 1 - GDR">
                  <criteria operator="OR">
                     <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                     <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  </criteria>
                  <criterion comment="Bthport.sys version is greater than or equal to 6.0.6001.18000" test_ref="oval:org.mitre.oval:tst:7492"/>
                  <criterion comment="Bthport.sys version is less than 6.0.6001.18064" test_ref="oval:org.mitre.oval:tst:7491"/>
               </criteria>
               <criteria operator="AND" comment="Windows Vista Service Pack 1 - LDR">
                  <criteria operator="OR">
                     <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                     <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  </criteria>
                  <criterion comment="Bthport.sys version is greater than or equal to 6.0.6001.22000" test_ref="oval:org.mitre.oval:tst:7493"/>
                  <criterion comment="Bthport.sys version is less than 6.0.6001.22168" test_ref="oval:org.mitre.oval:tst:7494"/>
               </criteria>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:402" version="1" class="patch">
         <metadata>
            <title>MS08-032: Cumulative Security Update of ActiveX Kill Bits (950760)</title>
            <affected family="windows">
               <platform>Microsoft Windows XP</platform>
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows Server 2008</platform>
            </affected>
            <reference source="Microsoft" ref_id="MS08-032" ref_url="http://www.microsoft.com/technet/security/bulletin/MS08-032.mspx"/>
            <reference source="Microsoft" ref_id="KB950760" ref_url="http://support.microsoft.com/kb/950760"/>
            <reference source="CVE" ref_id="CVE-2007-0675" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0675"/>
            <reference source="OVAL" ref_id="oval:org.mitre.oval:def:5489" ref_url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:5489"/>
            <description>Microsoft has released MS08-032 to address security issues in Internet Explorer as documented by CVE-2007-0675.</description>
         </metadata>
         <criteria operator="AND">
            <criteria operator="OR">
               <extend_definition comment="Microsoft Windows XP (x86) SP2 is installed" definition_ref="oval:org.mitre.oval:def:754"/>
               <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
               <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
               <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
               <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
               <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
            </criteria>
            <criteria operator="OR">
               <criterion comment="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{40F23EB7-B397-4285-8F3C-AACE4FA40309}!Compatibility Flags does not exist" test_ref="oval:org.mitre.oval:tst:7937"/>
               <criterion comment="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{40F23EB7-B397-4285-8F3C-AACE4FA40309}!Compatibility Flags is not equal to 0x00000400" test_ref="oval:org.mitre.oval:tst:7734"/>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:405" version="1" class="patch">
         <metadata>
            <title>MS08-036: Vulnerabilities in Pragmatic General Multicast (PGM) Could Allow Denial of Service (950762)</title>
            <affected family="windows">
               <platform>Microsoft Windows XP</platform>
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows Server 2008</platform>
            </affected>
            <reference source="Microsoft" ref_id="MS08-036" ref_url="http://www.microsoft.com/technet/security/bulletin/MS08-036.mspx"/>
            <reference source="Microsoft" ref_id="KB950762" ref_url="http://support.microsoft.com/kb/950762"/>
            <reference source="CVE" ref_id="CVE-2008-1440" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1440"/>
            <reference source="CVE" ref_id="CVE-2008-1441" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1441"/>
            <reference source="OVAL" ref_id="oval:org.mitre.oval:def:5473" ref_url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:5473"/>
            <reference source="OVAL" ref_id="oval:org.mitre.oval:def:5604" ref_url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:5604"/>
            <description>Microsoft has released MS08-036 to address security issues in Internet Explorer as documented by CVE-2008-1440 and CVE-2008-1441.</description>
         </metadata>
         <criteria operator="OR">
            <criteria operator="AND">
               <extend_definition comment="Microsoft Windows XP (x86) SP2 is installed" definition_ref="oval:org.mitre.oval:def:754"/>
               <criterion comment="Rmcast.sys version is less than 5.1.2600.3369." test_ref="oval:org.mitre.oval:tst:8091"/>
            </criteria>
            <criteria operator="AND">
               <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
               <criterion comment="Rmcast.sys version is less than 5.1.2600.5598." test_ref="oval:org.mitre.oval:tst:7565"/>
            </criteria>
            <criteria operator="AND">
               <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
               <criterion comment="Rmcast.sys version is less than 5.2.3790.4290." test_ref="oval:org.mitre.oval:tst:7634"/>
            </criteria>
            <criteria operator="AND">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
               </criteria>
               <criterion comment="Rmcast.sys version is greater than or equal to 6.0.6001.18000." test_ref="oval:gov.nist.fdcc.patch:tst:115266"/>
               <criterion comment="Rmcast.sys version is less than 6.0.6001.18069." test_ref="oval:gov.nist.fdcc.patch:tst:115267"/>
            </criteria>
            <criteria operator="AND">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
               </criteria>
               <criterion comment="Rmcast.sys version is greater than or equal to 6.0.6001.22000." test_ref="oval:gov.nist.fdcc.patch:tst:115268"/>
               <criterion comment="Rmcast.sys version is less than 6.0.6001.22176." test_ref="oval:gov.nist.fdcc.patch:tst:115269"/>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:449" version="2" class="patch">
         <metadata>
            <title>MS07-040: Vulnerabilities in .NET Framework Could Allow Remote Code Execution (931212)</title>
            <affected family="windows">
               <platform>Microsoft Windows XP</platform>
               <platform>Microsoft Windows Vista</platform>
               <product>.NET Framework</product>
            </affected>
            <reference source="Microsoft" ref_id="MS07-040" ref_url="http://www.microsoft.com/technet/security/Bulletin/ms07-040.mspx"/>
            <reference source="Microsoft" ref_id="KB931212" ref_url="http://support.microsoft.com/kb/931212"/>
            <reference source="CVE" ref_id="CVE-2007-0041" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0041"/>
            <reference source="CVE" ref_id="CVE-2007-0042" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0042"/>
            <reference source="CVE" ref_id="CVE-2007-0043" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0043"/>
            <reference source="OVAL" ref_id="oval:org.mitre.oval:def:2070" ref_url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:2070"/>
            <reference source="OVAL" ref_id="oval:org.mitre.oval:def:2093" ref_url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:2093"/>
            <reference source="OVAL" ref_id="oval:org.mitre.oval:def:1873" ref_url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1873"/>
            <description>Microsoft has released MS07-040 to address security issues in .NET Framework as documented by CVE-2007-0041, CVE-2007-0042, and CVE-2007-0043.</description>
         </metadata>
         <criteria operator="OR">
            <criteria operator="AND">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows XP (x86) SP2 is installed" definition_ref="oval:org.mitre.oval:def:754"/>
                  <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
                  <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
               </criteria>
               <extend_definition comment="Microsoft .NET Framework 1.0 (Service Pack 3 or later) is Installed" definition_ref="oval:org.mitre.oval:def:2136"/>
               <criterion comment="System.web.dll version is less than 1.0.3705.6060" test_ref="oval:org.mitre.oval:tst:4154"/>
            </criteria>
            <criteria operator="AND">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows XP (x86) SP2 is installed" definition_ref="oval:org.mitre.oval:def:754"/>
                  <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
                  <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
               </criteria>
               <extend_definition comment="Microsoft .NET Framework 2.0 (Original RTM or later) is installed" definition_ref="oval:org.mitre.oval:def:1934"/>
               <criterion comment="System.web.dll version is less than 2.0.50727.832" test_ref="oval:org.mitre.oval:tst:3378"/>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:1784" version="2" class="patch">
         <metadata>
            <title>MS07-050: Vulnerability in Vector Markup Language Could Allow Remote Code Execution (938127)</title>
            <affected family="windows">
               <platform>Microsoft Windows XP</platform>
               <platform>Microsoft Windows Vista</platform>
               <product>Microsoft Internet Explorer 6</product>
               <product>Microsoft Internet Explorer 7</product>
            </affected>
            <reference source="Microsoft" ref_id="MS07-050" ref_url="http://www.microsoft.com/technet/security/bulletin/MS07-050.mspx"/>
            <reference source="Microsoft" ref_id="938127" ref_url="http://support.microsoft.com/kb/938127"/>
            <reference source="CVE" ref_id="CVE-2007-1749" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1749"/>
            <reference source="OVAL" ref_id="oval:org.mitre.oval:def:1784" ref_url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1784"/>
            <description>Microsoft has released MS07-050 to address security issues in the Vector Markup Language (VML) implementation in Windows as documented by CVE-2007-1749.</description>
         </metadata>
         <criteria operator="OR">
            <criteria comment="IE 6 on Win XP SP2" operator="AND">
               <extend_definition comment="Microsoft Windows XP (x86) SP2 is installed" definition_ref="oval:org.mitre.oval:def:754"/>
               <extend_definition comment="Microsoft Internet Explorer 6 is installed" definition_ref="oval:org.mitre.oval:def:563"/>
               <criterion comment="Vgx.dll version is less than 6.0.2900.3164" test_ref="oval:org.mitre.oval:tst:3856"/>
            </criteria>
            <criteria comment="IE 7 on Win XP SP2" operator="AND">
               <extend_definition comment="Microsoft Windows XP (x86) SP2 is installed" definition_ref="oval:org.mitre.oval:def:754"/>
               <extend_definition comment="Microsoft Internet Explorer 7 is installed" definition_ref="oval:org.mitre.oval:def:627"/>
               <criterion comment="Vgx.dll version is less than 7.0.6000.20628" test_ref="oval:org.mitre.oval:tst:4182"/>
            </criteria>
            <criteria comment="IE 6 on Win XP SP2 (64-bit)" operator="AND">
               <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
               <extend_definition comment="Microsoft Internet Explorer 6 is installed" definition_ref="oval:org.mitre.oval:def:563"/>
               <criterion comment="Vgx.dll version is less than 6.0.3790.4106" test_ref="oval:org.mitre.oval:tst:3422"/>
            </criteria>
            <criteria comment="IE 7 on Win XP SP2 (64-bit)" operator="AND">
               <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
               <extend_definition comment="Microsoft Internet Explorer 7 is installed" definition_ref="oval:org.mitre.oval:def:627"/>
               <criterion comment="Vgx.dll version is less than 7.0.6000.20628" test_ref="oval:org.mitre.oval:tst:4182"/>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11442" version="1" class="patch">
         <metadata>
            <title>MS08-047: Vulnerability in IPsec Policy Processing Could Allow Information Disclosure (953733)</title>
            <affected family="windows">
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows Server 2008</platform>
            </affected>
            <reference source="CVE" ref_id="CVE-2008-2246" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2246"/>
            <reference source="Microsoft" ref_id="MS08-047" ref_url="http://www.microsoft.com/technet/security/bulletin/MS08-047.mspx"/>
            <reference source="Microsoft" ref_id="KB953733" ref_url="http://support.microsoft.com/kb/953733"/>
            <reference source="OVAL" ref_id="oval:org.mitre.oval:def:6060" ref_url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:6060"/>
            <description>Microsoft has released MS08-047 to address security issues in Windows Vista and Windows Server 2008 as documented by CVE-2008-2246.</description>
         </metadata>
         <criteria operator="OR">
            <criteria operator="AND">
               <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
               <criterion comment="Ipsecsvc.dll version is less than 6.0.6001.18094" test_ref="oval:org.mitre.oval:tst:8911"/>
            </criteria>
            <criteria operator="AND">
               <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
               <criterion comment="Ipsecsvc.dll version is less than 6.0.6001.18094" test_ref="oval:org.mitre.oval:tst:8911"/>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11444" version="1" class="patch">
         <metadata>
            <title>MS08-049: Vulnerabilities in Event System Could Allow Remote Code Execution (950974)</title>
            <affected family="windows">
               <platform>Microsoft Windows XP</platform>
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows Server 2008</platform>
            </affected>
            <reference source="CVE" ref_id="CVE-2008-1456" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1456"/>
            <reference source="CVE" ref_id="CVE-2008-1457" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1457"/>
            <reference source="Microsoft" ref_id="MS08-049" ref_url="http://www.microsoft.com/technet/security/bulletin/MS08-049.mspx"/>
            <reference source="Microsoft" ref_id="KB950974" ref_url="http://support.microsoft.com/kb/950974"/>
            <reference source="OVAL" ref_id="oval:org.mitre.oval:def:5630" ref_url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:5630"/>
            <reference source="OVAL" ref_id="oval:org.mitre.oval:def:6095" ref_url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:6095"/>
            <description>Microsoft has released MS08-049 to address security issues in Windows 2000, Windows XP, Windows Server 2003, Windows Vista, and Windows Server 2008 as documented by CVE-2008-1456 and CVE-2008-1457.</description>
         </metadata>
         <criteria operator="OR">
            <criteria operator="AND">
               <extend_definition comment="Microsoft Windows XP (x86) SP2 is installed" definition_ref="oval:org.mitre.oval:def:754"/>
               <criterion comment="Es.dll version is less than 2001.12.4414.320" test_ref="oval:org.mitre.oval:tst:9013"/>
            </criteria>
            <criteria operator="AND">
               <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
               <criterion comment="Es.dll version is less than 2001.12.4414.706" test_ref="oval:org.mitre.oval:tst:9019"/>
            </criteria>
            <criteria operator="AND">
               <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
               <criterion comment="Es.dll version is less than 2001.12.4720.4282" test_ref="oval:org.mitre.oval:tst:8200"/>
            </criteria>
            <criteria operator="AND">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
               </criteria>
               <criterion comment="Es.dll version is less than 2001.12.6931.18057" test_ref="oval:org.mitre.oval:tst:8968"/>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11447" version="1" class="patch">
         <metadata>
            <title>MS08-054: Vulnerability in Windows Media Player Could Allow Remote Code Execution (954154)</title>
            <affected family="windows">
               <platform>Microsoft Windows XP</platform>
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows Server 2008</platform>
               <product>Microsoft Media Player</product>
            </affected>
            <reference source="CVE" ref_id="CVE-2008-2253" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2253"/>
            <reference source="Microsoft" ref_id="MS08-054" ref_url="http://www.microsoft.com/technet/security/bulletin/MS08-054.mspx"/>
            <reference source="Microsoft" ref_id="KB954154" ref_url="http://support.microsoft.com/kb/954154"/>
            <reference source="OVAL" ref_id="oval:org.mitre.oval:def:5615" ref_url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:5615"/>
            <description>Microsoft has released MS08-054 to address security issues in Windows Media Player 11 as documented by CVE-2008-2253.</description>
         </metadata>
         <criteria operator="OR">
            <criteria operator="AND">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows XP (x86) SP2 is installed" definition_ref="oval:org.mitre.oval:def:754"/>
                  <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
                  <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
               </criteria>
               <extend_definition comment="Windows Media Player v11.0 is installed." definition_ref="oval:org.mitre.oval:def:2126"/>
               <criterion comment="Wmpeffects.dll version is less than 11.0.5721.5252" test_ref="oval:org.mitre.oval:tst:9036"/>
            </criteria>
            <criteria operator="AND">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
               </criteria>
               <extend_definition comment="Windows Media Player v11.0 is installed." definition_ref="oval:org.mitre.oval:def:2126"/>
               <criterion comment="Wmpeffects.dll version is less than 11.0.6001.7002" test_ref="oval:org.mitre.oval:tst:8662"/>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11501" version="1" class="patch">
         <metadata>
            <title>MS08-061: Vulnerabilities in Windows Kernel Could Allow Elevation of Privilege (954211)</title>
            <affected family="windows">
               <platform>Microsoft Windows XP</platform>
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows Server 2008</platform>
            </affected>
            <reference source="CVE" ref_id="CVE-2008-2250 " ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2250"/>
            <reference source="CVE" ref_id="CVE-2008-2251 " ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2251"/>
            <reference source="CVE" ref_id="CVE-2008-2252 " ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2252"/>
            <reference source="Microsoft" ref_id="MS08-061" ref_url="http://www.microsoft.com/technet/security/Bulletin/MS08-061.mspx"/>
            <reference source="Microsoft" ref_id="KB954211" ref_url="http://support.microsoft.com/kb/954211"/>
            <reference source="OVAL" ref_id="oval:org.mitre.oval:def:5902" ref_url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:5902"/>
            <reference source="OVAL" ref_id="oval:org.mitre.oval:def:6010" ref_url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:6010"/>
            <reference source="OVAL" ref_id="oval:org.mitre.oval:def:6045" ref_url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:6045"/>
            <description>Microsoft has released MS08-061 to address security issues in Windows 2000, Windows XP, Windows Server 2003, Windows Vista, and Windows Server 2008 as documented by CVE-2008-2250, CVE-2008-2251, and CVE-2008-2252.</description>
         </metadata>
         <criteria operator="OR">
            <criteria operator="AND">
               <extend_definition comment="Microsoft Windows XP (x86) SP2 is installed" definition_ref="oval:org.mitre.oval:def:754"/>
               <criterion comment="Win32k.sys version is less than 5.1.2600.3446" test_ref="oval:org.mitre.oval:tst:8612"/>
            </criteria>
            <criteria operator="AND">
               <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
               <criterion comment="Win32k.sys version is less than 5.1.2600.5676" test_ref="oval:org.mitre.oval:tst:9293"/>
            </criteria>
            <criteria operator="AND">
               <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
               <criterion comment="Win32k.sys version is less than 5.2.3790.4375" test_ref="oval:org.mitre.oval:tst:9112"/>
            </criteria>
            <criteria operator="AND">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               </criteria>
               <criterion comment="Win32k.sys version is less than 6.0.6001.18141" test_ref="oval:org.mitre.oval:tst:8928"/>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11502" version="3" class="patch">
         <metadata>
            <title>MS08-062: Vulnerability in Windows Internet Printing Service Could Allow Remote Code Execution (953155)</title>
            <affected family="windows">
               <platform>Microsoft Windows XP</platform>
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows Server 2008</platform>
            </affected>
            <reference source="CVE" ref_id="CVE-2008-1446 " ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1446"/>
            <reference source="Microsoft" ref_id="MS08-062" ref_url="http://www.microsoft.com/technet/security/Bulletin/MS08-062.mspx"/>
            <reference source="Microsoft" ref_id="KB953155" ref_url="http://support.microsoft.com/kb/953155"/>
            <reference source="OVAL" ref_id="oval:org.mitre.oval:def:5764" ref_url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:5764"/>
            <description>Microsoft has released MS08-062 to address security issues in Windows 2000, Windows XP, Windows Server 2003, Windows Vista, and Windows Server 2008 as documented by CVE-2008-1446.</description>
         </metadata>
         <criteria operator="OR">
            <criteria operator="AND">
               <extend_definition comment="Microsoft Windows XP (x86) SP2 is installed" definition_ref="oval:org.mitre.oval:def:754"/>
               <extend_definition comment="Printers Virtual Directory for Microsoft IIS is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115279"/>
               <criterion comment="Win32spl.dll version is less than 5.1.2600.3435" test_ref="oval:org.mitre.oval:tst:9281"/>
            </criteria>
            <criteria operator="AND">
               <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
               <extend_definition comment="Printers Virtual Directory for Microsoft IIS is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115279"/>
               <criterion comment="Win32spl.dll version is less than 5.1.2600.5664" test_ref="oval:org.mitre.oval:tst:9352"/>
            </criteria>
            <criteria operator="AND">
               <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
               <extend_definition comment="Printers Virtual Directory for Microsoft IIS is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115279"/>
               <criterion comment="Win32spl.dll version is less than 5.2.3790.4371" test_ref="oval:org.mitre.oval:tst:8857"/>
            </criteria>
            <criteria operator="AND">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               </criteria>
               <extend_definition comment="The Internet Printing Client is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115294"/>
               <criterion comment="Win32spl.dll version is less than 6.0.6001.18119" test_ref="oval:org.mitre.oval:tst:9011"/>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11507" version="1" class="patch">
         <metadata>
            <title>MS08-067: Vulnerability in Server Service Could Allow Remote Code Execution (958644)</title>
            <affected family="windows">
               <platform>Microsoft Windows XP</platform>
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows Server 2008</platform>
            </affected>
            <reference source="CVE" ref_id="CVE-2008-4250" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4250"/>
            <reference source="Microsoft" ref_id="MS08-067" ref_url="http://www.microsoft.com/technet/security/bulletin/ms08-067.mspx"/>
            <reference source="Microsoft" ref_id="KB958644" ref_url="http://support.microsoft.com/kb/958644"/>
            <reference source="OVAL" ref_id="oval:org.mitre.oval:def:6093" ref_url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:6093"/>
            <description>Microsoft has released MS08-061 to address security issues in Windows 2000, Windows XP, Windows Server 2003, Windows Vista, and Windows Server 2008 as documented by CVE-2008-4250</description>
         </metadata>
         <criteria operator="OR">
            <criteria operator="AND">
               <extend_definition comment="Microsoft Windows XP (x86) SP2 is installed" definition_ref="oval:org.mitre.oval:def:754"/>
               <criterion comment="Netapi32.dll version is less than 5.1.2600.3462" test_ref="oval:org.mitre.oval:tst:9314"/>
            </criteria>
            <criteria operator="AND">
               <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
               <criterion comment="Netapi32.dll version is less than 5.1.2600.5694" test_ref="oval:org.mitre.oval:tst:9266"/>
            </criteria>
            <criteria operator="AND">
               <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
               <criterion comment="Netapi32.dll version is less than 5.2.3790.4392" test_ref="oval:org.mitre.oval:tst:9058"/>
            </criteria>
            <criteria operator="AND">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               </criteria>
               <criteria operator="OR">
                  <criteria operator="AND">
                     <criterion comment="Netapi32.dll version is greater than or equal to 6.0.6001.18000" test_ref="oval:gov.nist.fdcc.patch:tst:115306"/>
                     <criterion comment="Netapi32.dll version is less than 6.0.6001.18157" test_ref="oval:org.mitre.oval:tst:9140"/>
                  </criteria>
                  <criteria operator="AND">
                     <criterion comment="Netapi32.dll version is greater than or equal to 6.0.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:115307"/>
                     <criterion comment="Netapi32.dll version is less than 6.0.6001.22288" test_ref="oval:org.mitre.oval:tst:9090"/>
                  </criteria>
               </criteria>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11520" version="1" class="patch">
         <metadata>
            <title>MS08-071: Vulnerabilities in GDI Could Allow Remote Code Execution (956802)</title>
            <affected family="windows">
               <platform>Microsoft Windows XP</platform>
               <platform>Microsoft Windows Vista</platform>
            </affected>
            <reference source="CVE" ref_id="CVE-2008-2249" ref_url="http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2249"/>
            <reference source="CVE" ref_id="CVE-2008-3465" ref_url="http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3465"/>
            <reference source="Microsoft" ref_id="MS08-071" ref_url="http://www.microsoft.com/technet/security/Bulletin/ms08-071.mspx"/>
            <reference source="Microsoft" ref_id="KB956802" ref_url="http://support.microsoft.com/default.aspx/kb/956802"/>
            <reference source="OVAL" ref_id="oval:org.mitre.oval:def:5984" ref_url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:5984"/>
            <reference source="OVAL" ref_id="oval:org.mitre.oval:def:6062" ref_url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:6062"/>
            <description>Microsoft has released MS08-071to address security issues in Windows XP and Windows Vista, CVE-2008-2249 and CVE-2008-3465</description>
         </metadata>
         <criteria operator="OR">
            <criteria operator="AND">
               <extend_definition comment="Microsoft Windows XP (x86) SP2 is installed" definition_ref="oval:org.mitre.oval:def:754"/>
               <criterion comment="Gdi32.dll version is less than 5.1.2600.3466" test_ref="oval:gov.nist.fdcc.patch:tst:115201"/>
            </criteria>
            <criteria operator="AND">
               <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
               <criterion comment="Gdi32.dll version is less than 5.1.2600.5698" test_ref="oval:gov.nist.fdcc.patch:tst:115202"/>
            </criteria>
            <criteria operator="AND">
               <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
               <criterion comment="Gdi32.dll version is less than 5.2.3790.4396" test_ref="oval:gov.nist.fdcc.patch:tst:115203"/>
            </criteria>
            <criteria operator="AND">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
               </criteria>
               <criterion comment="Gdi32.dll version is greater than or equal to 6.0.6001.18000" test_ref="oval:gov.nist.fdcc.patch:tst:115308"/>
               <criterion comment="Gdi32.dll version is less than 6.0.6001.18159" test_ref="oval:org.mitre.oval:tst:9510"/>
            </criteria>
            <criteria operator="AND">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
               </criteria>
               <criterion comment="Gdi32.dll version is greater than or equal to 6.0.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:115309"/>
               <criterion comment="Gdi32.dll version is less than 6.0.6001.22291" test_ref="oval:gov.nist.fdcc.patch:tst:115310"/>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11522" version="1" class="patch">
         <metadata>
            <title>MS08-075: Vulnerabilities in Windows Search Could Allow Remote Code Execution (959349)</title>
            <affected family="windows">
               <platform>Microsoft Windows Vista</platform>
            </affected>
            <reference source="CVE" ref_id="CVE-2008-4268" ref_url="http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4268"/>
            <reference source="CVE" ref_id="CVE-2008-4269" ref_url="http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4269"/>
            <reference source="Microsoft" ref_id="MS08-075" ref_url="http://www.microsoft.com/technet/security/Bulletin/ms08-075.mspx"/>
            <reference source="Microsoft" ref_id="KB959349" ref_url="http://support.microsoft.com/default.aspx/kb/959349"/>
            <reference source="OVAL" ref_id="oval:org.mitre.oval:def:6110" ref_url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:6110"/>
            <reference source="OVAL" ref_id="oval:org.mitre.oval:def:5853" ref_url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:5853"/>
            <description>Microsoft has released MS08-075 to address security issues in Windows Vista as documented by CVE-2008-4268 and CVE-2008-4269</description>
         </metadata>
         <criteria operator="OR">
            <criteria operator="AND" comment="GDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
               </criteria>
               <criterion comment="Explorer.exe version is greater than or equal to 6.0.6001.18000" test_ref="oval:gov.nist.fdcc.patch:tst:115260"/>
               <criterion comment="Explorer.exe version is less than 6.0.6001.18164" test_ref="oval:gov.nist.fdcc.patch:tst:115221"/>
            </criteria>
            <criteria operator="AND" comment="LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
               </criteria>
               <criterion comment="Explorer.exe version is greater than or equal to 6.0.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:115261"/>
               <criterion comment="Explorer.exe version is less than 6.0.6001.22298" test_ref="oval:gov.nist.fdcc.patch:tst:115222"/>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11523" version="2" class="patch">
         <metadata>
            <title>MS08-076: Vulnerabilities in Windows Media Components Could Allow Remote Code Execution (959807)</title>
            <affected family="windows">
               <platform>Microsoft Windows XP</platform>
               <platform>Microsoft Windows Vista</platform>
            </affected>
            <reference source="CVE" ref_id="CVE-2008-3009" ref_url="http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3009"/>
            <reference source="CVE" ref_id="CVE-2008-3010" ref_url="http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3010"/>
            <reference source="Microsoft" ref_id="MS08-076" ref_url="http://www.microsoft.com/technet/security/Bulletin/ms08-076.mspx"/>
            <reference source="Microsoft" ref_id="KB959807" ref_url="http://support.microsoft.com/default.aspx/kb/959807"/>
            <reference source="OVAL" ref_id="oval:org.mitre.oval:def:5942" ref_url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:5942"/>
            <reference source="OVAL" ref_id="oval:org.mitre.oval:def:5689" ref_url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:5689"/>
            <description>Microsoft has released MS08-076 to address security issues in Windows XP and Windows Vista as documented by CVE-2008-3009 and CVE-2008-3010</description>
         </metadata>
         <criteria operator="OR">
            <criteria operator="AND">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows XP (x86) SP2 is installed" definition_ref="oval:org.mitre.oval:def:754"/>
                  <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
               </criteria>
               <criteria operator="OR">
                  <criteria operator="AND">
                     <extend_definition comment="Windows Media Player v9.0 is installed." definition_ref="oval:org.mitre.oval:def:2147"/>
                     <criterion comment="Wmnetmgr.dll version is less than 9.0.0.3268" test_ref="oval:gov.nist.fdcc.patch:tst:115231"/>
                  </criteria>
                  <criteria operator="AND">
                     <extend_definition comment="Windows Media Player v10.0 is installed." definition_ref="oval:org.mitre.oval:def:2172"/>
                     <criterion comment="Wmnetmgr.dll version is less than 10.0.0.3703" test_ref="oval:gov.nist.fdcc.patch:tst:115232"/>
                  </criteria>
                  <criteria operator="AND">
                     <extend_definition comment="Windows Media Player v11.0 is installed." definition_ref="oval:org.mitre.oval:def:2126"/>
                     <criterion comment="Wmnetmgr.dll version is less than 11.0.5721.5251" test_ref="oval:gov.nist.fdcc.patch:tst:115233"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
               </criteria>
               <extend_definition comment="Windows Media Player v11.0 is installed." definition_ref="oval:org.mitre.oval:def:2126"/>
               <criterion comment="Wmnetmgr.dll version is less than 11.0.6001.7001" test_ref="oval:gov.nist.fdcc.patch:tst:115234"/>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11548" version="1" class="patch">
         <metadata>
            <title>MS09-007: Vulnerability in SChannel could allow spoofing (960225)</title>
            <affected family="windows">
               <platform>Microsoft Windows XP</platform>
               <platform>Microsoft Windows Vista</platform>
            </affected>
            <reference source="CVE" ref_id="CVE-2009-0085" ref_url="http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0085"/>
            <reference source="Microsoft" ref_id="MS09-007" ref_url="http://www.microsoft.com/technet/security/Bulletin/ms09-007.mspx"/>
            <reference source="Microsoft" ref_id="KB960225" ref_url="http://support.microsoft.com/default.aspx/kb/960225"/>
            <description>Microsoft has released MS09-007 to address security issues in Windows XP and Windows Vista, CVE-2009-0085</description>
         </metadata>
         <criteria operator="OR">
            <criteria operator="AND" comment="WinXP,SP2 (32-bit)">
               <extend_definition comment="Microsoft Windows XP (x86) SP2 is installed" definition_ref="oval:org.mitre.oval:def:754"/>
               <criterion comment="Schannel.sys version is less than 5.1.2600.3487" test_ref="oval:gov.nist.fdcc.patch:tst:115481"/>
            </criteria>
            <criteria operator="AND" comment="WinXP,SP3 (32-bit)">
               <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
               <criterion comment="Schannel.sys version is less than 5.1.2600.5721" test_ref="oval:gov.nist.fdcc.patch:tst:115482"/>
            </criteria>
            <criteria operator="AND" comment="WinXP,SP2 (64-bit)">
               <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
               <criterion comment="Schannel.sys version is less than 5.2.3790.4458" test_ref="oval:gov.nist.fdcc.patch:tst:115483"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit, 64-bit, ia-64) - GDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
               </criteria>
               <criterion comment="Schannel.dll version is greater than or equal to 6.0.6001.18000" test_ref="oval:gov.nist.fdcc.patch:tst:115577"/>
               <criterion comment="Schannel.sys version is less than 6.0.6001.18175" test_ref="oval:gov.nist.fdcc.patch:tst:115484"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit, 64-bit, ia-64) - LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
               </criteria>
               <criterion comment="Schannel.dll version is greater than or equal to 6.0.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:115578"/>
               <criterion comment="Schannel.sys version is less than 6.0.6001.22320" test_ref="oval:gov.nist.fdcc.patch:tst:115485"/>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11550" version="2" class="patch">
         <metadata>
            <title>MS09-012: Vulnerabilities in Windows Could Allow Elevation of Privilege</title>
            <affected family="windows">
               <platform>Microsoft Windows XP</platform>
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows Server 2008</platform>
            </affected>
            <reference source="Microsoft" ref_id="MS09-012" ref_url="http://www.microsoft.com/technet/security/bulletin/MS09-012"/>
            <reference source="Microsoft" ref_id="KB959454" ref_url="http://support.microsoft.com/kb/959454"/>
            <reference source="CVE" ref_id="CVE-2008-1436" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1436"/>
            <reference source="CVE" ref_id="CVE-2009-0078" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0078"/>
            <reference source="CVE" ref_id="CVE-2009-0079" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0079"/>
            <reference source="CVE" ref_id="CVE-2009-0080" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0080"/>
            <reference source="OVAL" ref_id="oval:org.mitre.oval:def:5891" ref_url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:5891"/>
            <reference source="OVAL" ref_id="oval:org.mitre.oval:def:6193" ref_url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:6193"/>
            <reference source="OVAL" ref_id="oval:org.mitre.oval:def:6147" ref_url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:6147"/>
            <reference source="OVAL" ref_id="oval:org.mitre.oval:def:6177" ref_url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:6177"/>
            <description>Microsoft has released MS09-012 to address security issues in Windows XP, Windows Vista, and Windows Server 2008 as documented by CVE-2008-1436, CVE-2009-0078, CVE-2009-0079 and CVE-2009-0080.</description>
         </metadata>
         <criteria operator="OR">
            <criteria operator="AND">
               <extend_definition comment="Microsoft Windows XP (x86) SP2 is installed" definition_ref="oval:org.mitre.oval:def:754"/>
               <criteria operator="OR">
                  <criterion comment="Msdtcprx.dll version is less than 2001.12.4414.320" test_ref="oval:gov.nist.fdcc.patch:tst:115320"/>
                  <criterion comment="Ntoskrnl.exe version is less than 5.1.2600.3520" test_ref="oval:gov.nist.fdcc.patch:tst:115321"/>
               </criteria>
            </criteria>
            <criteria operator="AND">
               <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
               <criteria operator="OR">
                  <criterion comment="Msdtcprx.dll version is less than 2001.12.4414.706" test_ref="oval:gov.nist.fdcc.patch:tst:115322"/>
                  <criterion comment="Ntoskrnl.exe version is less than 5.1.2600.5755" test_ref="oval:gov.nist.fdcc.patch:tst:115323"/>
               </criteria>
            </criteria>
            <criteria operator="AND">
               <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
               <criterion comment="Msdtcprx.dll version is less than 2001.12.4720.4340" test_ref="oval:gov.nist.fdcc.patch:tst:115324"/>
               <criterion comment="Ntoskrnl.exe version is less than 5.2.3790.4478" test_ref="oval:gov.nist.fdcc.patch:tst:115325"/>
            </criteria>
            <criteria operator="AND">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
               </criteria>
               <criteria operator="OR">
                  <criteria operator="AND">
                     <criterion comment="Msdtcprx.dll version is greater than or equal to 2001.12.6931.18000" test_ref="oval:gov.nist.fdcc.patch:tst:115326"/>
                     <criterion comment="Msdtcprx.dll version is less than 2001.12.6931.18085" test_ref="oval:gov.nist.fdcc.patch:tst:115328"/>
                  </criteria>
                  <criteria operator="AND">
                     <criterion comment="Ntoskrnl.exe version is greater than or equal to 6.0.6001.18000" test_ref="oval:gov.nist.fdcc.patch:tst:115327"/>
                     <criterion comment="Ntoskrnl.exe version is less than 6.0.6001.18226" test_ref="oval:gov.nist.fdcc.patch:tst:115329"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
               </criteria>
               <criteria operator="OR">
                  <criteria operator="AND">
                     <criterion comment="Msdtcprx.dll version is greater than or equal to 2001.12.6931.22000" test_ref="oval:gov.nist.fdcc.patch:tst:115330"/>
                     <criterion comment="Msdtcprx.dll version is less than 2001.12.6931.22197" test_ref="oval:gov.nist.fdcc.patch:tst:115332"/>
                  </criteria>
                  <criteria operator="AND">
                     <criterion comment="Ntoskrnl.exe version is greater than or equal to 6.0.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:115331"/>
                     <criterion comment="Ntoskrnl.exe version is less than 6.0.6001.22389" test_ref="oval:gov.nist.fdcc.patch:tst:115333"/>
                  </criteria>
               </criteria>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11551" version="2" class="patch">
         <metadata>
            <title>MS09-013: Vulnerabilities in Windows HTTP Services Could Allow Remote Code Execution</title>
            <affected family="windows">
               <platform>Microsoft Windows XP</platform>
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows Server 2008</platform>
            </affected>
            <reference source="Microsoft" ref_id="MS09-013" ref_url="http://www.microsoft.com/technet/security/bulletin/MS09-013"/>
            <reference source="Microsoft" ref_id="KB960803" ref_url="http://support.microsoft.com/kb/960803"/>
            <reference source="CVE" ref_id="CVE-2009-0086" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0086"/>
            <reference source="CVE" ref_id="CVE-2009-0089" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0089"/>
            <reference source="CVE" ref_id="CVE-2009-0550" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0550"/>
            <reference source="OVAL" ref_id="oval:org.mitre.oval:def:6149" ref_url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:6149"/>
            <reference source="OVAL" ref_id="oval:org.mitre.oval:def:6027" ref_url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:6027"/>
            <reference source="OVAL" ref_id="oval:org.mitre.oval:def:7569" ref_url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:7569"/>
            <description>Microsoft has released MS09-013 to address security issues in Windows XP, Windows Vista, and Windows Server 2008 as documented by CVE-2009-0086, CVE-2009-0089, and CVE-2009-0550.</description>
         </metadata>
         <criteria operator="OR">
            <criteria operator="AND">
               <extend_definition comment="Microsoft Windows XP (x86) SP2 is installed" definition_ref="oval:org.mitre.oval:def:754"/>
               <criterion comment="Winhttp.dll version is less than 5.1.2600.3494" test_ref="oval:gov.nist.fdcc.patch:tst:115334"/>
            </criteria>
            <criteria operator="AND">
               <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
               <criterion comment="Winhttp.dll version is less than 5.1.2600.5727" test_ref="oval:gov.nist.fdcc.patch:tst:115335"/>
            </criteria>
            <criteria operator="AND">
               <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
               <criterion comment="Winhttp.dll version is less than 5.2.3790.4427" test_ref="oval:gov.nist.fdcc.patch:tst:115336"/>
            </criteria>
            <criteria operator="AND">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               </criteria>
               <criterion comment="Winhttp.dll version is greater than or equal to 6.0.6001.18000" test_ref="oval:gov.nist.fdcc.patch:tst:115337"/>
               <criterion comment="Winhttp.dll version is less than 6.0.6001.18178" test_ref="oval:gov.nist.fdcc.patch:tst:115338"/>
            </criteria>
            <criteria operator="AND">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               </criteria>
               <criterion comment="Winhttp.dll version is greater than or equal to 6.0.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:115339"/>
               <criterion comment="Winhttp.dll version is less than 6.0.6001.22323" test_ref="oval:gov.nist.fdcc.patch:tst:115340"/>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11554" version="1" class="patch">
         <metadata>
            <title>MS09-015: Blended Threat Vulnerability in SearchPath Could Allow Elevation of Privilege (959426)</title>
            <affected family="windows">
               <platform>Microsoft Windows XP</platform>
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows Server 2008</platform>
            </affected>
            <reference source="Microsoft" ref_id="MS09-015" ref_url="http://www.microsoft.com/technet/security/bulletin/MS09-015"/>
            <reference source="Microsoft" ref_id="KB959426" ref_url="http://support.microsoft.com/kb/959426"/>
            <reference source="CVE" ref_id="CVE-2008-2540" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2540"/>
            <reference source="OVAL" ref_id="oval:org.mitre.oval:def:8509" ref_url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:8509"/>
            <reference source="OVAL" ref_id="oval:org.mitre.oval:def:5782" ref_url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:5782"/>
            <reference source="OVAL" ref_id="oval:org.mitre.oval:def:6108" ref_url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:6108"/>
            <description>Microsoft has released MS09-015 to address security issues in Windows XP, Windows Vista, and Windows Server 2008 as documented by CVE-2008-2540.</description>
         </metadata>
         <criteria operator="OR">
            <criteria operator="AND">
               <extend_definition comment="Microsoft Windows XP (x86) SP2 is installed" definition_ref="oval:org.mitre.oval:def:754"/>
               <criterion comment="Kernel32.dll version is less than 5.1.2600.3541" test_ref="oval:gov.nist.fdcc.patch:tst:115541"/>
            </criteria>
            <criteria operator="AND">
               <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
               <criterion comment="Kernel32.dll version is less than 5.1.2600.5781" test_ref="oval:gov.nist.fdcc.patch:tst:115542"/>
            </criteria>
            <criteria operator="AND">
               <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
               <criterion comment="Kernel32.dll version is less than 5.2.3790.4480" test_ref="oval:gov.nist.fdcc.patch:tst:115543"/>
            </criteria>
            <criteria operator="AND">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               </criteria>
               <criterion comment="Kernel32.dll version is greater than or equal to 6.0.6001.18000" test_ref="oval:gov.nist.fdcc.patch:tst:115544"/>
               <criterion comment="Kernel32.dll version is less than 6.0.6001.18215" test_ref="oval:gov.nist.fdcc.patch:tst:115545"/>
            </criteria>
            <criteria operator="AND">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               </criteria>
               <criterion comment="Kernel32.dll version is greater than or equal to 6.0.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:115546"/>
               <criterion comment="Kernel32.dll version is less than 6.0.6001.22376" test_ref="oval:gov.nist.fdcc.patch:tst:115547"/>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11557" version="2" class="patch">
         <metadata>
            <title>MS09-026: Vulnerability in RPC Could Allow Elevation of Privilege (970238)</title>
            <affected family="windows">
               <platform>Microsoft Windows XP</platform>
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows Server 2008</platform>
            </affected>
            <reference source="Microsoft" ref_id="MS09-026" ref_url="http://www.microsoft.com/technet/security/Bulletin/MS09-026.mspx"/>
            <reference source="Microsoft" ref_id="KB970238" ref_url="http://support.microsoft.com/kb/970238"/>
            <reference source="CVE" ref_id="CVE-2009-0568" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0568"/>
            <description>Microsoft has released MS09-026 to address security issues in Microsoft Windows XP, Windows Vista, and Windows Server 2008 as documented by CVE-2009-0568.</description>
         </metadata>
         <criteria operator="OR">
            <criteria operator="AND" comment="WinXP,SP2 (32-bit)">
               <extend_definition comment="Microsoft Windows XP (x86) SP2 is installed" definition_ref="oval:org.mitre.oval:def:754"/>
               <criterion comment="Rpcrt4.dll version is less than 5.1.2600.3555" test_ref="oval:gov.nist.fdcc.patch:tst:115593"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit, 64-bit, ia-64) - GDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               </criteria>
               <criterion comment="Rpcrt4.dll version is greater than or equal to 6.0.6001.18000" test_ref="oval:gov.nist.fdcc.patch:tst:115596"/>
               <criterion comment="Rpcrt4.dll version is less than 6.0.6001.18247" test_ref="oval:gov.nist.fdcc.patch:tst:115597"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit, 64-bit, ia-64) - LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               </criteria>
               <criterion comment="Rpcrt4.dll version is greater than or equal to 6.0.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:115598"/>
               <criterion comment="Rpcrt4.dll version is less than 6.0.6001.22417" test_ref="oval:gov.nist.fdcc.patch:tst:115599"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - GDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <criterion comment="Rpcrt4.dll version is greater than or equal to 6.0.6002.18000" test_ref="oval:gov.nist.fdcc.patch:tst:115600"/>
               <criterion comment="Rpcrt4.dll version is less than 6.0.6002.18024" test_ref="oval:gov.nist.fdcc.patch:tst:115601"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <criterion comment="Rpcrt4.dll version is greater than or equal to 6.0.6002.22000" test_ref="oval:gov.nist.fdcc.patch:tst:115602"/>
               <criterion comment="Rpcrt4.dll version is less than 6.0.6002.22120" test_ref="oval:gov.nist.fdcc.patch:tst:115603"/>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11566" version="2" class="patch">
         <metadata>
            <title>MS09-022: Vulnerabilities in Windows Print Spooler Could Allow Remote Code Execution (961501)</title>
            <affected family="windows">
               <platform>Microsoft Windows XP</platform>
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows Server 2008</platform>
            </affected>
            <reference source="Microsoft" ref_id="MS09-022" ref_url="http://www.microsoft.com/technet/security/Bulletin/MS09-022.mspx"/>
            <reference source="Microsoft" ref_id="KB961501" ref_url="http://support.microsoft.com/kb/961501"/>
            <reference source="CVE" ref_id="CVE-2009-0568" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0228"/>
            <reference source="CVE" ref_id="CVE-2009-0568" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0229"/>
            <reference source="CVE" ref_id="CVE-2009-0568" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0230"/>
            <description>Microsoft has released MS09-22 to address security issues in Microsoft Windows XP, Windows Vista, and Windows Server 2008 as documented by CVE-2009-0228, CVE-2009-0229, and CVE-2009-0230.</description>
         </metadata>
         <criteria operator="OR">
            <criteria operator="AND" comment="WinXP,SP2 (32-bit)">
               <extend_definition comment="Microsoft Windows XP (x86) SP2 is installed" definition_ref="oval:org.mitre.oval:def:754"/>
               <criterion comment="Localspl.dll version is less than 5.1.2600.3569" test_ref="oval:gov.nist.fdcc.patch:tst:115661"/>
            </criteria>
            <criteria operator="AND" comment="WinXP,SP2 (64-bit)">
               <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
               <criterion comment="Localspl.dll version is less than 5.2.3790.4509" test_ref="oval:gov.nist.fdcc.patch:tst:115662"/>
            </criteria>
            <criteria operator="AND" comment="WinXP,SP3 (32-bit)">
               <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
               <criterion comment="Localspl.dll version is less than 5.1.2600.5809" test_ref="oval:gov.nist.fdcc.patch:tst:115663"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit, 64-bit, ia-64) - GDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               </criteria>
               <criterion comment="Localspl.dll version is greater than or equal to 6.0.6001.18000" test_ref="oval:gov.nist.fdcc.patch:tst:115667"/>
               <criterion comment="Localspl.dll version is less than 6.0.6001.18247" test_ref="oval:gov.nist.fdcc.patch:tst:1156631"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit, 64-bit, ia-64) - LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               </criteria>
               <criterion comment="Localspl.dll version is greater than or equal to 6.0.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:115668"/>
               <criterion comment="Localspl.dll version is less than 6.0.6001.22417" test_ref="oval:gov.nist.fdcc.patch:tst:115664"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - GDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <criterion comment="Localspl.dll version is greater than or equal to 6.0.6002.18000" test_ref="oval:gov.nist.fdcc.patch:tst:115669"/>
               <criterion comment="Localspl.dll version is less than 6.0.6002.18024" test_ref="oval:gov.nist.fdcc.patch:tst:115665"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <criterion comment="Localspl.dll version is greater than or equal to 6.0.6002.22000" test_ref="oval:gov.nist.fdcc.patch:tst:115660"/>
               <criterion comment="Localspl.dll version is less than 6.0.6002.22120" test_ref="oval:gov.nist.fdcc.patch:tst:115666"/>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11574" version="1" class="patch">
         <metadata>
            <title>MS09-041: Vulnerability in Workstation Service Could Allow Elevation of Privilege (971657)</title>
            <affected family="windows">
               <platform>Microsoft Windows XP</platform>
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows Server 2008</platform>
            </affected>
            <reference source="Microsoft" ref_id="MS09-041" ref_url="http://www.microsoft.com/technet/security/bulletin/MS09-041.mspx"/>
            <reference source="Microsoft" ref_id="KB971657" ref_url="http://support.microsoft.com/kb/971657"/>
            <reference source="CVE" ref_id="CVE-2009-1544" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1544"/>
            <description>Microsoft has released MS09-041 to address security issues in Windows XP, Windows Vista, and Windows Server 2008 as documented by CVE-2009-1544</description>
         </metadata>
         <criteria operator="OR">
            <criteria operator="AND">
               <extend_definition comment="Microsoft Windows XP (x86) SP2 is installed" definition_ref="oval:org.mitre.oval:def:754"/>
               <criterion comment="Wkssvc.dll version is less than 5.1.2600.3584" test_ref="oval:gov.nist.fdcc.patch:tst:115740"/>
            </criteria>
            <criteria operator="AND">
               <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
               <criterion comment="Wkssvc.dll version is less than 5.1.2600.5826  " test_ref="oval:gov.nist.fdcc.patch:tst:115741"/>
            </criteria>
            <criteria operator="AND">
               <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
               <criterion comment="Wkssvc.dll version is less than 5.2.3790.4530  " test_ref="oval:gov.nist.fdcc.patch:tst:115742"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit, 64-bit, ia-64) - GDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               </criteria>
               <criterion comment="Wkssvc.dll version is greater than or equal to 6.0.6001.18000" test_ref="oval:gov.nist.fdcc.patch:tst:115743"/>
               <criterion comment="Wkssvc.dll version is less than 6.0.6001.18270" test_ref="oval:gov.nist.fdcc.patch:tst:115744"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit, 64-bit, ia-64) - LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               </criteria>
               <criterion comment="Wkssvc.dll version is greater than or equal to 6.0.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:115745"/>
               <criterion comment="Wkssvc.dll version is less than 6.0.6001.22447" test_ref="oval:gov.nist.fdcc.patch:tst:115746"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - GDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <criterion comment="Wkssvc.dll version is greater than or equal to 6.0.6002.18000" test_ref="oval:gov.nist.fdcc.patch:tst:115747"/>
               <criterion comment="Wkssvc.dll version is less than 6.0.6002.18049" test_ref="oval:gov.nist.fdcc.patch:tst:115748"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <criterion comment="Wkssvc.dll version is greater than or equal to 6.0.6002.22000" test_ref="oval:gov.nist.fdcc.patch:tst:115749"/>
               <criterion comment="Wkssvc.dll version is less than 6.0.6002.22150" test_ref="oval:gov.nist.fdcc.patch:tst:1157491"/>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11575" version="2" class="patch">
         <metadata>
            <title>MS09-042: Vulnerability in Telnet Could Allow Remote Code Execution (960859)</title>
            <affected family="windows">
               <platform>Microsoft Windows XP</platform>
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows Server 2008</platform>
            </affected>
            <reference source="Microsoft" ref_id="MS09-042" ref_url="http://www.microsoft.com/technet/security/bulletin/MS09-042.mspx"/>
            <reference source="Microsoft" ref_id="KB960859" ref_url="http://support.microsoft.com/kb/960859"/>
            <reference source="CVE" ref_id="CVE-2009-1930" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1930"/>
            <description>Microsoft has released MS09-042 to address security issues in Windows XP, Windows Vista, and Windows Server 2008 as documented by CVE-2009-1930</description>
         </metadata>
         <criteria operator="OR">
            <criteria operator="AND">
               <extend_definition comment="Microsoft Windows XP (x86) SP2 is installed" definition_ref="oval:org.mitre.oval:def:754"/>
               <criterion comment="Telnet.exe version is less than 5.1.2600.3587" test_ref="oval:gov.nist.fdcc.patch:tst:115750"/>
            </criteria>
            <criteria operator="AND">
               <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
               <criterion comment="Telnet.exe version is less than 5.1.2600.5829  " test_ref="oval:gov.nist.fdcc.patch:tst:115751"/>
            </criteria>
            <criteria operator="AND">
               <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
               <criterion comment="Telnet.exe version is less than 5.2.3790.4528  " test_ref="oval:gov.nist.fdcc.patch:tst:115752"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit, 64-bit, ia-64) - GDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               </criteria>
               <criterion comment="Telnet.exe version is greater than or equal to 6.0.6001.18000" test_ref="oval:gov.nist.fdcc.patch:tst:115753"/>
               <criterion comment="Telnet.exe version is less than 6.0.6001.18270" test_ref="oval:gov.nist.fdcc.patch:tst:115754"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit, 64-bit, ia-64) - LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               </criteria>
               <criterion comment="Telnet.exe version is greater than or equal to 6.0.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:115755"/>
               <criterion comment="Telnet.exe version is less than 6.0.6001.22447" test_ref="oval:gov.nist.fdcc.patch:tst:115756"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - GDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <criterion comment="Telnet.exe version is greater than or equal to 6.0.6002.18000" test_ref="oval:gov.nist.fdcc.patch:tst:115757"/>
               <criterion comment="Telnet.exe version is less than 6.0.6002.18049" test_ref="oval:gov.nist.fdcc.patch:tst:115758"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <criterion comment="Telnet.exe version is greater than or equal to 6.0.6002.22000" test_ref="oval:gov.nist.fdcc.patch:tst:115759"/>
               <criterion comment="Telnet.exe version is less than 6.0.6002.22150" test_ref="oval:gov.nist.fdcc.patch:tst:1157591"/>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11576" version="2" class="patch">
         <metadata>
            <title>MS09-044: Vulnerabilities in Remote Desktop Connection Could Allow Remote Code Execution (970927)</title>
            <affected family="windows">
               <platform>Microsoft Windows XP</platform>
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows Server 2008</platform>
            </affected>
            <reference source="Microsoft" ref_id="MS09-044" ref_url="http://www.microsoft.com/technet/security/bulletin/MS09-044.mspx"/>
            <reference source="Microsoft" ref_id="KB970927" ref_url="http://support.microsoft.com/kb/970927"/>
            <reference source="Microsoft" ref_id="KB958470" ref_url="http://support.microsoft.com/kb/958470"/>
            <reference source="Microsoft" ref_id="KB958469" ref_url="http://support.microsoft.com/kb/958469"/>
            <reference source="CVE" ref_id="CVE-2009-1133" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1133"/>
            <reference source="CVE" ref_id="CVE-2009-1929" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1929"/>
            <description>Microsoft has released MS09-044 to address security issues in Windows XP, Windows Vista, and Windows Server 2008 as documented by CVE-2009-1133 and CVE-2009-1929</description>
         </metadata>
         <criteria operator="OR">
            <criteria operator="AND">
               <extend_definition comment="Microsoft Windows XP (x86) SP2 is installed" definition_ref="oval:org.mitre.oval:def:754"/>
               <criterion comment="Mstscax.dll version is less than 5.1.2600.3581" test_ref="oval:gov.nist.fdcc.patch:tst:115761"/>
            </criteria>
            <criteria operator="AND">
               <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
               <criterion comment="Mstscax.dll version is less than 5.1.2600.3581" test_ref="oval:gov.nist.fdcc.patch:tst:115761"/>
            </criteria>
            <criteria operator="AND">
               <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
               <criterion comment="Mstscax.dll version is less than 5.1.2600.3581" test_ref="oval:gov.nist.fdcc.patch:tst:115761"/>
            </criteria>
            <criteria operator="AND">
               <extend_definition comment="Microsoft Windows XP (x86) SP2 is installed" definition_ref="oval:org.mitre.oval:def:754"/>
               <criterion comment="2k3mstsc.dll version is less than 5.2.3790.4522" test_ref="oval:gov.nist.fdcc.patch:tst:115762"/>
            </criteria>
            <criteria operator="AND">
               <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
               <criterion comment="2k3mstsc.dll version is less than 5.2.3790.4522 " test_ref="oval:gov.nist.fdcc.patch:tst:115762"/>
            </criteria>
            <criteria operator="AND">
               <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
               <criterion comment="2k3mstsc.dll version is less than 5.2.3790.4524" test_ref="oval:gov.nist.fdcc.patch:tst:115763"/>
            </criteria>
            <criteria operator="AND">
               <extend_definition comment="Microsoft Windows XP (x86) SP2 is installed" definition_ref="oval:org.mitre.oval:def:754"/>
               <criterion comment="Mstscax.dll version is greater than or equal to 6.0.6000.16000" test_ref="oval:gov.nist.fdcc.patch:tst:115764"/>
               <criterion comment="Mstscax.dll version is less than 6.0.6000.16865" test_ref="oval:gov.nist.fdcc.patch:tst:115765"/>
            </criteria>
            <criteria operator="AND">
               <extend_definition comment="Microsoft Windows XP (x86) SP2 is installed" definition_ref="oval:org.mitre.oval:def:754"/>
               <criterion comment="Mstscax.dll version is greater than or equal to 6.0.6000.21000" test_ref="oval:gov.nist.fdcc.patch:tst:115766"/>
               <criterion comment="Mstscax.dll version is less than 6.0.6000.21061" test_ref="oval:gov.nist.fdcc.patch:tst:115767"/>
            </criteria>
            <criteria operator="AND">
               <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
               <criterion comment="Mstscax.dll version is greater than or equal to 6.0.6001.18000" test_ref="oval:gov.nist.fdcc.patch:tst:115768"/>
               <criterion comment="Mstscax.dll version is less than 6.0.6001.18266" test_ref="oval:gov.nist.fdcc.patch:tst:115769"/>
            </criteria>
            <criteria operator="AND">
               <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
               <criterion comment="Mstscax.dll version is greater than or equal to 6.0.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1157691"/>
               <criterion comment="Mstscax.dll version is less than 6.0.6001.22443" test_ref="oval:gov.nist.fdcc.patch:tst:1157692"/>
            </criteria>
            <criteria operator="AND">
               <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
               <criterion comment="Mstscax.dll version is greater than or equal to 6.0.6000.16000" test_ref="oval:gov.nist.fdcc.patch:tst:115764"/>
               <criterion comment="Mstscax.dll version is less than 6.0.6000.16865" test_ref="oval:gov.nist.fdcc.patch:tst:115765"/>
            </criteria>
            <criteria operator="AND">
               <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
               <criterion comment="Mstscax.dll version is greater than or equal to 6.0.6000.21000" test_ref="oval:gov.nist.fdcc.patch:tst:115766"/>
               <criterion comment="Mstscax.dll version is less than 6.0.6000.21061" test_ref="oval:gov.nist.fdcc.patch:tst:115767"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit, 64-bit, ia-64) - GDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               </criteria>
               <criterion comment="Mstscax.dll version is greater than or equal to 6.0.6001.18000" test_ref="oval:gov.nist.fdcc.patch:tst:115768"/>
               <criterion comment="Mstscax.dll version is less than 6.0.6001.18266" test_ref="oval:gov.nist.fdcc.patch:tst:115769"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit, 64-bit, ia-64) - LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               </criteria>
               <criterion comment="Mstscax.dll version is greater than or equal to 6.0.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1157691"/>
               <criterion comment="Mstscax.dll version is less than 6.0.6001.22443" test_ref="oval:gov.nist.fdcc.patch:tst:1157692"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - GDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <criterion comment="Mstscax.dll version is greater than or equal to 6.0.6002.18000" test_ref="oval:gov.nist.fdcc.patch:tst:1157693"/>
               <criterion comment="Mstscax.dll version is less than 6.0.6002.18045" test_ref="oval:gov.nist.fdcc.patch:tst:1157694"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <criterion comment="Mstscax.dll version is greater than or equal to 6.0.6002.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1157695"/>
               <criterion comment="Mstscax.dll version is less than 6.0.6002.22146" test_ref="oval:gov.nist.fdcc.patch:tst:1157696"/>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11577" version="3" class="patch">
         <metadata>
            <title>MS09-037: Vulnerabilities in Microsoft Active Template Library (ATL) Could Allow Remote Code Execution (973908)</title>
            <affected family="windows">
               <!--<platform>Microsoft Windows XP</platform>-->
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows Server 2008</platform>
            </affected>
            <reference source="Microsoft" ref_id="MS09-037" ref_url="http://www.microsoft.com/technet/security/bulletin/MS09-037.mspx"/>
            <reference source="Microsoft" ref_id="KB973908" ref_url="http://support.microsoft.com/kb/973908"/>
            <reference source="CVE" ref_id="CVE-2008-0015" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0015"/>
            <reference source="CVE" ref_id="CVE-2008-0020" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0020"/>
            <reference source="CVE" ref_id="CVE-2009-0901" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0901"/>
            <reference source="CVE" ref_id="CVE-2009-2493" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2493"/>
            <reference source="CVE" ref_id="CVE-2009-2494" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2494"/>
            <description>Microsoft has released MS09-037 to address security issues in Windows XP, Windows Vista, and Windows Server 2008 as documented by CVE-2008-0015, CVE-2008-0020, CVE-2009-0901, CVE-2009-2493, and CVE-2009-2494 </description>
         </metadata>
         <criteria operator="OR">
            <!--<criteria operator="AND" comment="Microsoft Outlook Express 6 on Windows XP  (32-bit) SP2">
                    <extend_definition comment="Microsoft Windows XP (x86) SP2 is installed" definition_ref="oval:org.mitre.oval:def:754"/>
                    <extend_definition comment="Microsoft Outlook Express 6 for Windows XP/2003 is installed" definition_ref="oval:org.mitre.oval:def:208"/>
                    <criterion comment="Msoe.dll version is less than 6.0.2900.3598" test_ref="oval:org.mitre.oval:tst:9966"/>
                </criteria>
                <criteria operator="AND" comment="Microsoft Outlook Express 6 on Windows XP (32-bit) SP3">
                    <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
                    <extend_definition comment="Microsoft Outlook Express 6 for Windows XP/2003 is installed" definition_ref="oval:org.mitre.oval:def:208"/>
                    <criterion comment="Msoe.dll version is less than 6.0.2900.5843" test_ref="oval:org.mitre.oval:tst:10297"/>
                </criteria>
                <criteria operator="AND" comment="Microsoft Outlook Express 6 on Windows XP (64-bit) SP2">
                    <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
                    <extend_definition comment="Microsoft Outlook Express 6 for Windows XP/2003 is installed" definition_ref="oval:org.mitre.oval:def:208"/>
                    <criterion comment="Msoe.dll version is less than 6.0.3790.4548" test_ref="oval:org.mitre.oval:tst:10588"/>
                </criteria>-->
            <criteria operator="AND" comment="Windows Media Player 9 on Windows XP (32-bit) SP2">
               <extend_definition comment="Microsoft Windows XP (x86) SP2 is installed" definition_ref="oval:org.mitre.oval:def:754"/>
               <extend_definition comment="Windows Media Player v9.0 is installed." definition_ref="oval:org.mitre.oval:def:2147"/>
               <criterion comment="Wmp.dll version is less than 9.0.0.3271" test_ref="oval:org.mitre.oval:tst:10183"/>
            </criteria>
            <criteria operator="AND" comment="Windows Media Player 9 on Windows XP (32-bit) SP3">
               <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
               <extend_definition comment="Windows Media Player v9.0 is installed." definition_ref="oval:org.mitre.oval:def:2147"/>
               <criterion comment="Wmp.dll version is less than 9.0.0.4507" test_ref="oval:org.mitre.oval:tst:10010"/>
            </criteria>
            <criteria operator="AND" comment="Windows Media Player 10 on Windows XP (32-bit) SP2/SP3">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows XP (x86) SP2 is installed" definition_ref="oval:org.mitre.oval:def:754"/>
                  <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
               </criteria>
               <extend_definition comment="Windows Media Player v10.0 is installed." definition_ref="oval:org.mitre.oval:def:2172"/>
               <criterion comment="Wmp.dll version is less than 10.0.0.4074" test_ref="oval:org.mitre.oval:tst:9758"/>
            </criteria>
            <criteria operator="AND" comment="Windows Media Player 10 on Windows XP (64-bit) SP2">
               <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
               <extend_definition comment="Windows Media Player v10.0 is installed." definition_ref="oval:org.mitre.oval:def:2172"/>
               <criterion comment="Wwmp.dll version is less than 10.0.0.4006" test_ref="oval:org.mitre.oval:tst:10291"/>
            </criteria>
            <criteria operator="AND" comment="Windows Media Player 11 on Windows XP (32-bit) SP2/SP3">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows XP (x86) SP2 is installed" definition_ref="oval:org.mitre.oval:def:754"/>
                  <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
               </criteria>
               <extend_definition comment="Windows Media Player v11.0 is installed." definition_ref="oval:org.mitre.oval:def:2126"/>
               <criterion comment="Wmp.dll version is less than 11.0.5721.5268" test_ref="oval:org.mitre.oval:tst:9769"/>
            </criteria>
            <criteria operator="AND" comment="Windows Media Player 11 on Windows XP (64-bit) SP2">
               <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
               <extend_definition comment="Windows Media Player v11.0 is installed." definition_ref="oval:org.mitre.oval:def:2126"/>
               <criterion comment="Wmp.dll version is less than 11.0.5721.5268" test_ref="oval:org.mitre.oval:tst:9769"/>
            </criteria>
            <criteria operator="AND" comment="Windows Media Player 11 on Windows Vista SP1/Server 2008 (32-bit)/(64-bit)/ia64">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               </criteria>
               <criterion comment="Spwmp.dll version is greater than or equal 6.0.6001.18000" test_ref="oval:org.mitre.oval:tst:10473"/>
               <criterion comment="Wmp.dll version is less than 11.0.6001.7007" test_ref="oval:org.mitre.oval:tst:10523"/>
            </criteria>
            <criteria operator="AND" comment="Windows Media Player 11 on Windows Vista SP2/Server 2008 SP2  (32-bit)/(64-bit)/ia64">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <criterion comment="Spwmp.dll version is greater than or equal 6.0.6002.18000" test_ref="oval:org.mitre.oval:tst:10648"/>
               <criterion comment="Wmp.dll version is less than 11.0.6002.18065" test_ref="oval:org.mitre.oval:tst:10003"/>
            </criteria>
            <criteria operator="AND" comment="Windows Media Player 11 on Windows Vista SP1/Server 2008 (32-bit)/(64-bit)/ia64">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               </criteria>
               <criterion comment="Spwmp.dll version is greater than or equal to 6.0.6001.22000" test_ref="oval:org.mitre.oval:tst:10251"/>
               <criterion comment="Wmp.dll version is less than 11.0.6001.7114" test_ref="oval:org.mitre.oval:tst:10759"/>
            </criteria>
            <criteria operator="AND" comment="Windows Media Player 11 on Windows Vista SP2/Server 2008 SP2  (32-bit)/(64-bit)/ia64">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <criterion comment="Spwmp.dll version is greater than or equal 6.0.6002.22000" test_ref="oval:org.mitre.oval:tst:10624"/>
               <criterion comment="Wmp.dll version is less than 11.0.6002.22172" test_ref="oval:org.mitre.oval:tst:10699"/>
            </criteria>
            <criteria operator="AND" comment="Windows ATL Component on Windows XP, Vista, Server 2008">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows XP (x86) SP2 is installed" definition_ref="oval:org.mitre.oval:def:754"/>
                  <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
                  <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <criterion comment="Atl.dll version is less than 3.5.2284.2" test_ref="oval:org.mitre.oval:tst:10563"/>
            </criteria>
            <criteria operator="AND" comment="DHTML Editing Component ActiveX Control on Windows XP">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows XP (x86) SP2 is installed" definition_ref="oval:org.mitre.oval:def:754"/>
                  <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
               </criteria>
               <criterion comment="Dhtmled.ocx version is less than 6.1.0.9247" test_ref="oval:org.mitre.oval:tst:10482"/>
            </criteria>
            <criteria operator="AND" comment="Microsoft MSWebDVD ActiveX Control on Windows XP (32-bit) SP2">
               <extend_definition comment="Microsoft Windows XP (x86) SP2 is installed" definition_ref="oval:org.mitre.oval:def:754"/>
               <criterion comment="Mswebdvd.dll version is less than 6.5.2600.3610" test_ref="oval:org.mitre.oval:tst:10763"/>
            </criteria>
            <criteria operator="AND" comment="Microsoft MSWebDVD ActiveX Control on Windows XP (32-bit) SP3">
               <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
               <criterion comment="Mswebdvd.dll version is less than 6.5.2600.5857" test_ref="oval:org.mitre.oval:tst:10001"/>
            </criteria>
            <criteria operator="AND" comment="Microsoft MSWebDVD ActiveX Control on Windows XP (64-bit) SP2">
               <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
               <criterion comment="Mswebdvd.dll version is less than 6.5.3790.4564" test_ref="oval:org.mitre.oval:tst:10694"/>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11588" version="1" class="patch">
         <metadata>
            <title>MS09-048: Vulnerabilities in Windows TCP/IP Could Allow Remote Code Execution (967723)</title>
            <affected family="windows">
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows Server 2008</platform>
            </affected>
            <reference source="Microsoft" ref_id="MS09-048" ref_url="http://www.microsoft.com/technet/security/bulletin/MS09-048.mspx"/>
            <reference source="Microsoft" ref_id="KB967723" ref_url="http://support.microsoft.com/kb/967723"/>
            <reference source="CVE" ref_id="CVE-2008-4609" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4609"/>
            <reference source="CVE" ref_id="CVE-2009-1925" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1925"/>
            <reference source="CVE" ref_id="CVE-2009-1926" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1926"/>
            <description>Microsoft has released MS09-048 to address security issues in Windows Vista and Windows Server 2008 as documented by CVE-2008-4609, CVE-2009-1925, and CVE-2009-1926</description>
         </metadata>
         <criteria operator="OR">
            <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit, 64-bit, ia-64) - GDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               </criteria>
               <criterion comment="Netevent.dll version is greater than or equal to 6.0.6001.18000" test_ref="oval:gov.nist.fdcc.patch:tst:115881"/>
               <criterion comment="Netevent.dll version is less than 6.0.6001.18311" test_ref="oval:gov.nist.fdcc.patch:tst:115882"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit, 64-bit, ia-64) - LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               </criteria>
               <criterion comment="Netevent.dll version is greater than or equal to 6.0.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:115883"/>
               <criterion comment="Netevent.dll version is less than 6.0.6001.22497" test_ref="oval:gov.nist.fdcc.patch:tst:115884"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - GDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <criterion comment="Netevent.dll version is greater than or equal to 6.0.6002.18000" test_ref="oval:gov.nist.fdcc.patch:tst:115885"/>
               <criterion comment="Netevent.dll version is less than 6.0.6002.18091" test_ref="oval:gov.nist.fdcc.patch:tst:115886"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <criterion comment="Netevent.dll version is greater than or equal to 6.0.6002.22000" test_ref="oval:gov.nist.fdcc.patch:tst:115887"/>
               <criterion comment="Netevent.dll version is less than 6.0.6002.22200" test_ref="oval:gov.nist.fdcc.patch:tst:115888"/>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11589" version="1" class="patch">
         <metadata>
            <title>MS09-049: Vulnerability in Wireless LAN AutoConfig Service Could Allow Remote Code Execution (970710)</title>
            <affected family="windows">
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows Server 2008</platform>
            </affected>
            <reference source="Microsoft" ref_id="MS09-049" ref_url="http://www.microsoft.com/technet/security/bulletin/MS09-049.mspx"/>
            <reference source="Microsoft" ref_id="KB970710" ref_url="http://support.microsoft.com/kb/970710"/>
            <reference source="CVE" ref_id="CVE-2009-1132" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1132"/>
            <description>Microsoft has released MS09-049 to address security issues in Windows Vista and Windows Server 2008 as documented by CVE-2009-1132</description>
         </metadata>
         <criteria operator="OR">
            <criteria operator="AND" comment="Vista, Server 2008 SP1 (64-bit, ia-64) - GDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               </criteria>
               <criterion comment="Wlanmsm.dll version is greater than or equal to 6.0.6001.18000" test_ref="oval:gov.nist.fdcc.patch:tst:115890"/>
               <criterion comment="Wlanmsm.dll version is less than 6.0.6001.18288" test_ref="oval:gov.nist.fdcc.patch:tst:115892"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit, 64-bit, ia-64) - LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               </criteria>
               <criterion comment="Wlanmsm.dll version is greater than or equal to 6.0.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:115893"/>
               <criterion comment="Wlanmsm.dll version is less than 6.0.6001.22468" test_ref="oval:gov.nist.fdcc.patch:tst:115894"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - GDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <criterion comment="Wlanmsm.dll version is greater than or equal to 6.0.6002.18000" test_ref="oval:gov.nist.fdcc.patch:tst:115895"/>
               <criterion comment="Wlanmsm.dll version is less than 6.0.6002.18064" test_ref="oval:gov.nist.fdcc.patch:tst:115896"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <criterion comment="Wlanmsm.dll version is greater than or equal to 6.0.6002.22000" test_ref="oval:gov.nist.fdcc.patch:tst:115897"/>
               <criterion comment="Wlanmsm.dll version is less than 6.0.6002.22170" test_ref="oval:gov.nist.fdcc.patch:tst:115898"/>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11590" version="4" class="patch">
         <metadata>
            <title>MS09-056: Vulnerabilities in Windows CryptoAPI Could Allow Spoofing (974571)</title>
            <affected family="windows">
               <platform>Microsoft Windows XP</platform>
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows Server 2008</platform>
               <platform>Microsoft Windows 7</platform>
               <platform>Microsoft Windows Server 2008 R2</platform>
            </affected>
            <reference source="Microsoft" ref_id="MS09-056" ref_url="http://www.microsoft.com/technet/security/bulletin/MS09-056.mspx"/>
            <reference source="Microsoft" ref_id="KB974571" ref_url="http://support.microsoft.com/kb/974571"/>
            <reference source="CVE" ref_id="CVE-2009-2510" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2510"/>
            <reference source="CVE" ref_id="CVE-2009-2511" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2511"/>
            <description>Microsoft has released MS09-056 to address security issues in Windows XP, Windows Vista, Windows Server 2008, and Windows 7 as documented by CVE-2009-2510 and CVE-2009-2511.</description>
         </metadata>
         <criteria operator="OR">
            <criteria operator="AND" comment="XP (32-bit) SP2">
               <extend_definition comment="Microsoft Windows XP (x86) SP2 is installed" definition_ref="oval:org.mitre.oval:def:754"/>
               <criterion comment="Msasn1.dll version is less than 5.1.2600.3624" test_ref="oval:gov.nist.fdcc.patch:tst:1159000"/>
            </criteria>
            <criteria operator="AND" comment="XP (32-bit) SP3">
               <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
               <criterion comment="Msasn1.dll version is less than 5.1.2600.5875" test_ref="oval:gov.nist.fdcc.patch:tst:1159001"/>
            </criteria>
            <criteria operator="AND" comment="XP (64-bit) SP2">
               <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
               <criterion comment="Msasn1.dll version is less than 5.2.3790.4584" test_ref="oval:gov.nist.fdcc.patch:tst:1159002"/>
            </criteria>
            <criteria operator="AND" comment="The OS is Windows Vista or Server 2008 (Gold, SP1, or SP2) and the GDR or LDR patch is installed">
               <criteria operator="OR" comment="Either Windows Vista or Server 2008 is installed">
                  <extend_definition comment="Microsoft Windows Vista is installed" definition_ref="oval:org.mitre.oval:def:228"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <criteria operator="OR" comment="The Gold, SP1, or SP2 GDR or LDR patch is installed">
                  <criteria operator="AND" comment="Vista, Server 2008 Gold (32-bit, 64-bit, ia-64) - GDR">
                     <criterion comment="Msasn1.dll version is less than  6.0.6000.16922" test_ref="oval:gov.nist.fdcc.patch:tst:1159015"/>
                  </criteria>
                  <criteria operator="AND" comment="Vista, Server 2008 Gold (32-bit, 64-bit, ia-64) - LDR">
                     <criterion comment="Msasn1.dll version is greater than or equal to 6.0.6000.20000" test_ref="oval:gov.nist.fdcc.patch:tst:1159016"/>
                     <criterion comment="Msasn1.dll version is less than  6.0.6000.21122" test_ref="oval:gov.nist.fdcc.patch:tst:1159017"/>
                  </criteria>
                  <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit, 64-bit, ia-64) - GDR">
                     <criterion comment="Msasn1.dll version is greater than or equal to 6.0.6001.18000" test_ref="oval:gov.nist.fdcc.patch:tst:1159003"/>
                     <criterion comment="Msasn1.dll version is less than  6.0.6001.18326" test_ref="oval:gov.nist.fdcc.patch:tst:1159007"/>
                  </criteria>
                  <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit, 64-bit, ia-64) - LDR">
                     <criterion comment="Msasn1.dll version is greater than or equal to 6.0.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1159004"/>
                     <criterion comment="Msasn1.dll version is less than  6.0.6001.22515" test_ref="oval:gov.nist.fdcc.patch:tst:1159008"/>
                  </criteria>
                  <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - GDR">
                     <criterion comment="Msasn1.dll version is greater than or equal to 6.0.6002.18000" test_ref="oval:gov.nist.fdcc.patch:tst:1159005"/>
                     <criterion comment="Msasn1.dll version is less than  6.0.6002.18106" test_ref="oval:gov.nist.fdcc.patch:tst:1159009"/>
                  </criteria>
                  <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - LDR">
                     <criterion comment="Msasn1.dll version is greater than or equal to 6.0.6002.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1159006"/>
                     <criterion comment="Msasn1.dll version is less than  6.0.6002.22218" test_ref="oval:gov.nist.fdcc.patch:tst:1159010"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="The OS is Windows 7 or Server 2008 R2 (Gold) and the  GDR or LDR patch is installed">
               <criteria operator="OR" comment="Either Windows 7 or Server 2008 R2 is installed">
                  <extend_definition comment="Microsoft Windows 7 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:6165"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:5950"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:6438"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed" definition_ref="oval:org.mitre.oval:def:5954"/>
               </criteria>
               <criteria operator="OR" comment="The (Gold) GDR or LDR patch is installed">
                  <criteria operator="AND" comment="7, Server 2008 R2 (Gold) - GDR">
                     <criterion comment="Msasn1.dll version is greater than or equal to 6.1.7600.16000" test_ref="oval:gov.nist.fdcc.patch:tst:1159011"/>
                     <criterion comment="Msasn1.dll version is less than  6.1.7600.16415" test_ref="oval:gov.nist.fdcc.patch:tst:1159013"/>
                  </criteria>
                  <criteria operator="AND" comment="7, Server 2008 R2 (Gold) - LDR">
                     <criterion comment="Msasn1.dll version is greater than or equal to 6.1.7600.20000" test_ref="oval:gov.nist.fdcc.patch:tst:1159012"/>
                     <criterion comment="Msasn1.dll version is less than  6.1.7600.20518" test_ref="oval:gov.nist.fdcc.patch:tst:1159014"/>
                  </criteria>
               </criteria>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11593" version="1" class="patch">
         <metadata>
            <title>MS09-059: Vulnerability in Local Security Authority Subsystem Service Could Allow Denial of Service (975467)</title>
            <affected family="windows">
               <platform>Microsoft Windows XP</platform>
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows Server 2008</platform>
               <platform>Microsoft Windows 7</platform>
               <platform>Microsoft Windows Server 2008 R2</platform>
            </affected>
            <reference source="Microsoft" ref_id="MS09-059" ref_url="http://www.microsoft.com/technet/security/bulletin/MS09-059.mspx"/>
            <reference source="Microsoft" ref_id="KB975467" ref_url="http://support.microsoft.com/kb/975467"/>
            <reference source="CVE" ref_id="CVE-2009-2524" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2524"/>
            <description>Microsoft has released MS09-059 to address security issues in Windows XP, Windows Vista, Windows Server 2008, and Windows 7 as documented by CVE-2009-2524</description>
         </metadata>
         <criteria operator="OR">
            <criteria operator="AND" comment="XP (32-bit) SP2">
               <extend_definition comment="Microsoft Windows XP (x86) SP2 is installed" definition_ref="oval:org.mitre.oval:def:754"/>
               <criterion comment="Msv1_0.dll version is less than 5.1.2600.3625" test_ref="oval:gov.nist.fdcc.patch:tst:1159300"/>
            </criteria>
            <criteria operator="AND" comment="XP (32-bit) SP3">
               <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
               <criterion comment="Msv1_0.dll version is less than 5.1.2600.5876" test_ref="oval:gov.nist.fdcc.patch:tst:1159301"/>
            </criteria>
            <criteria operator="AND" comment="XP (64-bit) SP2">
               <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
               <criterion comment="Msv1_0.dll version is less than 5.2.3790.4587" test_ref="oval:gov.nist.fdcc.patch:tst:1159302"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit,64-bit, ia-64) - GDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               </criteria>
               <criterion comment="Msv1_0.dll version is greater than or equal to 6.0.6001.18000" test_ref="oval:gov.nist.fdcc.patch:tst:1159303"/>
               <criterion comment="Msv1_0.dll version is less than  6.0.6001.18330" test_ref="oval:gov.nist.fdcc.patch:tst:1159307"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit, 64-bit, ia-64) - LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               </criteria>
               <criterion comment="Msv1_0.dll version is greater than or equal to 6.0.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1159304"/>
               <criterion comment="Msv1_0.dll version is less than  6.0.6001.22518" test_ref="oval:gov.nist.fdcc.patch:tst:1159308"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - GDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <criterion comment="Msv1_0.dll version is greater than or equal to 6.0.6002.18000" test_ref="oval:gov.nist.fdcc.patch:tst:1159305"/>
               <criterion comment="Msv1_0.dll version is less than  6.0.6002.18111" test_ref="oval:gov.nist.fdcc.patch:tst:1159309"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <criterion comment="Msv1_0.dll version is greater than or equal to 6.0.6002.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1159306"/>
               <criterion comment="Msv1_0.dll version is less than  6.0.6002.22223" test_ref="oval:gov.nist.fdcc.patch:tst:1159310"/>
            </criteria>
            <criteria operator="AND" comment="7, Server 2008 R2 (32-bit, 64-bit, ia-64) - GDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows 7 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:6165"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:5950"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:6438"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed" definition_ref="oval:org.mitre.oval:def:5954"/>
               </criteria>
               <criterion comment="Msv1_0.dll version is greater than or equal to 6.1.7600.16000" test_ref="oval:gov.nist.fdcc.patch:tst:1159311"/>
               <criterion comment="Msv1_0.dll version is less than  6.1.7600.16420" test_ref="oval:gov.nist.fdcc.patch:tst:1159313"/>
            </criteria>
            <criteria operator="AND" comment="7, Server 2008 R2 (32-bit, 64-bit, ia-64) - LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows 7 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:6165"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:5950"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:6438"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed" definition_ref="oval:org.mitre.oval:def:5954"/>
               </criteria>
               <criterion comment="Msv1_0.dll version is greater than or equal to 6.1.7600.20000" test_ref="oval:gov.nist.fdcc.patch:tst:1159312"/>
               <criterion comment="Msv1_0.dll version is less than  6.1.7600.20524" test_ref="oval:gov.nist.fdcc.patch:tst:1159314"/>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11601" version="3" class="patch">
         <metadata>
            <title>MS09-051: Vulnerabilities in Windows Media Runtime Could Allow Remote Code Execution (975682)</title>
            <affected family="windows">
               <platform>Microsoft Windows XP</platform>
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows Server 2008</platform>
            </affected>
            <reference source="Microsoft" ref_id="MS09-051" ref_url="http://www.microsoft.com/technet/security/bulletin/MS09-051.mspx"/>
            <reference source="Microsoft" ref_id="KB975682" ref_url="http://support.microsoft.com/kb/975682"/>
            <reference source="CVE" ref_id="CVE-2009-0555" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0555"/>
            <reference source="CVE" ref_id="CVE-2009-2525" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2525"/>
            <description>Microsoft has released MS09-051 to address security issues in Windows XP, Windows Vista, and Windows Server 2008 as documented by CVE-2009-0555 and CVE-2009-2525</description>
         </metadata>
         <criteria operator="OR">
            <criteria operator="AND">
               <extend_definition comment="Microsoft Windows XP (x86) SP2 is installed" definition_ref="oval:org.mitre.oval:def:754"/>
               <extend_definition comment="Windows Media Player v9.0 is installed." definition_ref="oval:org.mitre.oval:def:2147"/>
               <criterion comment="Wmspdmod.dll version is less than 9.0.0.3269" test_ref="oval:gov.nist.fdcc.patch:tst:116010"/>
            </criteria>
            <criteria operator="AND">
               <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
               <extend_definition comment="Windows Media Player v9.0 is installed." definition_ref="oval:org.mitre.oval:def:2147"/>
               <criterion comment="Wmspdmod.dll version is less than 9.0.0.4505" test_ref="oval:gov.nist.fdcc.patch:tst:116011"/>
            </criteria>
            <criteria operator="AND">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows XP (x86) SP2 is installed" definition_ref="oval:org.mitre.oval:def:754"/>
                  <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
               </criteria>
               <extend_definition comment="Windows Media Player v10.0 is installed." definition_ref="oval:org.mitre.oval:def:2172"/>
               <criterion comment="Wmspdmod.dll version is less than 10.0.0.3704" test_ref="oval:gov.nist.fdcc.patch:tst:116012"/>
            </criteria>
            <criteria operator="AND">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows XP (x86) SP2 is installed" definition_ref="oval:org.mitre.oval:def:754"/>
                  <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
               </criteria>
               <extend_definition comment="Windows Media Player v10.0 is installed." definition_ref="oval:org.mitre.oval:def:2172"/>
               <criterion comment="Wmspdmod.dll version is greater than or equal to 10.0.0.4000" test_ref="oval:gov.nist.fdcc.patch:tst:116013"/>
               <criterion comment="Wmspdmod.dll version is less than 10.0.0.4070" test_ref="oval:gov.nist.fdcc.patch:tst:116014"/>
            </criteria>
            <criteria operator="AND">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows XP (x86) SP2 is installed" definition_ref="oval:org.mitre.oval:def:754"/>
                  <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
               </criteria>
               <extend_definition comment="Windows Media Player v10.0 is installed." definition_ref="oval:org.mitre.oval:def:2172"/>
               <criterion comment="Wmspdmod.dll version is greater than or equal to 10.0.0.4300" test_ref="oval:gov.nist.fdcc.patch:tst:116015"/>
               <criterion comment="Wmspdmod.dll version is less than 10.0.0.4365" test_ref="oval:gov.nist.fdcc.patch:tst:116016"/>
            </criteria>
            <criteria operator="AND">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows XP (x86) SP2 is installed" definition_ref="oval:org.mitre.oval:def:754"/>
                  <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
               </criteria>
               <extend_definition comment="Windows Media Player v11.0 is installed." definition_ref="oval:org.mitre.oval:def:2126"/>
               <criterion comment="Wmspdmod.dll version is less than 11.0.5721.5263" test_ref="oval:gov.nist.fdcc.patch:tst:116017"/>
            </criteria>
            <criteria operator="AND">
               <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
               <extend_definition comment="Windows Media Player v10.0 is installed." definition_ref="oval:org.mitre.oval:def:2172"/>
               <criterion comment="Wmspdmod.dll version is less than 10.0.0.3819" test_ref="oval:gov.nist.fdcc.patch:tst:116018"/>
            </criteria>
            <criteria operator="AND">
               <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
               <extend_definition comment="Windows Media Player v10.0 is installed." definition_ref="oval:org.mitre.oval:def:2172"/>
               <criterion comment="Wmspdmod.dll version is greater than or equal to 10.0.0.4000" test_ref="oval:gov.nist.fdcc.patch:tst:116013"/>
               <criterion comment="Wmspdmod.dll version is less than 10.0.0.4004" test_ref="oval:gov.nist.fdcc.patch:tst:1160101"/>
            </criteria>
            <criteria operator="AND">
               <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
               <extend_definition comment="Windows Media Player v11.0 is installed." definition_ref="oval:org.mitre.oval:def:2126"/>
               <criterion comment="Wmspdmod.dll version is less than 11.0.5721.5263" test_ref="oval:gov.nist.fdcc.patch:tst:116017"/>
            </criteria>
            <criteria operator="AND">
               <extend_definition comment="Microsoft Windows XP is installed" definition_ref="oval:org.mitre.oval:def:105"/>
               <criterion comment="Msaud32.acm version is less than 8.0.0.4502" test_ref="oval:gov.nist.fdcc.patch:tst:1160110"/>
            </criteria>
            <criteria operator="AND" comment="The OS is Windows Vista or Server 2008 (Gold, SP1, or SP2) and the GDR or LDR patch is installed">
               <criteria operator="OR" comment="Either Windows Vista or Server 2008 is installed">
                  <extend_definition comment="Microsoft Windows Vista is installed" definition_ref="oval:org.mitre.oval:def:228"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <criteria operator="OR" comment="The Gold, SP1, or SP2 GDR or LDR patch is installed">
                  <criteria operator="AND" comment="Vista, Server 2008 Gold (32-bit, 64-bit, ia-64) - GDR">
                     <criterion comment="Wmspdmod.dll version is less than 11.0.6000.6350" test_ref="oval:gov.nist.fdcc.patch:tst:1160111"/>
                  </criteria>
                  <criteria operator="AND" comment="Vista, Server 2008 Gold (32-bit, 64-bit, ia-64) - LDR">
                     <criterion comment="Wmspdmod.dll version is greater than or equal to 11.0.6000.6500" test_ref="oval:gov.nist.fdcc.patch:tst:1160112"/>
                     <criterion comment="Wmspdmod.dll version is less than 11.0.6000.6509" test_ref="oval:gov.nist.fdcc.patch:tst:1160113"/>
                  </criteria>
                  <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit, 64-bit, ia-64) - GDR">
                     <criterion comment="Wmspdmod.dll version is greater than or equal to 11.0.6001.7000" test_ref="oval:gov.nist.fdcc.patch:tst:1160103"/>
                     <criterion comment="Wmspdmod.dll version is less than 11.0.6001.7005" test_ref="oval:gov.nist.fdcc.patch:tst:1160104"/>
                  </criteria>
                  <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit, 64-bit, ia-64) - LDR">
                     <criterion comment="Wmspdmod.dll version is greater than or equal to 11.0.6001.7100" test_ref="oval:gov.nist.fdcc.patch:tst:1160105"/>
                     <criterion comment="Wmspdmod.dll version is less than 11.0.6001.7111" test_ref="oval:gov.nist.fdcc.patch:tst:1160106"/>
                  </criteria>
                  <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - GDR">
                     <criterion comment="Wmspdmod.dll version is greater than or equal to 11.0.6002.18000" test_ref="oval:gov.nist.fdcc.patch:tst:1160107"/>
                     <criterion comment="Wmspdmod.dll version is less than 11.0.6002.18034" test_ref="oval:gov.nist.fdcc.patch:tst:1160108"/>
                  </criteria>
                  <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - LDR">
                     <criterion comment="Wmspdmod.dll version is greater than or equal to 11.0.6002.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1160109"/>
                     <criterion comment="Wmspdmod.dll version is less than 11.0.6002.22131" test_ref="oval:gov.nist.fdcc.patch:tst:1160100"/>
                  </criteria>
               </criteria>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11602" version="2" class="patch">
         <metadata>
            <title>MS09-053: Vulnerabilities in FTP Service for Internet Information Services Could Allow Remote Code Execution (975254)</title>
            <affected family="windows">
               <platform>Microsoft Windows XP</platform>
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows Server 2008</platform>
            </affected>
            <reference source="Microsoft" ref_id="MS09-053" ref_url="http://www.microsoft.com/technet/security/bulletin/MS09-053.mspx"/>
            <reference source="Microsoft" ref_id="KB975254" ref_url="http://support.microsoft.com/kb/975254"/>
            <reference source="CVE" ref_id="CVE-2009-2521" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2521"/>
            <reference source="CVE" ref_id="CVE-2009-3023" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3023"/>
            <description>Microsoft has released MS09-053 to address security issues in Windows XP, Windows Vista, and Windows Server 2008 as documented by CVE-2009-2521 and CVE-2009-3023</description>
         </metadata>
         <criteria operator="OR">
            <criteria operator="AND">
               <extend_definition comment="Microsoft Windows XP (x86) SP2 is installed" definition_ref="oval:org.mitre.oval:def:754"/>
               <criterion comment="The FTP component is installed" test_ref="oval:gov.nist.fdcc.patch:tst:4600002"/>
               <criterion comment="Ftpsvc2.dll version is less than 6.0.2600.3624" test_ref="oval:gov.nist.fdcc.patch:tst:116020"/>
            </criteria>
            <criteria operator="AND">
               <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
               <criterion comment="The FTP component is installed" test_ref="oval:gov.nist.fdcc.patch:tst:4600002"/>
               <criterion comment="Ftpsvc2.dll version is less than  6.0.2600.5875" test_ref="oval:gov.nist.fdcc.patch:tst:116021"/>
            </criteria>
            <criteria operator="AND">
               <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
               <criterion comment="Ftpsvc2.dll version is less than 6.0.3790.4584  " test_ref="oval:gov.nist.fdcc.patch:tst:116022"/>
            </criteria>
            <criteria operator="AND" comment="The OS is Windows Vista or Server 2008 (Gold, SP1, or SP2) and the GDR or LDR patch is installed">
               <criteria operator="OR" comment="Either Windows Vista or Server 2008 is installed">
                  <extend_definition comment="Microsoft Windows Vista is installed" definition_ref="oval:org.mitre.oval:def:228"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <criteria operator="OR" comment="The Gold, SP1, or SP2 GDR or LDR patch is installed">
                  <criteria operator="AND" comment="Vista, Server 2008 Gold (32-bit, 64-bit, ia-64) - GDR">
                     <criterion comment="Ftpsvc2.dll version is greater than or equal to 7.0.6000.16000" test_ref="oval:gov.nist.fdcc.patch:tst:1160201"/>
                     <criterion comment="Ftpsvc2.dll version is less than 7.0.6000.16923" test_ref="oval:gov.nist.fdcc.patch:tst:1160202"/>
                  </criteria>
                  <criteria operator="AND" comment="Vista, Server 2008 Gold (32-bit, 64-bit, ia-64) - LDR">
                     <criterion comment="Ftpsvc2.dll version is greater than or equal to 7.0.6000.20000" test_ref="oval:gov.nist.fdcc.patch:tst:1160203"/>
                     <criterion comment="Ftpsvc2.dll version is less than 7.0.6000.21123" test_ref="oval:gov.nist.fdcc.patch:tst:1160204"/>
                  </criteria>
                  <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit, 64-bit, ia-64) - GDR">
                     <criterion comment="Ftpsvc2.dll version is greater than or equal to 7.0.6001.18000" test_ref="oval:gov.nist.fdcc.patch:tst:116023"/>
                     <criterion comment="Ftpsvc2.dll version is less than 7.0.6001.18327" test_ref="oval:gov.nist.fdcc.patch:tst:116024"/>
                  </criteria>
                  <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit, 64-bit, ia-64) - LDR">
                     <criterion comment="Ftpsvc2.dll version is greater than or equal to 7.0.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:116025"/>
                     <criterion comment="Ftpsvc2.dll version is less than 7.0.6001.22516" test_ref="oval:gov.nist.fdcc.patch:tst:116026"/>
                  </criteria>
                  <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - GDR">
                     <criterion comment="Ftpsvc2.dll version is greater than or equal to 7.0.6002.18000" test_ref="oval:gov.nist.fdcc.patch:tst:116027"/>
                     <criterion comment="Ftpsvc2.dll version is less than 7.0.6002.18107" test_ref="oval:gov.nist.fdcc.patch:tst:116028"/>
                  </criteria>
                  <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - LDR">
                     <criterion comment="Ftpsvc2.dll version is greater than or equal to 7.0.6002.22000" test_ref="oval:gov.nist.fdcc.patch:tst:116029"/>
                     <criterion comment="Ftpsvc2.dll version is less than 7.0.6002.22219" test_ref="oval:gov.nist.fdcc.patch:tst:1160200"/>
                  </criteria>
               </criteria>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11620" version="1" class="patch">
         <metadata>
            <title>MS09-063: Vulnerability in Web Services on Devices API Could Allow Remote Code Execution (973565)</title>
            <affected family="windows">
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows Server 2008</platform>
            </affected>
            <reference source="Microsoft" ref_id="MS09-063" ref_url="http://www.microsoft.com/technet/security/bulletin/MS09-063.mspx"/>
            <reference source="Microsoft" ref_id="KB973565" ref_url="http://support.microsoft.com/kb/973565"/>
            <reference source="CVE" ref_id="CVE-2009-2512" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2512"/>
            <description>Microsoft has released MS09-063 to address security issues in Windows Vista and Windows Server 2008 as documented by CVE-2009-2512</description>
         </metadata>
         <criteria operator="OR">
            <criteria operator="AND" comment="Vista, Server 2008 SP1 (64-bit, ia-64) - GDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               </criteria>
               <criterion comment="Wsdapi.dll version is greater than or equal to 6.0.6001.18000" test_ref="oval:gov.nist.fdcc.patch:tst:116200"/>
               <criterion comment="Wsdapi.dll version is less than 6.0.6001.18306" test_ref="oval:gov.nist.fdcc.patch:tst:116201"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit, 64-bit, ia-64) - LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               </criteria>
               <criterion comment="Wsdapi.dll version is greater than or equal to 6.0.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:116202"/>
               <criterion comment="Wsdapi.dll version is less than 6.0.6001.22491" test_ref="oval:gov.nist.fdcc.patch:tst:116203"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - GDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <criterion comment="Wsdapi.dll version is greater than or equal to 6.0.6002.18000" test_ref="oval:gov.nist.fdcc.patch:tst:116204"/>
               <criterion comment="Wsdapi.dll version is less than 6.0.6002.18085" test_ref="oval:gov.nist.fdcc.patch:tst:116205"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <criterion comment="Wsdapi.dll version is greater than or equal to 6.0.6002.22000" test_ref="oval:gov.nist.fdcc.patch:tst:116206"/>
               <criterion comment="Wsdapi.dll version is less than 6.0.6002.22194" test_ref="oval:gov.nist.fdcc.patch:tst:116207"/>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11632" version="1" class="patch">
         <metadata>
            <title>MS09-071: Vulnerabilities in Internet Authentication Service Could Allow Remote Code Execution (974318)</title>
            <affected family="windows">
               <platform>Microsoft Windows XP</platform>
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows Server 2008</platform>
            </affected>
            <reference source="Microsoft" ref_id="MS09-071" ref_url="http://www.microsoft.com/technet/security/bulletin/MS09-071.mspx"/>
            <reference source="Microsoft" ref_id="KB974318" ref_url="http://support.microsoft.com/kb/974318"/>
            <reference source="CVE" ref_id="CVE-2009-2505" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2505"/>
            <reference source="CVE" ref_id="CVE-2009-3677" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3677"/>
            <description>Microsoft has released MS09-071 to address security issues in Windows XP, Windows Vista, and Windows Server 2008 as documented by CVE-2009-2505 and CVE-2009-3677</description>
         </metadata>
         <criteria operator="OR">
            <criteria operator="AND" comment="XP (32-bit) SP2">
               <extend_definition comment="Microsoft Windows XP (x86) SP2 is installed" definition_ref="oval:org.mitre.oval:def:754"/>
               <criterion comment="Rastls.dll version is less than 5.1.2600.3632" test_ref="oval:gov.nist.fdcc.patch:tst:116320"/>
            </criteria>
            <criteria operator="AND" comment="XP (32-bit) SP3">
               <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
               <criterion comment="Rastls.dll version is less than 5.1.2600.5886" test_ref="oval:gov.nist.fdcc.patch:tst:116321"/>
            </criteria>
            <criteria operator="AND" comment="XP (64-bit) SP2">
               <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
               <criterion comment="Rastls.dll version is less than 5.2.3790.4600" test_ref="oval:gov.nist.fdcc.patch:tst:116322"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit,64-bit, ia-64) - GDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               </criteria>
               <criterion comment="Rastls.dll version is greater than or equal to 6.0.6001.18000" test_ref="oval:gov.nist.fdcc.patch:tst:116323"/>
               <criterion comment="Rastls.dll version is less than  6.0.6001.18336" test_ref="oval:gov.nist.fdcc.patch:tst:116324"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit, 64-bit, ia-64) - LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               </criteria>
               <criterion comment="Rastls.dll version is greater than or equal to 6.0.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:116325"/>
               <criterion comment="Rastls.dll version is less than  6.0.6001.22536" test_ref="oval:gov.nist.fdcc.patch:tst:116326"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - GDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <criterion comment="Rastls.dll version is greater than or equal to 6.0.6002.18000" test_ref="oval:gov.nist.fdcc.patch:tst:116327"/>
               <criterion comment="Rastls.dll version is less than  6.0.6002.18116" test_ref="oval:gov.nist.fdcc.patch:tst:116328"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <criterion comment="Rastls.dll version is greater than or equal to 6.0.6002.22000" test_ref="oval:gov.nist.fdcc.patch:tst:116329"/>
               <criterion comment="Rastls.dll version is less than  6.0.6002.22240" test_ref="oval:gov.nist.fdcc.patch:tst:1163291"/>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11640" version="1" class="patch">
         <metadata>
            <title>MS10-001: Vulnerability in the Embedded OpenType Font Engine Could Allow Remote Code Execution (972270)</title>
            <affected family="windows">
               <platform>Microsoft Windows XP</platform>
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows Server 2008</platform>
               <platform>Microsoft Windows 7</platform>
               <platform>Microsoft Windows Server 2008 R2</platform>
            </affected>
            <reference source="Microsoft" ref_id="MS10-001" ref_url="http://www.microsoft.com/technet/security/bulletin/MS10-001.mspx"/>
            <reference source="Microsoft" ref_id="KB972270" ref_url="http://support.microsoft.com/kb/972270"/>
            <reference source="CVE" ref_id="CVE-2010-0018" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0018"/>
            <description>Microsoft has released MS10-001 to address security issues in Windows XP, Windows Vista, Windows Server 2008, and Windows 7 as documented by CVE-2010-0018</description>
         </metadata>
         <criteria operator="OR">
            <criteria operator="AND" comment="XP (32-bit) SP2">
               <extend_definition comment="Microsoft Windows XP (x86) SP2 is installed" definition_ref="oval:org.mitre.oval:def:754"/>
               <criterion comment="Fontsub.dll version is less than 5.1.2600.3634" test_ref="oval:gov.nist.fdcc.patch:tst:116400"/>
            </criteria>
            <criteria operator="AND" comment="XP (32-bit) SP3">
               <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
               <criterion comment="Fontsub.dll version is less than 5.1.2600.5888" test_ref="oval:gov.nist.fdcc.patch:tst:116401"/>
            </criteria>
            <criteria operator="AND" comment="XP (64-bit) SP2">
               <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
               <criterion comment="Fontsub.dll version is less than 5.2.3790.4603" test_ref="oval:gov.nist.fdcc.patch:tst:116402"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit,64-bit, ia-64) - GDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               </criteria>
               <criterion comment="Fontsub.dll version is greater than or equal to 6.0.6001.18000" test_ref="oval:gov.nist.fdcc.patch:tst:116403"/>
               <criterion comment="Fontsub.dll version is less than  6.0.6001.18344" test_ref="oval:gov.nist.fdcc.patch:tst:116404"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit, 64-bit, ia-64) - LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               </criteria>
               <criterion comment="Fontsub.dll version is greater than or equal to 6.0.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:116405"/>
               <criterion comment="Fontsub.dll version is less than  6.0.6001.22544" test_ref="oval:gov.nist.fdcc.patch:tst:116406"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - GDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <criterion comment="Fontsub.dll version is greater than or equal to 6.0.6002.18000" test_ref="oval:gov.nist.fdcc.patch:tst:116407"/>
               <criterion comment="Fontsub.dll version is less than  6.0.6002.18124" test_ref="oval:gov.nist.fdcc.patch:tst:116408"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <criterion comment="Fontsub.dll version is greater than or equal to 6.0.6002.22000" test_ref="oval:gov.nist.fdcc.patch:tst:116409"/>
               <criterion comment="Fontsub.dll version is less than  6.0.6002.22247" test_ref="oval:gov.nist.fdcc.patch:tst:1164090"/>
            </criteria>
            <criteria operator="AND" comment="7, Server 2008 R2 (32-bit, 64-bit, ia-64) - GDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows 7 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:6165"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:5950"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:6438"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed" definition_ref="oval:org.mitre.oval:def:5954"/>
               </criteria>
               <criterion comment="Fontsub.dll version is greater than or equal to 6.1.7600.16000" test_ref="oval:gov.nist.fdcc.patch:tst:1164091"/>
               <criterion comment="Fontsub.dll version is less than  6.1.7600.16444" test_ref="oval:gov.nist.fdcc.patch:tst:1164092"/>
            </criteria>
            <criteria operator="AND" comment="7, Server 2008 R2 (32-bit, 64-bit, ia-64) - LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows 7 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:6165"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:5950"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:6438"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed" definition_ref="oval:org.mitre.oval:def:5954"/>
               </criteria>
               <criterion comment="Fontsub.dll version is greater than or equal to 6.1.7600.20000" test_ref="oval:gov.nist.fdcc.patch:tst:1164093"/>
               <criterion comment="Fontsub.dll version is less than  6.1.7600.20553" test_ref="oval:gov.nist.fdcc.patch:tst:1164094"/>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11650" version="2" class="patch">
         <metadata>
            <title>MS10-013: Vulnerability in Microsoft DirectShow Could Allow Remote Code Execution (977935)</title>
            <affected family="windows">
               <platform>Microsoft Windows XP</platform>
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows Server 2008</platform>
               <platform>Microsoft Windows 7</platform>
               <platform>Microsoft Windows Server 2008 R2</platform>
            </affected>
            <reference source="Microsoft" ref_id="MS10-013" ref_url="http://www.microsoft.com/technet/security/bulletin/MS10-013.mspx"/>
            <reference source="Microsoft" ref_id="KB977935" ref_url="http://support.microsoft.com/kb/977935"/>
            <reference source="Microsoft" ref_id="KB975560" ref_url="http://support.microsoft.com/kb/975560"/>
            <reference source="Microsoft" ref_id="KB977914" ref_url="http://support.microsoft.com/kb/977914"/>
            <reference source="CVE" ref_id="CVE-2010-0250" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0250"/>
            <description>Microsoft has released MS10-013 to address security issues in Windows XP, Windows Vista, Windows Server 2008, and Windows 7 as documented by CVE-2010-0250</description>
         </metadata>
         <criteria operator="OR">
            <criteria operator="AND" comment="XP (32-bit) SP2">
               <extend_definition comment="Microsoft Windows XP (x86) SP2 is installed" definition_ref="oval:org.mitre.oval:def:754"/>
               <criteria operator="OR">
                  <criterion comment="Quartz.dll version is less than 6.5.2600.3649" test_ref="oval:gov.nist.fdcc.patch:tst:116500"/>
                  <criterion comment="Avifil32.dll version is less than 5.1.2600.3649" test_ref="oval:gov.nist.fdcc.patch:tst:1165095"/>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="XP (32-bit) SP3">
               <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
               <criteria operator="OR">
                  <criterion comment="Quartz.dll version is less than 6.5.2600.5908" test_ref="oval:gov.nist.fdcc.patch:tst:116501"/>
                  <criterion comment="Avifil32.dll version is less than 5.1.2600.5908" test_ref="oval:gov.nist.fdcc.patch:tst:1165096"/>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="XP (64-bit) SP2">
               <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
               <criteria operator="OR">
                  <criterion comment="Quartz.dll version is less than 6.5.3790.4625" test_ref="oval:gov.nist.fdcc.patch:tst:116502"/>
                  <criterion comment="Avifil32.dll version is less than 5.2.3790.4625" test_ref="oval:gov.nist.fdcc.patch:tst:1165097"/>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit,64-bit, ia-64) - GDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               </criteria>
               <criterion comment="Quartz.dll version is greater than or equal to 6.6.6001.18000" test_ref="oval:gov.nist.fdcc.patch:tst:116503"/>
               <criterion comment="Quartz.dll version is less than  6.6.6001.18389" test_ref="oval:gov.nist.fdcc.patch:tst:116504"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit, 64-bit, ia-64) - LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               </criteria>
               <criterion comment="Quartz.dll version is greater than or equal to 6.6.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:116505"/>
               <criterion comment="Quartz.dll version is less than  6.6.6001.22590" test_ref="oval:gov.nist.fdcc.patch:tst:116506"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - GDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <criterion comment="Quartz.dll version is greater than or equal to 6.6.6002.18000" test_ref="oval:gov.nist.fdcc.patch:tst:116507"/>
               <criterion comment="Quartz.dll version is less than  6.6.6002.18158" test_ref="oval:gov.nist.fdcc.patch:tst:116508"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <criterion comment="Quartz.dll version is greater than or equal to 6.6.6002.22000" test_ref="oval:gov.nist.fdcc.patch:tst:116509"/>
               <criterion comment="Quartz.dll version is less than  6.6.6002.22295" test_ref="oval:gov.nist.fdcc.patch:tst:1165090"/>
            </criteria>
            <criteria operator="AND" comment="7, Server 2008 R2 (32-bit, 64-bit, ia-64) - GDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows 7 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:6165"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:5950"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:6438"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed" definition_ref="oval:org.mitre.oval:def:5954"/>
               </criteria>
               <criterion comment="Quartz.dll version is greater than or equal to 6.6.7600.16000" test_ref="oval:gov.nist.fdcc.patch:tst:1165091"/>
               <criterion comment="Quartz.dll version is less than  6.6.7600.16490" test_ref="oval:gov.nist.fdcc.patch:tst:1165092"/>
            </criteria>
            <criteria operator="AND" comment="7, Server 2008 R2 (32-bit, 64-bit, ia-64) - LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows 7 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:6165"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:5950"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:6438"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed" definition_ref="oval:org.mitre.oval:def:5954"/>
               </criteria>
               <criterion comment="Quartz.dll version is greater than or equal to 6.6.7600.20000" test_ref="oval:gov.nist.fdcc.patch:tst:1165093"/>
               <criterion comment="Quartz.dll version is less than  6.6.7600.20600" test_ref="oval:gov.nist.fdcc.patch:tst:1165094"/>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11653" version="4" class="patch">
         <metadata>
            <title>MS10-016: Vulnerability in Windows Movie Maker Could Allow Remote Code Execution (975561)</title>
            <affected family="windows">
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows 7</platform>
               <product>Movie Maker 2.6</product>
            </affected>
            <reference source="Microsoft" ref_id="MS10-016" ref_url="http://www.microsoft.com/technet/security/bulletin/MS10-016.mspx"/>
            <reference source="Microsoft" ref_id="KB975561" ref_url="http://support.microsoft.com/kb/975561"/>
            <reference source="CVE" ref_id="CVE-2010-0265" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0265"/>
            <description>Microsoft has released MS10-016 to address security issues in Windows XP, Windows Vista, and Windows 7 as documented by CVE-2010-0265</description>
         </metadata>
         <criteria operator="AND" comment="Vulnerable Movie Maker 2.6 on Microsoft Windows Vista, Windows 7">
            <criteria operator="OR">
               <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
               <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
               <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
               <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
               <extend_definition comment="Microsoft Windows 7 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:6165"/>
               <extend_definition comment="Microsoft Windows 7 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:5950"/>
            </criteria>
            <extend_definition comment="Windows Movie Maker 2.6 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115292"/>
            <criterion comment="Moviemk.exe version is less than 2.6.4038.0" test_ref="oval:gov.nist.fdcc.patch:tst:1165391"/>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11655" version="2" class="patch">
         <metadata>
            <title>MS10-019: Vulnerabilities in Windows Could Allow Remote Code Execution (981210)</title>
            <affected family="windows">
               <platform>Microsoft Windows XP</platform>
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows Server 2008</platform>
               <platform>Microsoft Windows 7</platform>
               <platform>Microsoft Windows Server 2008 R2</platform>
            </affected>
            <reference source="Microsoft" ref_id="MS10-019" ref_url="http://www.microsoft.com/technet/security/bulletin/MS10-019.mspx"/>
            <reference source="Microsoft" ref_id="KB981210" ref_url="http://support.microsoft.com/kb/981210"/>
            <reference source="CVE" ref_id="CVE-2010-0486" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0486"/>
            <reference source="CVE" ref_id="CVE-2010-0487" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0487"/>
            <description>Microsoft has released MS10-019 to address security issues in Windows Authenticode Verification as documented by CVE-2010-0486 and CVE-2010-0487</description>
         </metadata>
         <criteria operator="OR">
            <criteria operator="AND" comment="XP (32-bit) SP2">
               <extend_definition comment="Microsoft Windows XP (x86) SP2 is installed" definition_ref="oval:org.mitre.oval:def:754"/>
               <criteria operator="OR">
                  <criterion comment="Wintrust.dll version is less than 5.131.2600.3661" test_ref="oval:gov.nist.fdcc.patch:tst:116551"/>
                  <criterion comment="Cabview.dll version is less than 6.0.2900.3663" test_ref="oval:gov.nist.fdcc.patch:tst:116552"/>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="XP (32-bit) SP3">
               <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
               <criteria operator="OR">
                  <criterion comment="Wintrust.dll version is less than 5.131.2600.5922" test_ref="oval:gov.nist.fdcc.patch:tst:116553"/>
                  <criterion comment="Cabview.dll version is less than 6.0.2900.5927" test_ref="oval:gov.nist.fdcc.patch:tst:116554"/>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="XP (64-bit) SP2">
               <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
               <criteria operator="OR">
                  <criterion comment="Wintrust.dll version is less than 5.131.3790.4642" test_ref="oval:gov.nist.fdcc.patch:tst:116555"/>
                  <criterion comment="Cabview.dll version is less than 6.0.3790.4649" test_ref="oval:gov.nist.fdcc.patch:tst:116556"/>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP1/SP2 (32-bit,64-bit, ia-64) - GDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <criteria operator="OR">
                  <criteria operator="AND">
                     <criterion comment="Wintrust.dll version is greater than or equal to 6.0.6001.18000" test_ref="oval:gov.nist.fdcc.patch:tst:116557"/>
                     <criterion comment="Wintrust.dll version is less than 6.0.6001.18387" test_ref="oval:gov.nist.fdcc.patch:tst:116558"/>
                  </criteria>
                  <criteria operator="AND">
                     <criterion comment="Cabview.dll version is greater than or equal to 6.0.6001.18000" test_ref="oval:gov.nist.fdcc.patch:tst:116559"/>
                     <criterion comment="Cabview.dll version is less than 6.0.6001.18404" test_ref="oval:gov.nist.fdcc.patch:tst:1165510"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP1/SP2 (32-bit, 64-bit, ia-64) - LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <criteria operator="OR">
                  <criteria operator="AND">
                     <criterion comment="Wintrust.dll version is greater than or equal to 6.0.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1165511"/>
                     <criterion comment="Wintrust.dll version is less than 6.0.6001.22588" test_ref="oval:gov.nist.fdcc.patch:tst:1165512"/>
                  </criteria>
                  <criteria operator="AND">
                     <criterion comment="Cabview.dll version is greater than or equal to 6.0.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1165513"/>
                     <criterion comment="Cabview.dll version is less than 6.0.6001.22605" test_ref="oval:gov.nist.fdcc.patch:tst:1165514"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - GDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <criteria operator="OR">
                  <criteria operator="AND">
                     <criterion comment="Wintrust.dll version is greater than or equal to 6.0.6002.18000" test_ref="oval:gov.nist.fdcc.patch:tst:1165515"/>
                     <criterion comment="Wintrust.dll version is less than 6.0.6002.18169" test_ref="oval:gov.nist.fdcc.patch:tst:1165516"/>
                  </criteria>
                  <criteria operator="AND">
                     <criterion comment="Cabview.dll version is greater than or equal to 6.0.6002.18000" test_ref="oval:gov.nist.fdcc.patch:tst:1165517"/>
                     <criterion comment="Cabview.dll version is less than 6.0.6002.18184" test_ref="oval:gov.nist.fdcc.patch:tst:1165518"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <criteria operator="OR">
                  <criteria operator="AND">
                     <criterion comment="Wintrust.dll version is greater than or equal to 6.0.6002.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1165519"/>
                     <criterion comment="Wintrust.dll version is less than 6.0.6002.22293" test_ref="oval:gov.nist.fdcc.patch:tst:1165520"/>
                  </criteria>
                  <criteria operator="AND">
                     <criterion comment="Cabview.dll version is greater than or equal to 6.0.6002.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1165521"/>
                     <criterion comment="Cabview.dll version is less than 6.0.6002.22311" test_ref="oval:gov.nist.fdcc.patch:tst:1165522"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="7, Server 2008 R2 (32-bit, 64-bit, ia-64) - GDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows 7 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:6165"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:5950"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:6438"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed" definition_ref="oval:org.mitre.oval:def:5954"/>
               </criteria>
               <criteria operator="OR">
                  <criteria operator="AND">
                     <criterion comment="Wintrust.dll version is greater than or equal to 6.1.7600.16000" test_ref="oval:gov.nist.fdcc.patch:tst:1165523"/>
                     <criterion comment="Wintrust.dll version is less than 6.1.7600.16493" test_ref="oval:gov.nist.fdcc.patch:tst:1165524"/>
                  </criteria>
                  <criteria operator="AND">
                     <criterion comment="Cabview.dll version is greater than or equal to 6.1.7600.16000" test_ref="oval:gov.nist.fdcc.patch:tst:1165525"/>
                     <criterion comment="Cabview.dll version is less than 6.1.7600.16500" test_ref="oval:gov.nist.fdcc.patch:tst:1165526"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="7, Server 2008 R2 (32-bit, 64-bit, ia-64) - LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows 7 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:6165"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:5950"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:6438"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed" definition_ref="oval:org.mitre.oval:def:5954"/>
               </criteria>
               <criteria operator="OR">
                  <criteria operator="AND">
                     <criterion comment="Wintrust.dll version is greater than or equal to 6.1.7600.20000" test_ref="oval:gov.nist.fdcc.patch:tst:1165527"/>
                     <criterion comment="Wintrust.dll version is less than 6.1.7600.20605" test_ref="oval:gov.nist.fdcc.patch:tst:1165528"/>
                  </criteria>
                  <criteria operator="AND">
                     <criterion comment="Cabview.dll version is greater than or equal to 6.1.7600.20000" test_ref="oval:gov.nist.fdcc.patch:tst:1165529"/>
                     <criterion comment="Cabview.dll version is less than 6.1.7600.20613" test_ref="oval:gov.nist.fdcc.patch:tst:1165530"/>
                  </criteria>
               </criteria>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11662" version="2" class="patch">
         <metadata>
            <title>MS10-026: Vulnerability in Microsoft MPEG Layer-3 Codecs Could Allow Remote Code Execution (977816)</title>
            <affected family="windows">
               <platform>Microsoft Windows XP</platform>
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows Server 2008</platform>
            </affected>
            <reference source="Microsoft" ref_id="MS10-026" ref_url="http://www.microsoft.com/technet/security/bulletin/MS10-026.mspx"/>
            <reference source="Microsoft" ref_id="KB977816" ref_url="http://support.microsoft.com/kb/977816"/>
            <reference source="CVE" ref_id="CVE-2010-0480" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0480"/>
            <description>Microsoft has released MS10-026 to address security issues in Windows XP, Windows Vista, and Windows Server 2008 as documented by CVE-2010-0480</description>
         </metadata>
         <criteria operator="OR">
            <criteria operator="AND" comment="Vulnerable Microsoft Windows XP SP2 or SP3">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows XP (x86) SP2 is installed" definition_ref="oval:org.mitre.oval:def:754"/>
                  <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
               </criteria>
               <criterion comment="L3codeca.acm version is less than 1.9.0.306" test_ref="oval:gov.nist.fdcc.patch:tst:1166201"/>
            </criteria>
            <criteria operator="AND" comment="Vulnerable Microsoft Windows XP x64 SP2">
               <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
               <criterion comment="Wl3codeca.acm version is less than 1.9.0.306" test_ref="oval:gov.nist.fdcc.patch:tst:1166202"/>
            </criteria>
            <criteria operator="AND" comment="Vulnerable Microsoft Windows Vista x86/x64, Server 2008 32bit/x64/ia64">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <criterion comment="L3codeca.acm version is less than 1.9.0.402" test_ref="oval:gov.nist.fdcc.patch:tst:1166203"/>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11666" version="2" class="patch">
         <metadata>
            <title>MS10-030: Vulnerability in Outlook Express and Windows Mail Could Allow Remote Code Execution (978542)</title>
            <affected family="windows">
               <platform>Microsoft Windows XP</platform>
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows Server 2008</platform>
               <platform>Microsoft Windows 7</platform>
               <platform>Microsoft Windows Server 2008 R2</platform>
            </affected>
            <reference source="Microsoft" ref_id="MS10-030" ref_url="http://www.microsoft.com/technet/security/bulletin/MS10-030.mspx"/>
            <reference source="Microsoft" ref_id="KB978542" ref_url="http://support.microsoft.com/kb/978542"/>
            <reference source="CVE" ref_id="CVE-2010-0816" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0816"/>
            <description>Microsoft has released MS10-030 to address security issues in as documented by CVE-2010-0816</description>
         </metadata>
         <criteria operator="OR">
            <criteria operator="AND" comment="Microsoft Outlook Express 6 on Windows XP (32-bit) SP2">
               <extend_definition comment="Microsoft Windows XP (x86) SP2 is installed" definition_ref="oval:org.mitre.oval:def:754"/>
               <extend_definition comment="Microsoft Outlook Express 6 for Windows XP/2003 is installed" definition_ref="oval:org.mitre.oval:def:208"/>
               <criterion comment="Msoe.dll version is less than 6.0.2900.3664" test_ref="oval:gov.nist.fdcc.patch:tst:1166601"/>
            </criteria>
            <criteria operator="AND" comment="Microsoft Outlook Express 6 on Windows XP (64-bit) SP2">
               <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
               <extend_definition comment="Microsoft Outlook Express 6 for Windows XP/2003 is installed" definition_ref="oval:org.mitre.oval:def:208"/>
               <criterion comment="Msoe.dll version is less than 6.0.3790.4657" test_ref="oval:gov.nist.fdcc.patch:tst:1166602"/>
            </criteria>
            <criteria operator="AND" comment="Microsoft Outlook Express 6 on Windows XP (32-bit) SP3">
               <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
               <extend_definition comment="Microsoft Outlook Express 6 for Windows XP/2003 is installed" definition_ref="oval:org.mitre.oval:def:208"/>
               <criterion comment="Msoe.dll version is less than 6.0.2900.5931" test_ref="oval:gov.nist.fdcc.patch:tst:1166603"/>
            </criteria>
            <criteria operator="AND" comment="Windows Mail on Windows Vista (32-bit,64-bit) SP1, Server 2008 (32-bit,64-bit) - GDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
               </criteria>
               <extend_definition comment="Microsoft Windows Mail is installed" definition_ref="oval:org.mitre.oval:def:2058"/>
               <criterion comment="Inetcomm.dll version is less than 6.0.6001.18416" test_ref="oval:gov.nist.fdcc.patch:tst:1166604"/>
            </criteria>
            <criteria operator="AND" comment="Windows Mail on Windows Vista (32-bit,64-bit) SP1, Server 2008 (32-bit,64-bit) - LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
               </criteria>
               <extend_definition comment="Microsoft Windows Mail is installed" definition_ref="oval:org.mitre.oval:def:2058"/>
               <criterion comment="Inetcomm.dll version is greater than or equal to 6.0.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1166605"/>
               <criterion comment="Inetcomm.dll version is less than 6.0.6001.22621" test_ref="oval:gov.nist.fdcc.patch:tst:1166606"/>
            </criteria>
            <criteria operator="AND" comment="Windows Mail on Windows Vista (32-bit,64-bit) SP2, Server 2008 (32-bit,64-bit) SP2 - GDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
               </criteria>
               <extend_definition comment="Microsoft Windows Mail is installed" definition_ref="oval:org.mitre.oval:def:2058"/>
               <criterion comment="Inetcomm.dll version is less than 6.0.6002.18197" test_ref="oval:gov.nist.fdcc.patch:tst:1166607"/>
            </criteria>
            <criteria operator="AND" comment="Windows Mail on Windows Vista (32-bit,64-bit) SP2, Server 2008 (32-bit,64-bit) SP2 - LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
               </criteria>
               <extend_definition comment="Microsoft Windows Mail is installed" definition_ref="oval:org.mitre.oval:def:2058"/>
               <criterion comment="Inetcomm.dll version is greater than or equal to 6.0.6002.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1166608"/>
               <criterion comment="Inetcomm.dll version is less than 6.0.6002.22325" test_ref="oval:gov.nist.fdcc.patch:tst:1166609"/>
            </criteria>
            <criteria operator="AND" comment="Windows Mail on Windows Server 2008 ia-64 - GDR">
               <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               <extend_definition comment="Microsoft Windows Mail is installed" definition_ref="oval:org.mitre.oval:def:2058"/>
               <criterion comment="Inetcomm.dll version is less than 6.0.6001.18427" test_ref="oval:gov.nist.fdcc.patch:tst:1166610"/>
            </criteria>
            <criteria operator="AND" comment="Windows Mail on Windows Server 2008 ia-64 - LDR">
               <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               <extend_definition comment="Microsoft Windows Mail is installed" definition_ref="oval:org.mitre.oval:def:2058"/>
               <criterion comment="Inetcomm.dll version is greater than or equal to 6.0.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1166605"/>
               <criterion comment="Inetcomm.dll version is less than 6.0.6001.22636" test_ref="oval:gov.nist.fdcc.patch:tst:1166612"/>
            </criteria>
            <criteria operator="AND" comment="Windows Mail on Windows Server 2008 SP2 ia-64 - GDR">
               <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               <extend_definition comment="Microsoft Windows Mail is installed" definition_ref="oval:org.mitre.oval:def:2058"/>
               <criterion comment="Inetcomm.dll version is less than 6.0.6002.18209" test_ref="oval:gov.nist.fdcc.patch:tst:1166613"/>
            </criteria>
            <criteria operator="AND" comment="Windows Mail on Windows Server 2008 SP2 ia-64 - LDR">
               <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               <extend_definition comment="Microsoft Windows Mail is installed" definition_ref="oval:org.mitre.oval:def:2058"/>
               <criterion comment="Inetcomm.dll version is greater than or equal to 6.0.6002.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1166608"/>
               <criterion comment="Inetcomm.dll version is less than 6.0.6002.22341" test_ref="oval:gov.nist.fdcc.patch:tst:1166615"/>
            </criteria>
            <criteria operator="AND" comment="Windows Mail on Windows 7/Server 2008 R2 (32-bit, 64-bit, ia-64) - GDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows 7 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:6165"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:5950"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:6438"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed" definition_ref="oval:org.mitre.oval:def:5954"/>
               </criteria>
               <extend_definition comment="Microsoft Windows Mail is installed" definition_ref="oval:org.mitre.oval:def:2058"/>
               <criterion comment="Inetcomm.dll version is less than 6.1.7600.16543" test_ref="oval:gov.nist.fdcc.patch:tst:1166616"/>
            </criteria>
            <criteria operator="AND" comment="Windows Mail on Windows 7/Server 2008 R2 (32-bit, 64-bit, ia-64) - LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows 7 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:6165"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:5950"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:6438"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed" definition_ref="oval:org.mitre.oval:def:5954"/>
               </criteria>
               <extend_definition comment="Microsoft Windows Mail is installed" definition_ref="oval:org.mitre.oval:def:2058"/>
               <criterion comment="Inetcomm.dll version is greater than or equal to 6.1.7600.20000" test_ref="oval:gov.nist.fdcc.patch:tst:1166617"/>
               <criterion comment="Inetcomm.dll version is less than 6.1.7600.20659" test_ref="oval:gov.nist.fdcc.patch:tst:1166618"/>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11670" version="2" class="patch">
         <metadata>
            <title>MS10-032: Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Elevation of Privilege (979559)</title>
            <affected family="windows">
               <platform>Microsoft Windows XP</platform>
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows Server 2008</platform>
               <platform>Microsoft Windows 7</platform>
               <platform>Microsoft Windows Server 2008 R2</platform>
            </affected>
            <reference source="Microsoft" ref_id="MS10-032" ref_url="http://www.microsoft.com/technet/security/bulletin/MS10-032.mspx"/>
            <reference source="Microsoft" ref_id="KB979559" ref_url="http://support.microsoft.com/kb/979559"/>
            <reference source="CVE" ref_id="CVE-2010-0484" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0484"/>
            <reference source="CVE" ref_id="CVE-2010-0485" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0485"/>
            <reference source="CVE" ref_id="CVE-2010-1255" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1255"/>
            <description>Microsoft has released MS10-032 to address security issues in Windows XP, Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2 as documented by CVE-2010-0484, CVE-2010-0485, and CVE-2010-1255</description>
         </metadata>
         <criteria operator="OR">
            <criteria operator="AND" comment="XP (32-bit) SP2">
               <extend_definition comment="Microsoft Windows XP (x86) SP2 is installed" definition_ref="oval:org.mitre.oval:def:754"/>
               <criterion comment="Win32k.sys version is less than 5.1.2600.3706" test_ref="oval:gov.nist.fdcc.patch:tst:116700"/>
            </criteria>
            <criteria operator="AND" comment="XP (32-bit) SP3">
               <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
               <criterion comment="Win32k.sys version is less than 5.1.2600.5976" test_ref="oval:gov.nist.fdcc.patch:tst:116701"/>
            </criteria>
            <criteria operator="AND" comment="XP (64-bit) SP2">
               <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
               <criterion comment="Win32k.sys version is less than 5.2.3790.4702" test_ref="oval:gov.nist.fdcc.patch:tst:116702"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit,64-bit, ia-64) - GDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               </criteria>
               <criterion comment="Win32k.sys version is greater than or equal to 6.0.6001.18000" test_ref="oval:gov.nist.fdcc.patch:tst:115476"/>
               <criterion comment="Win32k.sys version is less than  6.0.6001.18468" test_ref="oval:gov.nist.fdcc.patch:tst:116704"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit, 64-bit, ia-64) - LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               </criteria>
               <criterion comment="Win32k.sys version is greater than or equal to 6.0.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:115477"/>
               <criterion comment="Win32k.sys version is less than  6.0.6001.22682" test_ref="oval:gov.nist.fdcc.patch:tst:116706"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - GDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <criterion comment="Win32k.sys version is greater than or equal to 6.0.6002.18000" test_ref="oval:gov.nist.fdcc.patch:tst:116217"/>
               <criterion comment="Win32k.sys version is less than  6.0.6002.18253" test_ref="oval:gov.nist.fdcc.patch:tst:116708"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <criterion comment="Win32k.sys version is greater than or equal to 6.0.6002.22000" test_ref="oval:gov.nist.fdcc.patch:tst:116219"/>
               <criterion comment="Win32k.sys version is less than  6.0.6002.22396" test_ref="oval:gov.nist.fdcc.patch:tst:1167091"/>
            </criteria>
            <criteria operator="AND" comment="7, Server 2008 R2 (32-bit, 64-bit, ia-64) - GDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows 7 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:6165"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:5950"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:6438"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed" definition_ref="oval:org.mitre.oval:def:5954"/>
               </criteria>
               <criterion comment="Win32k.sys version is greater than or equal 6.1.7600.16000" test_ref="oval:gov.nist.fdcc.patch:tst:1167092"/>
               <criterion comment="Win32k.sys version is less than 6.1.7600.16585" test_ref="oval:gov.nist.fdcc.patch:tst:1167093"/>
            </criteria>
            <criteria operator="AND" comment="7, Server 2008 R2 (32-bit, 64-bit, ia-64) - LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows 7 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:6165"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:5950"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:6438"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed" definition_ref="oval:org.mitre.oval:def:5954"/>
               </criteria>
               <criterion comment="Win32k.sys version is greater than or equal 6.1.7600.20000" test_ref="oval:gov.nist.fdcc.patch:tst:1167094"/>
               <criterion comment="Win32k.sys version is less than 6.1.7600.20704" test_ref="oval:gov.nist.fdcc.patch:tst:1167095"/>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11671" version="4" class="patch">
         <metadata>
            <title>MS10-033: Vulnerabilities in Media Decompression Could Allow Remote Code Execution (979902)</title>
            <affected family="windows">
               <platform>Microsoft Windows XP</platform>
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows Server 2008</platform>
               <platform>Microsoft Windows 7</platform>
               <platform>Microsoft Windows Server 2008 R2</platform>
               <product>Microsoft Media Encoder</product>
            </affected>
            <reference source="Microsoft" ref_id="MS10-033" ref_url="http://www.microsoft.com/technet/security/bulletin/MS10-033.mspx"/>
            <reference source="Microsoft" ref_id="KB979902" ref_url="http://support.microsoft.com/kb/979902"/>
            <reference source="Microsoft" ref_id="KB979482" ref_url="http://support.microsoft.com/kb/979482"/>
            <reference source="Microsoft" ref_id="KB978695" ref_url="http://support.microsoft.com/kb/978695"/>
            <reference source="Microsoft" ref_id="KB975562" ref_url="http://support.microsoft.com/kb/975562"/>
            <reference source="Microsoft" ref_id="KB979332" ref_url="http://support.microsoft.com/kb/979332"/>
            <reference source="CVE" ref_id="CVE-2010-1879" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1879"/>
            <reference source="CVE" ref_id="CVE-2010-1880" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1880"/>
            <description>Microsoft has released MS10-033 to address security issues in Microsoft Windows 2000, Windows XP, and Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2 as documented by CVE-2010-1879 and CVE-2010-1880.</description>
         </metadata>
         <criteria operator="OR">
            <!--<criteria operator="AND">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows XP (x86) SP2 is installed" definition_ref="oval:org.mitre.oval:def:754"/>
                        <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
                        <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
                        <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                        <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
                        <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                        <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                        <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                        <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
                    </criteria>
                    <criterion comment="Wmenceng.dll version is less than 9.0.0.3369" test_ref="oval:gov.nist.fdcc.patch:tst:1167101"/>
                </criteria>-->
            <criteria operator="AND" comment="XP (32-bit) SP2">
               <extend_definition comment="Microsoft Windows XP (x86) SP2 is installed" definition_ref="oval:org.mitre.oval:def:754"/>
               <criteria operator="OR">
                  <criterion comment="Asycfilt.dll version is less than 5.1.2600.3680" test_ref="oval:gov.nist.fdcc.patch:tst:1167102"/>
                  <criterion comment="Quartz.dll version is less than 6.5.2600.3665" test_ref="oval:gov.nist.fdcc.patch:tst:1167117"/>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="XP (32-bit) SP3">
               <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
               <criteria operator="OR">
                  <criterion comment="Asycfilt.dll version is less than 5.1.2600.5949" test_ref="oval:gov.nist.fdcc.patch:tst:1167103"/>
                  <criterion comment="Quartz.dll version is less than 6.5.2600.5933" test_ref="oval:gov.nist.fdcc.patch:tst:1167118"/>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="XP (64-bit) SP2">
               <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
               <criteria operator="OR">
                  <criterion comment="Asycfilt.dll version is less than 5.2.3790.4676" test_ref="oval:gov.nist.fdcc.patch:tst:1167104"/>
                  <criterion comment="Quartz.dll version is less than 6.5.3790.4660" test_ref="oval:gov.nist.fdcc.patch:tst:1167119"/>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit,64-bit, ia-64) - GDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               </criteria>
               <criterion comment="Asycfilt.dll version is less than  6.0.6001.18454" test_ref="oval:gov.nist.fdcc.patch:tst:1167106"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit, 64-bit, ia-64) - LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               </criteria>
               <criterion comment="Asycfilt.dll version is greater than or equal to 6.0.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:11671081"/>
               <criterion comment="Asycfilt.dll version is less than  6.0.6001.22665" test_ref="oval:gov.nist.fdcc.patch:tst:1167108"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - GDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <criterion comment="Asycfilt.dll version is greater than or equal to 6.0.6002.18000" test_ref="oval:gov.nist.fdcc.patch:tst:1167109"/>
               <criterion comment="Asycfilt.dll version is less than  6.0.6002.18236" test_ref="oval:gov.nist.fdcc.patch:tst:1167110"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <criterion comment="Asycfilt.dll version is greater than or equal to 6.0.6002.22000" test_ref="oval:gov.nist.fdcc.patch:tst:11671121"/>
               <criterion comment="Asycfilt.dll version is less than  6.0.6002.22377" test_ref="oval:gov.nist.fdcc.patch:tst:1167112"/>
            </criteria>
            <criteria operator="AND" comment="7, Server 2008 R2 (32-bit, 64-bit, ia-64) - GDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows 7 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:6165"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:5950"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:6438"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed" definition_ref="oval:org.mitre.oval:def:5954"/>
               </criteria>
               <criterion comment="Asycfilt.dll version is less than 6.1.7600.16544" test_ref="oval:gov.nist.fdcc.patch:tst:1167114"/>
            </criteria>
            <criteria operator="AND" comment="7, Server 2008 R2 (32-bit, 64-bit, ia-64) - LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows 7 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:6165"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:5950"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:6438"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed" definition_ref="oval:org.mitre.oval:def:5954"/>
               </criteria>
               <criterion comment="Asycfilt.dll version is greater than or equal 6.1.7600.20000" test_ref="oval:gov.nist.fdcc.patch:tst:1167115"/>
               <criterion comment="Asycfilt.dll version is less than 6.1.7600.20660" test_ref="oval:gov.nist.fdcc.patch:tst:1167116"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit,64-bit, ia-64) - GDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               </criteria>
               <criterion comment="Quartz.dll version is greater than or equal to 6.6.6001.18000" test_ref="oval:gov.nist.fdcc.patch:tst:116503"/>
               <criterion comment="Quartz.dll version is less than  6.6.6001.18461" test_ref="oval:gov.nist.fdcc.patch:tst:1167121"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit, 64-bit, ia-64) - LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               </criteria>
               <criterion comment="Quartz.dll version is greater than or equal to 6.6.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:116505"/>
               <criterion comment="Quartz.dll version is less than  6.6.6001.22672" test_ref="oval:gov.nist.fdcc.patch:tst:1167123"/>
            </criteria>
            <criteria operator="AND" comment="XP (32-bit) SP2 and Media Player v9.0">
               <extend_definition comment="Microsoft Windows XP (x86) SP2 is installed" definition_ref="oval:org.mitre.oval:def:754"/>
               <extend_definition comment="Windows Media Player v9.0 is installed." definition_ref="oval:org.mitre.oval:def:2147"/>
               <criterion comment="Wmvcore.dll version is greater than or equal to 9.0.0.3300" test_ref="oval:gov.nist.fdcc.patch:tst:2291"/>
               <criterion comment="Wmvcore.dll version is less than 9.0.0.3369" test_ref="oval:gov.nist.fdcc.patch:tst:1167125"/>
            </criteria>
            <criteria operator="AND" comment="XP (32-bit) SP3 and Media Player v9.0">
               <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
               <extend_definition comment="Windows Media Player v9.0 is installed." definition_ref="oval:org.mitre.oval:def:2147"/>
               <criterion comment="Wmvcore.dll version is less than 9.0.0.4509" test_ref="oval:gov.nist.fdcc.patch:tst:1167126"/>
            </criteria>
            <criteria operator="AND" comment="XP (32-bit) SP2/SP3 and Media Player v10.0">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows XP (x86) SP2 is installed" definition_ref="oval:org.mitre.oval:def:754"/>
                  <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
               </criteria>
               <extend_definition comment="Windows Media Player v10.0 is installed." definition_ref="oval:org.mitre.oval:def:2172"/>
               <criterion comment="Wmvcore.dll version is less than 10.0.0.3706" test_ref="oval:gov.nist.fdcc.patch:tst:1167127"/>
            </criteria>
            <criteria operator="AND" comment="XP (32-bit) SP2/SP3 and Media Player v10.0">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows XP (x86) SP2 is installed" definition_ref="oval:org.mitre.oval:def:754"/>
                  <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
               </criteria>
               <extend_definition comment="Windows Media Player v10.0 is installed." definition_ref="oval:org.mitre.oval:def:2172"/>
               <criterion comment="Wmvcore.dll version is greater than or equal to 10.0.0.4000" test_ref="oval:gov.nist.fdcc.patch:tst:2293"/>
               <criterion comment="Wmvcore.dll version is less than 10.0.0.4078" test_ref="oval:gov.nist.fdcc.patch:tst:1167129"/>
            </criteria>
            <criteria operator="AND" comment="XP (32-bit) SP2/SP3 and Media Player v10.0">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows XP (x86) SP2 is installed" definition_ref="oval:org.mitre.oval:def:754"/>
                  <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
               </criteria>
               <extend_definition comment="Windows Media Player v10.0 is installed." definition_ref="oval:org.mitre.oval:def:2172"/>
               <criterion comment="Wmvcore.dll version is greater than or equal to 10.0.0.4300" test_ref="oval:gov.nist.fdcc.patch:tst:2295"/>
               <criterion comment="Wmvcore.dll version is less than 10.0.0.4374" test_ref="oval:gov.nist.fdcc.patch:tst:1167131"/>
            </criteria>
            <criteria operator="AND" comment="XP (64-bit) SP2 and Media Player v10.0">
               <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
               <extend_definition comment="Windows Media Player v10.0 is installed." definition_ref="oval:org.mitre.oval:def:2172"/>
               <criterion comment="Wmvcore.dll version is less than 10.0.0.4007" test_ref="oval:gov.nist.fdcc.patch:tst:1167132"/>
            </criteria>
            <criteria operator="AND" comment="XP (32/64-bit) SP2/SP3 and Media Player v11.0">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows XP (x86) SP2 is installed" definition_ref="oval:org.mitre.oval:def:754"/>
                  <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
                  <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
               </criteria>
               <extend_definition comment="Windows Media Player v11.0 is installed." definition_ref="oval:org.mitre.oval:def:2126"/>
               <criterion comment="Wmvcore.dll version is less than 11.0.5721.5275" test_ref="oval:gov.nist.fdcc.patch:tst:1167133"/>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11675" version="5" class="patch">
         <metadata>
            <title>MS10-040: Vulnerability in Internet Information Services Could Allow Remote Code Execution (982666)</title>
            <affected family="windows">
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows Server 2008</platform>
               <platform>Microsoft Windows 7</platform>
               <platform>Microsoft Windows Server 2008 R2</platform>
               <product>Microsoft Internet Information Services 7.0</product>
               <product>Microsoft Internet Information Services 7.5</product>
            </affected>
            <reference source="Microsoft" ref_id="MS10-040" ref_url="http://www.microsoft.com/technet/security/Bulletin/MS10-040.mspx"/>
            <reference source="Microsoft" ref_id="KB982666" ref_url="http://support.microsoft.com/kb/982666"/>
            <reference source="CVE" ref_id="CVE-2010-1256 " ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1256"/>
            <description>Microsoft has released MS10-040 to address security issues in Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2 as documented by CVE-2010-1256.</description>
         </metadata>
         <criteria operator="OR">
            <criteria operator="AND">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               </criteria>
               <extend_definition comment="Microsoft IIS 7.0 is installed" definition_ref="oval:org.mitre.oval:def:5377"/>
               <criterion comment="Authsspi.dll version is greater than or equal to 7.0.6001.18428" test_ref="oval:gov.nist.fdcc.patch:tst:116760"/>
               <criterion comment="Authsspi.dll version is less than 7.0.6001.18462" test_ref="oval:gov.nist.fdcc.patch:tst:116750"/>
            </criteria>
            <criteria operator="AND">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               </criteria>
               <extend_definition comment="Microsoft IIS 7.0 is installed" definition_ref="oval:org.mitre.oval:def:5377"/>
               <criterion comment="Authsspi.dll version is greater than or equal to 7.0.6001.22638" test_ref="oval:gov.nist.fdcc.patch:tst:116751"/>
               <criterion comment="Authsspi.dll version is less than 7.0.6001.22675" test_ref="oval:gov.nist.fdcc.patch:tst:116752"/>
            </criteria>
            <criteria operator="AND">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <extend_definition comment="Microsoft IIS 7.0 is installed" definition_ref="oval:org.mitre.oval:def:5377"/>
               <criterion comment="Authsspi.dll version is greater than or equal to 7.0.6002.18210" test_ref="oval:gov.nist.fdcc.patch:tst:116753"/>
               <criterion comment="Authsspi.dll version is less than 7.0.6002.18247" test_ref="oval:gov.nist.fdcc.patch:tst:116754"/>
            </criteria>
            <criteria operator="AND">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <extend_definition comment="Microsoft IIS 7.0 is installed" definition_ref="oval:org.mitre.oval:def:5377"/>
               <criterion comment="Authsspi.dll version is greater than or equal to 7.0.6002.22343" test_ref="oval:gov.nist.fdcc.patch:tst:116755"/>
               <criterion comment="Authsspi.dll version is less than 7.0.6002.22388" test_ref="oval:gov.nist.fdcc.patch:tst:116756"/>
            </criteria>
            <criteria operator="AND">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows 7 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:6165"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:5950"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:6438"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed" definition_ref="oval:org.mitre.oval:def:5954"/>
               </criteria>
               <extend_definition comment="Microsoft IIS 7.5 is installed" definition_ref="oval:org.mitre.oval:def:6856"/>
               <criterion comment="Authsspi.dll version is less than 7.5.7600.16576" test_ref="oval:gov.nist.fdcc.patch:tst:116757"/>
            </criteria>
            <criteria operator="AND">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows 7 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:6165"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:5950"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:6438"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed" definition_ref="oval:org.mitre.oval:def:5954"/>
               </criteria>
               <extend_definition comment="Microsoft IIS 7.5 is installed" definition_ref="oval:org.mitre.oval:def:6856"/>
               <criterion comment="Authsspi.dll version is greater than or equal to 7.5.7600.20000" test_ref="oval:gov.nist.fdcc.patch:tst:116758"/>
               <criterion comment="Authsspi.dll version is less than 7.5.7600.20694" test_ref="oval:gov.nist.fdcc.patch:tst:116759"/>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11676" version="3" class="patch">
         <metadata>
            <title>MS10-041: Vulnerability in Microsoft .NET Framework Could Allow Tampering (981343)</title>
            <affected family="windows">
               <platform>Microsoft Windows XP</platform>
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows Server 2008</platform>
               <platform>Microsoft Windows 7</platform>
               <platform>Microsoft Windows Server 2008 R2</platform>
            </affected>
            <reference source="Microsoft" ref_id="MS10-041" ref_url="http://www.microsoft.com/technet/security/bulletin/MS10-041.mspx"/>
            <reference source="Microsoft" ref_id="KB981343" ref_url="http://support.microsoft.com/kb/981343"/>
            <reference source="CVE" ref_id="CVE-2009-0217" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0217"/>
            <description>Microsoft has released MS10-041 to address security issues in Microsoft .NET Framework on Microsoft Windows XP, Windows Vista, Windows 7, Windows Server 2008, and Windows Server 2008 R2 as documented by CVE-2009-0217. </description>
         </metadata>
         <criteria operator="OR">
            <criteria operator="AND" comment="(vista sp1/2 (32/64) OR 2008 RTM/sp2 (32/64) OR xp sp2 OR xp x64 sp2 OR 7 OR 2008 R2) AND .net 1.1 sp1">
               <criteria operator="OR" comment="vista sp1/2 (32/64) OR 2008 RTM/sp2 (32/64) OR xp sp2 OR xp x64 sp2 OR 7 OR 2008 R2">
                  <extend_definition comment="Microsoft Windows XP (x86) SP2 is installed" definition_ref="oval:org.mitre.oval:def:754"/>
                  <!--<extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>-->
                  <!--<extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>-->
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <extend_definition comment="Microsoft .NET Framework 1.1 Service Pack 1, or later, is Installed" definition_ref="oval:gov.nist.fdcc.patch:def:115285"/>
               <criterion comment="system.security.dll version is less than 1.1.4322.2463" test_ref="oval:gov.nist.fdcc.patch:tst:1167600"/>
            </criteria>
            <criteria operator="AND" comment="(vista sp1 (32/64) OR 2008 RTM (32/64)) AND .net 2.0 sp1 OR .net 3.5 (Gold)">
               <criteria operator="OR" comment="vista sp1 (32/64) OR 2008 RTM (32/64)">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               </criteria>
               <criteria operator="OR" comment=".net 2.0 sp1 OR .net 3.5">
                  <extend_definition comment="Microsoft .NET Framework 2.0 Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:6428"/>
                  <extend_definition comment="Microsoft .NET Framework 3.5 (Gold) is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11582"/>
               </criteria>
               <criterion comment="system.security.dll version is less than 2.0.50727.1878" test_ref="oval:gov.nist.fdcc.patch:tst:1167601"/>
            </criteria>
            <criteria operator="AND" comment="(xp sp2, xp sp3, OR xp x64 sp2) AND .net 3.5">
               <criteria operator="OR" comment="xp sp2, xp sp3, OR xp x64 sp2">
                  <extend_definition comment="Microsoft Windows XP (x86) SP2 is installed" definition_ref="oval:org.mitre.oval:def:754"/>
                  <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
                  <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
               </criteria>
               <extend_definition comment="Microsoft .NET Framework 3.5 (Gold) is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11582"/>
               <criterion comment="system.security.dll version is less than 2.0.50727.1879" test_ref="oval:gov.nist.fdcc.patch:tst:1167602"/>
            </criteria>
            <criteria operator="AND" comment="(vista sp1 (32/64) OR 2008 RTM (32/64) OR xp sp2/3 OR xp x64 sp2) AND .net 2.0 sp2 OR 3.5 sp1">
               <criteria operator="OR" comment="vista sp1 (32/64) OR 2008 RTM (32/64) OR xp sp2/3 OR xp x64 sp2">
                  <extend_definition comment="Microsoft Windows XP (x86) SP2 is installed" definition_ref="oval:org.mitre.oval:def:754"/>
                  <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
                  <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               </criteria>
               <criteria operator="OR" comment=".net 2.0 sp2 OR 3.5 sp1">
                  <extend_definition comment="Microsoft .NET Framework 2.0 Service Pack 2, or later, is installed" definition_ref="oval:org.mitre.oval:def:6158"/>
                  <extend_definition comment="Microsoft .NET Framework 3.5 Service Pack 1, or later, is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11583"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR update has been applied">
                  <criterion comment="system.security.dll version is less than 2.0.50727.3613" test_ref="oval:gov.nist.fdcc.patch:tst:1167603"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="system.security.dll version is greater than or equal to 2.0.50727.4400" test_ref="oval:gov.nist.fdcc.patch:tst:1167604"/>
                     <criterion comment="system.security.dll version is less than 2.0.50727.4434" test_ref="oval:gov.nist.fdcc.patch:tst:1167605"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="(vista sp2 (32/64) OR 2008 sp2 (32/64)) AND .net 2.0 sp2">
               <criteria operator="OR" comment="vista sp2 (32/64) OR 2008 sp2 (32/64)">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <criteria operator="OR" comment=".net 2.0 sp2 OR 3.5 sp1">
                  <extend_definition comment="Microsoft .NET Framework 2.0 Service Pack 2, or later, is installed" definition_ref="oval:org.mitre.oval:def:6158"/>
                  <extend_definition comment="Microsoft .NET Framework 3.5 Service Pack 1, or later, is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11583"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR update has been applied">
                  <criterion comment="system.security.dll version is less than 2.0.50727.4204" test_ref="oval:gov.nist.fdcc.patch:tst:1167606"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="system.security.dll version is greater than or equal to 2.0.50727.4400" test_ref="oval:gov.nist.fdcc.patch:tst:1167604"/>
                     <criterion comment="system.security.dll version is less than 2.0.50727.4434" test_ref="oval:gov.nist.fdcc.patch:tst:1167605"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="(7 x86/x64 OR Server 2008 R2 x64/ia64) AND .NET 3.5 sp1">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows 7 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:6165"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:5950"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:6438"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed" definition_ref="oval:org.mitre.oval:def:5954"/>
               </criteria>
               <extend_definition comment="Microsoft .NET Framework 3.5 Service Pack 1, or later, is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11583"/>
               <criteria operator="OR" comment="GDR or LDR update has been applied">
                  <criterion comment="system.security.dll version is less than 2.0.50727.4951" test_ref="oval:gov.nist.fdcc.patch:tst:1167607"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="system.security.dll version is greater than or equal to 2.0.50727.5000" test_ref="oval:gov.nist.fdcc.patch:tst:1167608"/>
                     <criterion comment="system.security.dll version is less than 2.0.50727.5007" test_ref="oval:gov.nist.fdcc.patch:tst:1167609"/>
                  </criteria>
               </criteria>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11683" version="1" class="patch">
         <metadata>
            <title>MS10-050: Vulnerability in Windows Movie Maker Could Allow Remote Code Execution (981997)</title>
            <affected family="windows">
               <platform>Microsoft Windows XP</platform>
               <platform>Microsoft Windows Vista</platform>
               <product>Movie Maker 2.1</product>
               <product>Movie Maker 6.0</product>
               <product>Microsoft Producer 2003</product>
            </affected>
            <reference source="Microsoft" ref_id="MS10-050" ref_url="http://www.microsoft.com/technet/security/bulletin/MS10-050.mspx"/>
            <reference source="Microsoft" ref_id="KB981997" ref_url="http://support.microsoft.com/kb/981997"/>
            <reference source="CVE" ref_id="CVE-2010-2564" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2564"/>
            <description>Microsoft has released MS10-050 to address security issues in Windows XP and Windows Vista as documented by CVE-2010-2564</description>
         </metadata>
         <criteria operator="OR">
            <criteria operator="AND" comment="XP (32-bit) SP3">
               <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
               <criterion comment="Moviemk.exe version is less than 2.1.4028.0" test_ref="oval:gov.nist.fdcc.patch:tst:116830"/>
            </criteria>
            <criteria operator="AND" comment="XP (64-bit) SP2">
               <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
               <extend_definition comment="Windows Movie Maker 2.1 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115291"/>
               <criterion comment="Wmoviemk.exe version is less than 2.1.40310" test_ref="oval:gov.nist.fdcc.patch:tst:116831"/>
            </criteria>
            <criteria operator="AND" comment="Vista SP1 (32-bit,64-bit, ia-64) - GDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
               </criteria>
               <extend_definition comment="Windows Movie Maker 6.0 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115293"/>
               <criterion comment="Moviemk.exe version is less than 6.0.6001.18494" test_ref="oval:gov.nist.fdcc.patch:tst:116832"/>
            </criteria>
            <criteria operator="AND" comment="Vista SP1 (32-bit, 64-bit, ia-64) - LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
               </criteria>
               <extend_definition comment="Windows Movie Maker 6.0 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115293"/>
               <criterion comment="Moviemk.exe version is greater than or equal to 6.0.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:116534"/>
               <criterion comment="Moviemk.exe version is less than 6.0.6001.22714" test_ref="oval:gov.nist.fdcc.patch:tst:116834"/>
            </criteria>
            <criteria operator="AND" comment="Vista SP2 (32-bit, 64-bit, ia-64) - GDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
               </criteria>
               <extend_definition comment="Windows Movie Maker 6.0 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115293"/>
               <criterion comment="Moviemk.exe version is greater than or equal to 6.0.6002.18000" test_ref="oval:gov.nist.fdcc.patch:tst:116835"/>
               <criterion comment="Moviemk.exe version is less than 6.0.6002.18273" test_ref="oval:gov.nist.fdcc.patch:tst:116836"/>
            </criteria>
            <criteria operator="AND" comment="Vista SP2 (32-bit, 64-bit, ia-64) - LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
               </criteria>
               <extend_definition comment="Windows Movie Maker 6.0 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115293"/>
               <criterion comment="Moviemk.exe version is greater than or equal to 6.0.6002.22000" test_ref="oval:gov.nist.fdcc.patch:tst:116538"/>
               <criterion comment="Moviemk.exe version is less than 6.0.6002.22426" test_ref="oval:gov.nist.fdcc.patch:tst:116838"/>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11684" version="3" class="patch">
         <metadata>
            <title>MS10-051: Vulnerability in Microsoft XML Core Services 3.0 Could Allow Remote Code Execution (2079403)</title>
            <affected family="windows">
               <platform>Microsoft Windows XP</platform>
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows Server 2008</platform>
               <platform>Microsoft Windows 7</platform>
               <platform>Microsoft Windows Server 2008 R2</platform>
            </affected>
            <reference source="CVE" ref_id="CVE-2010-2561" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2561"/>
            <reference source="Microsoft" ref_id="MS10-051" ref_url="http://www.microsoft.com/technet/security/bulletin/MS10-051.mspx"/>
            <reference source="Microsoft" ref_id="KB2079403" ref_url="http://support.microsoft.com/kb/2079403"/>
            <description>Microsoft has released MS10-051 to address security issues in Windows 2000, Windows XP, Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2 as documented by CVE-2010-2561</description>
         </metadata>
         <criteria operator="OR">
            <criteria operator="AND" comment="XP (32-bit) SP3">
               <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
               <criterion comment="Msxml3.dll version is less than 8.100.1052.0" test_ref="oval:gov.nist.fdcc.patch:tst:116840"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit,64-bit, ia-64)">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               </criteria>
               <criterion comment="Msxml3.dll version is less than 8.100.4002.0" test_ref="oval:gov.nist.fdcc.patch:tst:116841"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64)">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <criterion comment="Msxml3.dll version is less than 8.100.5003.0" test_ref="oval:gov.nist.fdcc.patch:tst:116842"/>
            </criteria>
            <criteria operator="AND" comment="7, Server 2008 R2 (32-bit, 64-bit, ia-64) - GDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows 7 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:6165"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:5950"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:6438"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed" definition_ref="oval:org.mitre.oval:def:5954"/>
               </criteria>
               <criterion comment="Msxml3.dll version is less than 8.110.7600.16605" test_ref="oval:gov.nist.fdcc.patch:tst:116843"/>
            </criteria>
            <criteria operator="AND" comment="7, Server 2008 R2 (32-bit, 64-bit, ia-64) - LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows 7 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:6165"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:5950"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:6438"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed" definition_ref="oval:org.mitre.oval:def:5954"/>
               </criteria>
               <criterion comment="Msxml3.dll version is greater than or equal to 8.110.7600.20000" test_ref="oval:gov.nist.fdcc.patch:tst:116844"/>
               <criterion comment="Msxml3.dll version is less than 8.110.7600.20728" test_ref="oval:gov.nist.fdcc.patch:tst:116845"/>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11688" version="1" class="patch">
         <metadata>
            <title>MS10-055: Vulnerability in Cinepak Codec Could Allow Remote Code Execution (982665)</title>
            <affected family="windows">
               <platform>Microsoft Windows XP</platform>
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows 7</platform>
            </affected>
            <reference source="Microsoft" ref_id="MS10-055" ref_url="http://www.microsoft.com/technet/security/bulletin/MS10-055.mspx"/>
            <reference source="Microsoft" ref_id="KB982665" ref_url="http://support.microsoft.com/kb/982665"/>
            <reference source="CVE" ref_id="CVE-2010-2553" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2553"/>
            <description>Microsoft has released MS10-055 to address security issues in Windows XP, Windows Vista, and Windows 7 as documented by CVE-2010-2553</description>
         </metadata>
         <criteria operator="OR">
            <criteria operator="AND" comment="Vulnerable Microsoft Windows XP (x86) SP3">
               <criteria operator="OR" comment="xp sp3 OR vista sp1/2 (32/64) OR 7">
                  <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows 7 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:6165"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:5950"/>
               </criteria>
               <criterion comment="Iccvid.dll version is less than 1.10.0.13" test_ref="oval:gov.nist.fdcc.patch:tst:1168800"/>
            </criteria>
            <criteria operator="AND" comment="Vulnerable Microsoft Windows XP x64 SP2">
               <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
               <criterion comment="Wiccvid.dll version is less than 1.10.0.13" test_ref="oval:gov.nist.fdcc.patch:tst:1168801"/>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11690" version="1" class="patch">
         <metadata>
            <title>MS10-059: Vulnerabilities in the Tracing Feature for Services Could Allow Elevation of Privilege (982799)</title>
            <affected family="windows">
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows Server 2008</platform>
               <platform>Microsoft Windows 7</platform>
               <platform>Microsoft Windows Server 2008 R2</platform>
            </affected>
            <reference source="Microsoft" ref_id="MS10-059" ref_url="http://www.microsoft.com/technet/security/bulletin/MS10-059.mspx"/>
            <reference source="Microsoft" ref_id="kb982799" ref_url="http://support.microsoft.com/kb/982799"/>
            <reference source="CVE" ref_id="CVE-2010-2554" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2554"/>
            <reference source="CVE" ref_id="CVE-2010-2555" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2555"/>
            <description>Microsoft has released MS10-059 to address security issues in Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2 as documented by CVE-2010-2554 and CVE-2010-2555</description>
         </metadata>
         <criteria operator="OR">
            <criteria operator="AND" comment="Vulnerable Microsoft Windows Vista SP1 x86/x64, Server 2008 32bit/x64/ia64 - GDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               </criteria>
               <criterion comment="Rtutils.dll version is greater than or equal to 6.0.6001.18000" test_ref="oval:gov.nist.fdcc.patch:tst:1169000"/>
               <criterion comment="Rtutils.dll version is less than 6.0.6001.18495" test_ref="oval:gov.nist.fdcc.patch:tst:1169001"/>
            </criteria>
            <criteria operator="AND" comment="Vulnerable Microsoft Windows Vista SP1 x86/x64, Server 2008 32bit/x64/ia64 - LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               </criteria>
               <criterion comment="Rtutils.dll version is greater than or equal to 6.0.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1169002"/>
               <criterion comment="Rtutils.dll version is less than 6.0.6001.22715" test_ref="oval:gov.nist.fdcc.patch:tst:1169003"/>
            </criteria>
            <criteria operator="AND" comment="Vulnerable Microsoft Windows Vista SP2 x86/x64, Server 2008 SP2 32bit/x64/ia64 - GDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <criterion comment="Rtutils.dll version is greater than or equal to 6.0.6002.18000" test_ref="oval:gov.nist.fdcc.patch:tst:1169004"/>
               <criterion comment="Rtutils.dll version is less than 6.0.6002.18274" test_ref="oval:gov.nist.fdcc.patch:tst:1169005"/>
            </criteria>
            <criteria operator="AND" comment="Vulnerable Microsoft Windows Vista SP2 x86/x64, Server 2008 SP2 32bit/x64/ia64 - LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <criterion comment="Rtutils.dll version is greater than or equal to 6.0.6002.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1169006"/>
               <criterion comment="Rtutils.dll version is less than 6.0.6002.22427" test_ref="oval:gov.nist.fdcc.patch:tst:1169007"/>
            </criteria>
            <criteria operator="AND" comment="Vulnerable Microsoft Windows 7 x86/x64, Windows Server 2008 R2 x86/x64/ia64 - GDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows 7 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:6165"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:5950"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:6438"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed" definition_ref="oval:org.mitre.oval:def:5954"/>
               </criteria>
               <criterion comment="Rtutils.dll version is greater than or equal to 6.1.7600.16000" test_ref="oval:gov.nist.fdcc.patch:tst:1169008"/>
               <criterion comment="Rtutils.dll version is less than 6.1.7600.16617" test_ref="oval:gov.nist.fdcc.patch:tst:1169009"/>
            </criteria>
            <criteria operator="AND" comment="Vulnerable Microsoft Windows 7 x86/x64, Windows Server 2008 R2 x86/x64/ia64 - LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows 7 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:6165"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:5950"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:6438"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed" definition_ref="oval:org.mitre.oval:def:5954"/>
               </criteria>
               <criterion comment="Rtutils.dll version is greater than or equal to 6.1.7600.20000" test_ref="oval:gov.nist.fdcc.patch:tst:1169010"/>
               <criterion comment="Rtutils.dll version is less than 6.1.7600.20738" test_ref="oval:gov.nist.fdcc.patch:tst:1169011"/>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11692" version="1" class="patch">
         <metadata>
            <title>MS10-061: Vulnerability in Print Spooler Service Could Allow Remote Code Execution (2347290)</title>
            <affected family="windows">
               <platform>Microsoft Windows XP</platform>
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows Server 2008</platform>
               <platform>Microsoft Windows 7</platform>
               <platform>Microsoft Windows Server 2008 R2</platform>
            </affected>
            <reference source="Microsoft" ref_id="MS10-061" ref_url="http://www.microsoft.com/technet/security/Bulletin/MS10-061.mspx"/>
            <reference source="Microsoft" ref_id="KB2347290" ref_url="http://support.microsoft.com/default.aspx/kb/2347290"/>
            <reference source="CVE" ref_id="CVE-2010-2729" ref_url="http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2729"/>
            <description>Microsoft has released MS10-061 to address security issues in Windows XP, Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2 as documented by CVE-2010-2729</description>
         </metadata>
         <criteria operator="OR">
            <criteria operator="AND" comment="WinXP,SP3 (32-bit)">
               <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
               <criterion comment="Spoolsv.exe version is less than 5.1.2600.6024" test_ref="oval:gov.nist.fdcc.patch:tst:116920"/>
            </criteria>
            <criteria operator="AND" comment="WinXP,SP2 (64-bit)">
               <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
               <criterion comment="Spoolsv.exe version is less than 5.2.3790.4759" test_ref="oval:gov.nist.fdcc.patch:tst:116921"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit,64-bit, ia-64) - GDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               </criteria>
               <criterion comment="Spoolsv.exe version is less than 6.0.6001.18511" test_ref="oval:gov.nist.fdcc.patch:tst:116923"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit, 64-bit, ia-64) - LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               </criteria>
               <criterion comment="Spoolsv.exe version is greater than or equal to 6.0.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:116924"/>
               <criterion comment="Spoolsv.exe version is less than 6.0.6001.22743" test_ref="oval:gov.nist.fdcc.patch:tst:116925"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - GDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <criterion comment="Spoolsv.exe version is greater than or equal to 6.0.6002.18000" test_ref="oval:gov.nist.fdcc.patch:tst:116926"/>
               <criterion comment="Spoolsv.exe version is less than 6.0.6002.18294" test_ref="oval:gov.nist.fdcc.patch:tst:116927"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <criterion comment="Spoolsv.exe version is greater than or equal to 6.0.6002.22000" test_ref="oval:gov.nist.fdcc.patch:tst:116928"/>
               <criterion comment="Spoolsv.exe version is less than 6.0.6002.22468" test_ref="oval:gov.nist.fdcc.patch:tst:116929"/>
            </criteria>
            <criteria operator="AND" comment="Vulnerable Microsoft Windows 7 x86/x64, Windows Server 2008 R2 x64/ia64">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows 7 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:6165"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:5950"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:6438"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed" definition_ref="oval:org.mitre.oval:def:5954"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criterion comment="Spoolsv.exe version is less than 6.1.7600.16661" test_ref="oval:gov.nist.fdcc.patch:tst:1169290"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Spoolsv.exe version is greater than or equal to 6.1.7600.20000" test_ref="oval:gov.nist.fdcc.patch:tst:1169291"/>
                     <criterion comment="Spoolsv.exe version is less than 6.1.7600.20785" test_ref="oval:gov.nist.fdcc.patch:tst:1169292"/>
                  </criteria>
               </criteria>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11693" version="1" class="patch">
         <metadata>
            <title>MS10-062: Vulnerability in MPEG-4 Codec Could Allow Remote Code Execution (975558)</title>
            <affected family="windows">
               <platform>Microsoft Windows XP</platform>
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows Server 2008</platform>
            </affected>
            <reference source="Microsoft" ref_id="MS10-062" ref_url="http://www.microsoft.com/technet/security/Bulletin/MS10-062.mspx"/>
            <reference source="Microsoft" ref_id="KB975558" ref_url="http://support.microsoft.com/default.aspx/kb/975558"/>
            <reference source="CVE" ref_id="CVE-2010-0818" ref_url="http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0818"/>
            <description>Microsoft has released MS10-062 to address security issues in Windows XP, Windows Vista, and Windows Server 2008 as documented by CVE-2010-0818</description>
         </metadata>
         <criteria operator="OR">
            <criteria operator="AND" comment="WinXP,SP3 (32-bit)">
               <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
               <criteria operator="OR" comment="GDR or QFE Service branch">
                  <criterion comment="Mp4sdmod.dll version is less than 9.0.0.4509" test_ref="oval:gov.nist.fdcc.patch:tst:116930"/>
                  <criteria operator="AND" comment="GDR or QFE">
                     <criterion comment="Mp4sdmod.dll version is greater than or equal to 10.0.0.0" test_ref="oval:gov.nist.fdcc.patch:tst:116931"/>
                     <criterion comment="Mp4sdmod.dll version is less than 10.0.0.3706" test_ref="oval:gov.nist.fdcc.patch:tst:116932"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="WinXP,SP2 (64-bit)">
               <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
               <criterion comment="Mp4sdmod.dll version is less than 10.0.0.4007" test_ref="oval:gov.nist.fdcc.patch:tst:116933"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit,64-bit, ia-64) - GDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               </criteria>
               <criterion comment="Mp4sdecd.dll version is less than 11.0.6001.7009" test_ref="oval:gov.nist.fdcc.patch:tst:116934"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit, 64-bit, ia-64) - LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               </criteria>
               <criterion comment="Mp4sdecd.dll version is greater than or equal to 11.0.6001.7100" test_ref="oval:gov.nist.fdcc.patch:tst:116935"/>
               <criterion comment="Mp4sdecd.dll version is less than 11.0.6001.7117" test_ref="oval:gov.nist.fdcc.patch:tst:116936"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - GDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <criterion comment="Mp4sdecd.dll version is less than 11.0.6002.18236" test_ref="oval:gov.nist.fdcc.patch:tst:116938"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <criterion comment="Mp4sdecd.dll version is greater than or equal to 11.0.6002.22000" test_ref="oval:gov.nist.fdcc.patch:tst:116939"/>
               <criterion comment="Mp4sdecd.dll version is less than 11.0.6002.22377" test_ref="oval:gov.nist.fdcc.patch:tst:1169390"/>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11694" version="1" class="patch">
         <metadata>
            <title>MS10-063: Vulnerability in Unicode Scripts Processor Could Allow Remote Code Execution (2320113)</title>
            <affected family="windows">
               <platform>Microsoft Windows XP</platform>
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows Server 2008</platform>
            </affected>
            <reference source="Microsoft" ref_id="MS10-063" ref_url="http://www.microsoft.com/technet/security/Bulletin/MS10-063.mspx"/>
            <reference source="Microsoft" ref_id="KB2320113" ref_url="http://support.microsoft.com/default.aspx/kb/2320113"/>
            <reference source="CVE" ref_id="CVE-2010-2738" ref_url="http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2738"/>
            <description>Microsoft has released MS10-063 to address security issues in Windows XP, Windows Vista, and Windows Server 2008 as documented by CVE-2010-2738</description>
         </metadata>
         <criteria operator="OR">
            <criteria operator="AND" comment="WinXP,SP3 (32-bit)">
               <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
               <criterion comment="Usp10.dll version is less than 1.420.2600.5969" test_ref="oval:gov.nist.fdcc.patch:tst:116940"/>
            </criteria>
            <criteria operator="AND" comment="WinXP,SP2 (64-bit)">
               <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
               <criterion comment="Usp10.dll version is less than 1.422.3790.4695" test_ref="oval:gov.nist.fdcc.patch:tst:116941"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit,64-bit, ia-64) - GDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               </criteria>
               <criterion comment="Usp10.dll version is less than 1.626.6001.18461" test_ref="oval:gov.nist.fdcc.patch:tst:116942"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit, 64-bit, ia-64) - LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               </criteria>
               <criterion comment="Usp10.dll version is greater than or equal to 1.626.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:116943"/>
               <criterion comment="Usp10.dll version is less than 1.626.6001.22672" test_ref="oval:gov.nist.fdcc.patch:tst:116944"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - GDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <criterion comment="Usp10.dll version is greater than or equal to 1.626.6002.18000" test_ref="oval:gov.nist.fdcc.patch:tst:116945"/>
               <criterion comment="Usp10.dll version is less than 1.626.6002.18244" test_ref="oval:gov.nist.fdcc.patch:tst:116946"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <criterion comment="Usp10.dll version is greater than or equal to 1.626.6002.22000" test_ref="oval:gov.nist.fdcc.patch:tst:116947"/>
               <criterion comment="Usp10.dll version is less than 1.626.6002.22384" test_ref="oval:gov.nist.fdcc.patch:tst:116948"/>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11695" version="2" class="patch">
         <metadata>
            <title>MS10-065: Vulnerabilities in Microsoft Internet Information Services (IIS) Could Allow Remote Code Execution (2267960)</title>
            <affected family="windows">
               <platform>Microsoft Windows XP</platform>
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows Server 2008</platform>
               <platform>Microsoft Windows 7</platform>
               <platform>Microsoft Windows Server 2008 R2</platform>
            </affected>
            <reference source="Microsoft" ref_id="MS10-065" ref_url="http://www.microsoft.com/technet/security/Bulletin/MS10-065.mspx"/>
            <reference source="Microsoft" ref_id="KB2267960" ref_url="http://support.microsoft.com/default.aspx/kb/2267960"/>
            <reference source="CVE" ref_id="CVE-2010-1899" ref_url="http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1899"/>
            <reference source="CVE" ref_id="CVE-2010-2730" ref_url="http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2730"/>
            <reference source="CVE" ref_id="CVE-2010-2731" ref_url="http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2731"/>
            <description>Microsoft has released MS10-065 to address security issues in Windows XP, Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2 as documented by CVE-2010-1899, CVE-2010-2730, and CVE-2010-2731</description>
         </metadata>
         <criteria operator="OR">
            <criteria operator="AND" comment="WinXP,SP3 (32-bit)">
               <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
               <criterion comment="The iis optional component is installed" test_ref="oval:gov.nist.fdcc.patch:tst:4600001"/>
               <criteria operator="OR">
                  <criterion comment="asp.dll version is less than 5.1.2600.6007" test_ref="oval:gov.nist.fdcc.patch:tst:116950"/>
                  <criterion comment="infocomm.dll version is less than 6.0.2600.6018" test_ref="oval:gov.nist.fdcc.patch:tst:116951"/>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit,64-bit, ia-64) - GDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               </criteria>
               <extend_definition comment="Microsoft IIS 7.0 is installed" definition_ref="oval:org.mitre.oval:def:5377"/>
               <criterion comment="Asp.dll version is less than 7.0.6001.18497" test_ref="oval:gov.nist.fdcc.patch:tst:116952"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit, 64-bit, ia-64) - LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               </criteria>
               <extend_definition comment="Microsoft IIS 7.0 is installed" definition_ref="oval:org.mitre.oval:def:5377"/>
               <criterion comment="Asp.dll version is greater than or equal to 7.0.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:116953"/>
               <criterion comment="Asp.dll version is less than 7.0.6001.22718" test_ref="oval:gov.nist.fdcc.patch:tst:116954"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - GDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <extend_definition comment="Microsoft IIS 7.0 is installed" definition_ref="oval:org.mitre.oval:def:5377"/>
               <criterion comment="Asp.dll version is greater than or equal to 7.0.6002.18000" test_ref="oval:gov.nist.fdcc.patch:tst:116955"/>
               <criterion comment="Asp.dll version is less than 7.0.6002.18276" test_ref="oval:gov.nist.fdcc.patch:tst:116956"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <extend_definition comment="Microsoft IIS 7.0 is installed" definition_ref="oval:org.mitre.oval:def:5377"/>
               <criterion comment="Asp.dll version is greater than or equal to 7.0.6002.22000" test_ref="oval:gov.nist.fdcc.patch:tst:116957"/>
               <criterion comment="Asp.dll version is less than 7.0.6002.22431" test_ref="oval:gov.nist.fdcc.patch:tst:116958"/>
            </criteria>
            <criteria operator="AND" comment="Vulnerable Microsoft Windows 7 x86/x64, Windows Server 2008 R2 x64/ia64">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows 7 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:6165"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:5950"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:6438"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed" definition_ref="oval:org.mitre.oval:def:5954"/>
               </criteria>
               <extend_definition comment="Microsoft IIS 7.5 is installed" definition_ref="oval:org.mitre.oval:def:6856"/>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <!-- GDR Service branch -->
                  <criterion comment="Asp.dll version is less than 7.5.7600.16620" test_ref="oval:gov.nist.fdcc.patch:tst:116959"/>
                  <criterion comment="Cgi.dll version is less than 7.5.7600.16632" test_ref="oval:gov.nist.fdcc.patch:tst:1169590"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Asp.dll version is greater than or equal to 7.5.7600.20000" test_ref="oval:gov.nist.fdcc.patch:tst:1169591"/>
                     <criterion comment="Asp.dll version is less than 7.5.7600.20741" test_ref="oval:gov.nist.fdcc.patch:tst:1169592"/>
                  </criteria>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Cgi.dll version is greater than or equal to 7.5.7600.20000" test_ref="oval:gov.nist.fdcc.patch:tst:1169593"/>
                     <criterion comment="Cgi.dll version is less than 7.5.7600.20752" test_ref="oval:gov.nist.fdcc.patch:tst:1169594"/>
                  </criteria>
               </criteria>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11698" version="1" class="patch">
         <metadata>
            <title>MS10-068: Vulnerability in Local Security Authority Subsystem Service Could Allow Elevation of Privilege (983539)</title>
            <affected family="windows">
               <platform>Microsoft Windows XP</platform>
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows Server 2008</platform>
               <platform>Microsoft Windows 7</platform>
               <platform>Microsoft Windows Server 2008 R2</platform>
            </affected>
            <reference source="Microsoft" ref_id="MS10-068" ref_url="http://www.microsoft.com/technet/security/bulletin/MS10-068.mspx"/>
            <reference source="Microsoft" ref_id="KB983539" ref_url="http://support.microsoft.com/kb/983539"/>
            <reference source="CVE" ref_id="CVE-2010-0820" ref_url="http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0820"/>
            <description>Microsoft has released MS10-068 to address security issues in Active Directory, Active Directory Application Mode (ADAM), and Active Directory Lightweight Directory Service (AD LDS) when installed on supported editions of Windows XP, Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2 as documented by CVE-2010-0820</description>
         </metadata>
         <criteria operator="OR">
            <criteria operator="AND" comment="Vulnerable Windows XP (x86) SP3, Windows XP (x64) SP2, Windows Server 2003 x64/x86/ia64 SP2">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
                  <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
               </criteria>
               <criterion comment="An Adam Instance has been created" test_ref="oval:gov.nist.fdcc.patch:tst:116229"/>
               <criterion comment="adamdsa.dll version is less than 1.1.3790.4722" test_ref="oval:gov.nist.fdcc.patch:tst:116980"/>
            </criteria>
            <criteria operator="AND" comment="Vulnerable Windows Vista x86/x64 SP1, Windows Server 2008 x86/x64/ia64 SP1">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criterion comment="ntdsai.dll version is less than 6.0.6001.18461" test_ref="oval:gov.nist.fdcc.patch:tst:116981"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="ntdsai.dll version is greater than or equal 6.0.6001.22000" test_ref="oval:org.mitre.oval:tst:10907"/>
                     <criterion comment="ntdsai.dll version is less than 6.0.6001.22672" test_ref="oval:gov.nist.fdcc.patch:tst:116982"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="Vulnerable Microsoft Windows Vista SP2 x86/x64, Server 2008 SP2 32bit/x64/ia64">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criterion comment="ntdsai.dll version is less than 6.0.6002.18244" test_ref="oval:gov.nist.fdcc.patch:tst:116983"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="ntdsai.dll version is greater than or equal 6.0.6002.22000" test_ref="oval:org.mitre.oval:tst:10980"/>
                     <criterion comment="ntdsai.dll version is less than 6.0.6002.22384" test_ref="oval:gov.nist.fdcc.patch:tst:116984"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="Vulnerable Windows 7 x86/x64, Windows Server 2008 R2 x86/x64/ia64">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows 7 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:6165"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:5950"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:6438"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed" definition_ref="oval:org.mitre.oval:def:5954"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criterion comment="ntdsai.dll version is less than 6.1.7600.16612" test_ref="oval:gov.nist.fdcc.patch:tst:116985"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="ntdsai.dll version is greater than or equal 6.1.7600.20000" test_ref="oval:gov.nist.fdcc.patch:tst:116987"/>
                     <criterion comment="ntdsai.dll version is less than 6.1.7600.20735" test_ref="oval:gov.nist.fdcc.patch:tst:116986"/>
                  </criteria>
               </criteria>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11700" version="3" class="patch">
         <metadata>
            <title>MS10-070: Vulnerability in ASP.NET Could Allow Information Disclosure (2418042)</title>
            <affected family="windows">
               <platform>Microsoft Windows XP</platform>
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows Server 2008</platform>
               <platform>Microsoft Windows 7</platform>
               <platform>Microsoft Windows Server 2008 R2</platform>
            </affected>
            <reference source="Microsoft" ref_id="MS10-070" ref_url="http://www.microsoft.com/technet/security/bulletin/MS10-070.mspx"/>
            <reference source="Microsoft" ref_id="KB2418042" ref_url="http://support.microsoft.com/kb/2418042"/>
            <reference source="CVE" ref_id="CVE-2010-3332" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3332"/>
            <description>Microsoft has released MS10-070 to address security issues in as documented by CVE-2010-3332</description>
         </metadata>
         <criteria operator="OR">
            <criteria operator="AND" comment="(vista sp1/2 (32/64) OR 2008 RTM/sp2 (32/64) OR xp sp3 OR xp x64 sp2 OR 7 OR 2008 R2) AND .net 1.1 sp1">
               <criteria operator="OR" comment="vista sp1/2 (32/64) OR 2008 RTM/sp2 (32/64) OR xp sp2/3 OR xp x64 sp2 OR 7 OR 2008 R2">
                  <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
                  <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <extend_definition comment="Microsoft .NET Framework 1.1 Service Pack 1, or later, is Installed" definition_ref="oval:gov.nist.fdcc.patch:def:115285"/>
               <criterion comment="Mscorsvr.dll version is less than 1.1.4322.2470" test_ref="oval:gov.nist.fdcc.patch:tst:1170000"/>
            </criteria>
            <criteria operator="AND" comment="(xp sp3 OR xp x64 sp2) AND (.net 3.5 OR 3.5 sp1)">
               <criteria operator="OR" comment="xp sp3 OR xp x64 sp2">
                  <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
                  <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
               </criteria>
               <criteria operator="OR" comment=".net 3.5 or 3.5 sp1">
                  <criteria operator="AND" comment=".net 3.5">
                     <extend_definition comment="Microsoft .NET Framework 3.5 (Gold) is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11582"/>
                     <criteria operator="OR">
                        <criterion comment="System.Web.Extensions.dll version is less than 3.5.21022.239" test_ref="oval:gov.nist.fdcc.patch:tst:1170001"/>
                        <criterion comment="Aspnet_perf.dll version is less than 2.0.50727.1887" test_ref="oval:gov.nist.fdcc.patch:tst:1170003"/>
                     </criteria>
                  </criteria>
                  <criteria operator="AND" comment=".net 3.5 sp1">
                     <extend_definition comment="Microsoft .NET Framework 3.5 Service Pack 1, or later, is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11583"/>
                     <criterion comment="System.Web.Extensions.dll version is less than 3.5.30729.3644" test_ref="oval:gov.nist.fdcc.patch:tst:1170002"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="(vista sp1 (32/64) OR 2008 RTM (32/64)) AND .net 3.5 (Gold)">
               <criteria operator="OR" comment="vista sp1 (32/64) OR 2008 RTM (32/64)">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               </criteria>
               <extend_definition comment="Microsoft .NET Framework 3.5 (Gold) is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11582"/>
               <criterion comment="System.Web.Extensions.dll version is less than 3.5.21022.239" test_ref="oval:gov.nist.fdcc.patch:tst:1170001"/>
            </criteria>
            <criteria operator="AND" comment="(vista sp1 (32/64) OR 2008 RTM (32/64)) AND .net 2.0 sp1 AND 3.5 (Gold)">
               <criteria operator="OR" comment="vista sp1 (32/64) OR 2008 RTM (32/64)">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               </criteria>
               <extend_definition comment="Microsoft .NET Framework 2.0 Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:6428"/>
               <extend_definition comment="Microsoft .NET Framework 3.5 (Gold) is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11582"/>
               <criterion comment="Aspnet_wp.exe version is less than 2.0.50727.1887" test_ref="oval:gov.nist.fdcc.patch:tst:1170004"/>
            </criteria>
            <criteria operator="AND" comment="(vista sp2 (32/64) OR 2008 sp2 (32/64)) AND 3.5 sp1 - GDR">
               <criteria operator="OR" comment="vista sp2 (32/64) OR 2008 sp2 (32/64)">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <extend_definition comment="Microsoft .NET Framework 3.5 Service Pack 1, or later, is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115295"/>
               <criterion comment="Aspnet_wp.exe version is less than 2.0.50727.4209" test_ref="oval:gov.nist.fdcc.patch:tst:1170005"/>
            </criteria>
            <criteria operator="AND" comment="(vista sp1 (32/64) OR 2008 RTM (32/64) OR xp sp3 OR xp x64 sp2) AND .net 2.0 sp2 AND 3.5 sp1 - GDR">
               <criteria operator="OR" comment="vista sp1 (32/64) OR 2008 RTM (32/64) OR xp sp3 OR xp x64 sp2">
                  <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
                  <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               </criteria>
               <criteria operator="OR">
                  <extend_definition comment="Microsoft .NET Framework 2.0 Service Pack 2, or later, is installed" definition_ref="oval:org.mitre.oval:def:6158"/>
                  <extend_definition comment="Microsoft .NET Framework 3.5 Service Pack 1, or later, is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11583"/>
               </criteria>
               <criterion comment="Aspnet_wp.exe version is less than 2.0.50727.3618" test_ref="oval:gov.nist.fdcc.patch:tst:1170006"/>
            </criteria>
            <criteria operator="AND" comment="(7 x86/x64 OR Server 2008 R2 x64/ia64) AND .NET 3.5 sp1 - GDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows 7 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:6165"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:5950"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:6438"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed" definition_ref="oval:org.mitre.oval:def:5954"/>
               </criteria>
               <extend_definition comment="Microsoft .NET Framework 3.5 Service Pack 1, or later, is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11583"/>
               <criterion comment="Aspnet_wp.exe version is less than 2.0.50727.4955" test_ref="oval:gov.nist.fdcc.patch:tst:1170007"/>
            </criteria>
            <criteria operator="AND" comment="(vista sp2 (32/64) OR 2008 sp2 (32/64) OR 7 x86/x64 OR Server 2008 R2 x64/ia64) AND 3.5 sp1 - LDR">
               <criteria operator="OR" comment="vista sp2 (32/64) OR 2008 sp2 (32/64)">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
                  <extend_definition comment="Microsoft Windows 7 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:6165"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:5950"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:6438"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed" definition_ref="oval:org.mitre.oval:def:5954"/>
               </criteria>
               <extend_definition comment="Microsoft .NET Framework 3.5 Service Pack 1, or later, is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115295"/>
               <criteria operator="AND" comment="LDR">
                  <criterion comment="Aspnet_wp.exe version is greater than or equal to 2.0.50727.5000" test_ref="oval:gov.nist.fdcc.patch:tst:1170008"/>
                  <criterion comment="Aspnet_wp.exe version is less than 2.0.50727.5053" test_ref="oval:gov.nist.fdcc.patch:tst:1170009"/>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="(vista sp1/2 (32/64) OR 2008 RTM/sp2 (32/64) OR xp sp3 OR xp x64 sp2 OR 7 OR 2008 R2) AND .net 4.0">
               <criteria operator="OR" comment="vista sp1/2 (32/64) OR 2008 RTM/sp2 (32/64) OR xp sp2/3 OR xp x64 sp2 OR 7 OR 2008 R2">
                  <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
                  <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <extend_definition comment="Microsoft .NET Framework 4.0 is Installed" definition_ref="oval:gov.nist.fdcc.patch:def:115295"/>
               <criteria operator="OR" comment="GDR or LDR update has been applied">
                  <criterion comment="System.Web.dll version is less than 4.0.30319.206" test_ref="oval:gov.nist.fdcc.patch:tst:1170010"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="System.Web.dll version is greater than or equal to 4.0.30319.300" test_ref="oval:gov.nist.fdcc.patch:tst:1170011"/>
                     <criterion comment="System.Web.dll version is less than 4.0.30319.363" test_ref="oval:gov.nist.fdcc.patch:tst:1170012"/>
                  </criteria>
               </criteria>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11703" version="1" class="patch">
         <metadata>
            <title>MS10-074: Vulnerability in Microsoft Foundation Classes Could Allow Remote Code Execution (2387149)</title>
            <affected family="windows">
               <platform>Microsoft Windows XP</platform>
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows Server 2008</platform>
               <platform>Microsoft Windows 7</platform>
               <platform>Microsoft Windows Server 2008 R2</platform>
            </affected>
            <reference source="Microsoft" ref_id="MS10-074" ref_url="http://www.microsoft.com/technet/security/bulletin/MS10-074.mspx"/>
            <reference source="Microsoft" ref_id="KB2387149" ref_url="http://support.microsoft.com/kb/2387149"/>
            <reference source="CVE" ref_id="CVE-2010-3227" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3227"/>
            <description>Microsoft has released MS10-074 to address security issues in Windows XP, Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2 as documented by CVE-2010-3227.</description>
         </metadata>
         <criteria operator="AND" comment="Vulnerable Windows XP sp3, Windows XP x64 sp2, Windows Server 2003 x86/x64/ia64 sp2, Windows Vista x86/x64 sp1, Windows Vista x86/x64 sp2, Windows Server 2008 x86/x64/ia64, Windows Server x86/x64/ia64 sp2, Windows Server 2008 r2 x64/ia64, Windows 7 x86/x64">
            <criteria operator="OR">
               <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
               <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
               <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
               <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
               <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
               <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
               <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
               <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
               <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
               <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
               <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               <extend_definition comment="Microsoft Windows 7 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:6165"/>
               <extend_definition comment="Microsoft Windows 7 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:5950"/>
               <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:6438"/>
               <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed" definition_ref="oval:org.mitre.oval:def:5954"/>
            </criteria>
            <criterion comment=" Mfc40u.dll version is less than 4.1.0.6151" test_ref="oval:gov.nist.fdcc.patch:tst:117030"/>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11704" version="1" class="patch">
         <metadata>
            <title>MS10-075: Vulnerability in Media Player Network Sharing Service Could Cause Remote Code Execution (2281679)</title>
            <affected family="windows">
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows 7</platform>
            </affected>
            <reference source="Microsoft" ref_id="MS10-075" ref_url="http://www.microsoft.com/technet/security/bulletin/MS10-075.mspx"/>
            <reference source="Microsoft" ref_id="KB2281679" ref_url="http://support.microsoft.com/kb/2281679"/>
            <reference source="CVE" ref_id="CVE-2010-3225" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3225"/>
            <description>Microsoft has released MS10-075 to address security issues in Windows Vista and 7 as documented by CVE-2010-3225.</description>
         </metadata>
         <criteria operator="OR">
            <criteria operator="AND" comment="Vista SP1 (32-bit,64-bit, ia-64) - GDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
               </criteria>
               <criterion comment="Wmpmde.dll version is greater than or equal to 11.0.6001.7000" test_ref="oval:gov.nist.fdcc.patch:tst:1170400"/>
               <criterion comment="Wmpmde.dll version is less than 11.0.6001.7009" test_ref="oval:gov.nist.fdcc.patch:tst:1170401"/>
            </criteria>
            <criteria operator="AND" comment="Vista SP1 (32-bit, 64-bit, ia-64) - LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
               </criteria>
               <criterion comment="Wmpmde.dll version is greater than or equal to 11.0.6001.7100" test_ref="oval:gov.nist.fdcc.patch:tst:1170402"/>
               <criterion comment="Wmpmde.dll version is less than 11.0.6001.7117" test_ref="oval:gov.nist.fdcc.patch:tst:1170403"/>
            </criteria>
            <criteria operator="AND" comment="Vista SP2 (32-bit, 64-bit, ia-64) - GDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
               </criteria>
               <criterion comment="Wmpmde.dll version is greater than or equal to 11.0.6002.18000" test_ref="oval:gov.nist.fdcc.patch:tst:1170404"/>
               <criterion comment="Wmpmde.dll version is less than 11.0.6002.18297" test_ref="oval:gov.nist.fdcc.patch:tst:1170405"/>
            </criteria>
            <criteria operator="AND" comment="Vista SP2 (32-bit, 64-bit, ia-64) - LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
               </criteria>
               <criterion comment="Wmpmde.dll version is greater than or equal to 11.0.6002.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1170406"/>
               <criterion comment="Wmpmde.dll version is less than 11.0.6002.22471" test_ref="oval:gov.nist.fdcc.patch:tst:1170407"/>
            </criteria>
            <criteria operator="AND" comment="7 (32-bit, 64-bit, ia-64) - GDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows 7 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:6165"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:5950"/>
               </criteria>
               <criterion comment="Wmpmde.dll version is less than 12.0.7600.16661" test_ref="oval:gov.nist.fdcc.patch:tst:1170408"/>
            </criteria>
            <criteria operator="AND" comment="7 R2 (32-bit, 64-bit, ia-64) - LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows 7 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:6165"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:5950"/>
               </criteria>
               <criterion comment="Wmpmde.dll version is greater than or equal to 12.0.7600.20000" test_ref="oval:gov.nist.fdcc.patch:tst:1170409"/>
               <criterion comment="Wmpmde.dll version is less than 12.0.7600.20787" test_ref="oval:gov.nist.fdcc.patch:tst:1170410"/>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11705" version="1" class="patch">
         <metadata>
            <title>MS10-076: Vulnerability in the Embedded OpenType Font Engine Could Allow Remote Code Execution (982132)</title>
            <affected family="windows">
               <platform>Microsoft Windows XP</platform>
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows Server 2008</platform>
               <platform>Microsoft Windows 7</platform>
               <platform>Microsoft Windows Server 2008 R2</platform>
            </affected>
            <reference source="Microsoft" ref_id="MS10-076" ref_url="http://www.microsoft.com/technet/security/bulletin/MS10-076.mspx"/>
            <reference source="Microsoft" ref_id="KB982132" ref_url="http://support.microsoft.com/kb/982132"/>
            <reference source="CVE" ref_id="CVE-2010-1883" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1883"/>
            <description>Microsoft has released MS10-076 to address security issues in Windows XP, Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2 as documented by CVE-2010-1883.</description>
         </metadata>
         <criteria operator="OR">
            <criteria operator="AND" comment="XP (32-bit) SP3">
               <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
               <criterion comment="T2embed.dll version is less than 5.1.2600.6031" test_ref="oval:gov.nist.fdcc.patch:tst:1170500"/>
            </criteria>
            <criteria operator="AND" comment="XP (64-bit) SP2">
               <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
               <criterion comment="T2embed.dll version is less than 5.2.3790.4766" test_ref="oval:gov.nist.fdcc.patch:tst:1170501"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit,64-bit, ia-64) - GDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               </criteria>
               <criterion comment="T2embed.dll version is greater than or equal to 6.0.6001.18000" test_ref="oval:gov.nist.fdcc.patch:tst:1170502"/>
               <criterion comment="T2embed.dll version is less than 6.0.6001.18520" test_ref="oval:gov.nist.fdcc.patch:tst:1170503"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit, 64-bit, ia-64) - LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               </criteria>
               <criterion comment="T2embed.dll version is greater than or equal to 6.0.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1170504"/>
               <criterion comment="T2embed.dll version is less than 6.0.6001.22750" test_ref="oval:gov.nist.fdcc.patch:tst:1170505"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - GDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <criterion comment="T2embed.dll version is greater than or equal to 6.0.6002.18000" test_ref="oval:gov.nist.fdcc.patch:tst:1170506"/>
               <criterion comment="T2embed.dll version is less than 6.0.6002.18301" test_ref="oval:gov.nist.fdcc.patch:tst:1170507"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <criterion comment="T2embed.dll version is greater than or equal to 6.0.6002.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1170508"/>
               <criterion comment="T2embed.dll version is less than 6.0.6002.22475" test_ref="oval:gov.nist.fdcc.patch:tst:1170509"/>
            </criteria>
            <criteria operator="AND" comment="7, Server 2008 R2 (32-bit, 64-bit, ia-64) - GDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows 7 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:6165"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:5950"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:6438"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed" definition_ref="oval:org.mitre.oval:def:5954"/>
               </criteria>
               <criterion comment="T2embed.dll version is less than 6.1.7600.16663" test_ref="oval:gov.nist.fdcc.patch:tst:1170510"/>
            </criteria>
            <criteria operator="AND" comment="7, Server 2008 R2 (32-bit, 64-bit, ia-64) - LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows 7 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:6165"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:5950"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:6438"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed" definition_ref="oval:org.mitre.oval:def:5954"/>
               </criteria>
               <criterion comment="T2embed.dll version is greater than or equal to 6.1.7600.20000" test_ref="oval:gov.nist.fdcc.patch:tst:1170511"/>
               <criterion comment="T2embed.dll version is less than 6.1.7600.20788" test_ref="oval:gov.nist.fdcc.patch:tst:1170512"/>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11706" version="1" class="patch">
         <metadata>
            <title>MS10-077: Vulnerability in .NET Framework Could Allow Remote Code Execution (2160841)</title>
            <affected family="windows">
               <platform>Microsoft Windows XP</platform>
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows Server 2008</platform>
               <platform>Microsoft Windows 7</platform>
               <platform>Microsoft Windows Server 2008 R2</platform>
            </affected>
            <reference source="Microsoft" ref_id="MS10-077" ref_url="http://www.microsoft.com/technet/security/bulletin/MS10-077.mspx"/>
            <reference source="Microsoft" ref_id="KB2160841" ref_url="http://support.microsoft.com/kb/2160841"/>
            <reference source="CVE" ref_id="CVE-2010-3228" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3228"/>
            <description>Microsoft has released MS10-077 to address security issues in x64-based and Itanium-based editions of Windows XP, Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2 as documented by CVE-2010-3228.</description>
         </metadata>
         <criteria operator="AND" comment="(XP SP2 OR Vista SP1/SP2 OR Server 2008 RTM/SP2 OR 7 OR 2008 R2)(64-bit/ia-64) AND .Net 4.0">
            <criteria operator="OR">
               <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
               <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
               <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
               <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
               <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
               <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               <extend_definition comment="Microsoft Windows 7 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:5950"/>
               <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:6438"/>
               <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed" definition_ref="oval:org.mitre.oval:def:5954"/>
            </criteria>
            <extend_definition comment="Microsoft .NET Framework 4.0 is Installed" definition_ref="oval:gov.nist.fdcc.patch:def:115295"/>
            <criteria operator="OR">
               <criteria operator="AND" comment="GDR">
                  <criterion comment="clrjit.dll version is less than 4.0.30319.202" test_ref="oval:gov.nist.fdcc.patch:tst:117060"/>
               </criteria>
               <criteria operator="AND" comment="LDR">
                  <criterion comment="clrjit.dll version is greater than or equal to 4.0.30319.300" test_ref="oval:gov.nist.fdcc.patch:tst:117061"/>
                  <criterion comment="clrjit.dll version is less than 4.0.30319.336" test_ref="oval:gov.nist.fdcc.patch:tst:117062"/>
               </criteria>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11708" version="2" class="patch">
         <metadata>
            <title>MS10-081: Vulnerability in Windows Common Control Library Could Allow Remote Code Execution (2296011)</title>
            <affected family="windows">
               <platform>Microsoft Windows XP</platform>
               <platform>Microsoft Windows Server 2008</platform>
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows 7</platform>
               <platform>Microsoft Windows Server 2008 R2</platform>
            </affected>
            <reference source="Microsoft" ref_id="MS10-081" ref_url="http://www.microsoft.com/technet/security/bulletin/MS10-081.mspx"/>
            <reference source="Microsoft" ref_id="KB2296011" ref_url="http://support.microsoft.com/kb/2296011"/>
            <reference source="CVE" ref_id="CVE-2010-2746" ref_url="http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2746"/>
            <description>Microsoft has released MS10-081 to address security issues in Windows Shell in Microsoft Windows XP SP3, Vista SP1 and SP2, Server 2008 SP2 and R2, and Windows 7 as documented by CVE-2010-2746</description>
         </metadata>
         <criteria operator="OR">
            <criteria operator="AND" comment="Vulnerable Microsoft Windows XP SP3">
               <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
               <criterion comment="Comctl32.dll version is less than 5.82.2900.6028" test_ref="oval:gov.nist.fdcc.patch:tst:1170800"/>
            </criteria>
            <criteria operator="AND" comment="Vulnerable Microsoft Windows XP x64 SP2">
               <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
               <criterion comment="Comctl32.dll version is less than 5.82.3790.4770" test_ref="oval:gov.nist.fdcc.patch:tst:1170801"/>
            </criteria>
            <criteria operator="AND" comment="Vulnerable Microsoft Windows Vista x86/x64 SP1, Server 2008 x86/x64/ia64">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criterion comment="Comctl32.dll version is less than 5.82.6001.18523" test_ref="oval:gov.nist.fdcc.patch:tst:1170802"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Comctl32.dll version is greater than or equal to 5.82.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1170803"/>
                     <criterion comment="Comctl32.dll version is less than 5.82.6001.22755" test_ref="oval:gov.nist.fdcc.patch:tst:1170804"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="Vulnerable Microsoft Windows Vista x86/x64 SP2, Server 2008 x86/x64/ia64 SP2">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criterion comment="Comctl32.dll version is less than 5.82.6002.18305" test_ref="oval:gov.nist.fdcc.patch:tst:1170805"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Comctl32.dll version is greater than or equal to 5.82.6002.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1170806"/>
                     <criterion comment="Comctl32.dll version is less than 5.82.6002.22480" test_ref="oval:gov.nist.fdcc.patch:tst:1170807"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="Vulnerable Microsoft Windows Vista x86/x64 SP1, Server 2008 x86/x64/ia64">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               </criteria>
               <criteria operator="AND" comment="GDR Service branch">
                  <criterion comment="Comctl32.dll version is greater than or equal to 6.10.6001.18000" test_ref="oval:gov.nist.fdcc.patch:tst:1170808"/>
                  <criterion comment="Comctl32.dll version is less than 6.10.6001.18523" test_ref="oval:gov.nist.fdcc.patch:tst:1170809"/>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="Vulnerable Microsoft Windows Vista x86/x64 SP1, Server 2008 x86/x64/ia64">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               </criteria>
               <criteria operator="AND" comment="LDR">
                  <criterion comment="Comctl32.dll version is greater than or equal to 6.10.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1170810"/>
                  <criterion comment="Comctl32.dll version is less than 6.10.6001.22755" test_ref="oval:gov.nist.fdcc.patch:tst:1170811"/>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="Vulnerable Microsoft Windows Vista x86/x64 SP2, Server 2008 x86/x64/ia64 SP2">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <criteria operator="AND" comment="GDR">
                  <criterion comment="Comctl32.dll version is greater than or equal to 6.10.6002.18000" test_ref="oval:gov.nist.fdcc.patch:tst:1170812"/>
                  <criterion comment="Comctl32.dll version is less than 6.10.6002.18305" test_ref="oval:gov.nist.fdcc.patch:tst:1170813"/>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="Vulnerable Microsoft Windows Vista x86/x64 SP2, Server 2008 x86/x64/ia64 SP2">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <criteria operator="AND" comment="LDR">
                  <criterion comment="Comctl32.dll version is greater than or equal to 6.10.6002.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1170814"/>
                  <criterion comment="Comctl32.dll version is less than 6.10.6002.22480" test_ref="oval:gov.nist.fdcc.patch:tst:1170815"/>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="Vulnerable Microsoft Windows 7 x86/x64, Windows Server 2008 R2 x64/ia64">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows 7 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:6165"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:5950"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:6438"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed" definition_ref="oval:org.mitre.oval:def:5954"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criterion comment="Comctl32.dll version is less than 5.82.7600.16661" test_ref="oval:gov.nist.fdcc.patch:tst:1170816"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Comctl32.dll version is greater than or equal to 5.82.7600.20000" test_ref="oval:gov.nist.fdcc.patch:tst:1170817"/>
                     <criterion comment="Comctl32.dll version is less than 5.82.7600.20787" test_ref="oval:gov.nist.fdcc.patch:tst:1170818"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="Vulnerable Microsoft Windows 7 x86/x64, Windows Server 2008 R2 x64/ia64">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows 7 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:6165"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:5950"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:6438"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed" definition_ref="oval:org.mitre.oval:def:5954"/>
               </criteria>
               <criteria operator="AND" comment="GDR">
                  <criterion comment="Comctl32.dll version is greater than or equal to 6.10.7600.16000" test_ref="oval:gov.nist.fdcc.patch:tst:1170819"/>
                  <criterion comment="Comctl32.dll version is less than 6.10.7600.16661" test_ref="oval:gov.nist.fdcc.patch:tst:1170820"/>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="Vulnerable Microsoft Windows 7 x86/x64, Windows Server 2008 R2 x64/ia64">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows 7 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:6165"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:5950"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:6438"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed" definition_ref="oval:org.mitre.oval:def:5954"/>
               </criteria>
               <criteria operator="AND" comment="LDR">
                  <criterion comment="Comctl32.dll version is greater than or equal to 6.10.7600.20000" test_ref="oval:gov.nist.fdcc.patch:tst:1170821"/>
                  <criterion comment="Comctl32.dll version is less than 6.10.7600.20787" test_ref="oval:gov.nist.fdcc.patch:tst:1170822"/>
               </criteria>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11709" version="3" class="patch">
         <metadata>
            <title>MS10-082: Vulnerability in Windows Media Player Could Allow Remote Code Execution (2378111)</title>
            <affected family="windows">
               <platform>Microsoft Windows XP</platform>
               <platform>Microsoft Windows Server 2008</platform>
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows 7</platform>
               <platform>Microsoft Windows Server 2008 R2</platform>
            </affected>
            <reference source="Microsoft" ref_id="MS10-082" ref_url="http://www.microsoft.com/technet/security/bulletin/MS10-082.mspx"/>
            <reference source="Microsoft" ref_id="KB2378111" ref_url="http://support.microsoft.com/kb/2378111"/>
            <reference source="CVE" ref_id="CVE-2010-2745" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2745"/>
            <description>Microsoft has released MS10-082 to address security issues in Windows XP, Windows Vista, and Windows Server 2008 as documented by CVE-2010-2745</description>
         </metadata>
         <criteria operator="OR">
            <criteria operator="AND" comment="Windows Media Player 9 on Windows XP (32-bit) SP3">
               <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
               <extend_definition comment="Windows Media Player v9.0 is installed." definition_ref="oval:org.mitre.oval:def:2147"/>
               <criterion comment="Wmp.dll version is less than 9.0.0.4510" test_ref="oval:gov.nist.fdcc.patch:tst:1170900"/>
            </criteria>
            <criteria operator="AND" comment="Windows Media Player 10 on Windows XP (32-bit) SP3">
               <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
               <extend_definition comment="Windows Media Player v10.0 is installed." definition_ref="oval:org.mitre.oval:def:2172"/>
               <criterion comment="Wmp.dll version is less than 10.0.0.4081" test_ref="oval:gov.nist.fdcc.patch:tst:1170901"/>
            </criteria>
            <criteria operator="AND" comment="Windows Media Player 10 on Windows XP (64-bit) SP2">
               <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
               <extend_definition comment="Windows Media Player v10.0 is installed." definition_ref="oval:org.mitre.oval:def:2172"/>
               <criterion comment="Wwmp.dll version is less than 10.0.0.4008" test_ref="oval:gov.nist.fdcc.patch:tst:1170902"/>
            </criteria>
            <criteria operator="AND" comment="Windows Media Player 11 on Windows XP (32-bit) SP3">
               <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
               <extend_definition comment="Windows Media Player v11.0 is installed." definition_ref="oval:org.mitre.oval:def:2126"/>
               <criterion comment="Wwmp.dll version is less than 11.0.5721.5280" test_ref="oval:gov.nist.fdcc.patch:tst:1170903"/>
            </criteria>
            <criteria operator="AND" comment="Windows Media Player 11 on Windows XP (64-bit) SP2">
               <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
               <extend_definition comment="Windows Media Player v11.0 is installed." definition_ref="oval:org.mitre.oval:def:2126"/>
               <criterion comment="Wmp.dll version is less than 11.0.5721.5280" test_ref="oval:gov.nist.fdcc.patch:tst:1170904"/>
            </criteria>
            <criteria operator="AND" comment="Windows Media Player 11 on Windows Vista SP1/Server 2008 (32-bit)/(64-bit)/ia64">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               </criteria>
               <criterion comment="Wmp.dll version is less than 11.0.6001.7010" test_ref="oval:gov.nist.fdcc.patch:tst:1170905"/>
            </criteria>
            <criteria operator="AND" comment="Windows Media Player 11 on Windows Vista SP1/Server 2008 (32-bit)/(64-bit)/ia64">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               </criteria>
               <criterion comment="Wmp.dll version is greater than or equal to 11.0.6001.7100" test_ref="oval:gov.nist.fdcc.patch:tst:1170906"/>
               <criterion comment="Wmp.dll version is less than 11.0.6001.7118" test_ref="oval:gov.nist.fdcc.patch:tst:1170907"/>
            </criteria>
            <criteria operator="AND" comment="Windows Media Player 11 on Windows Vista SP2/Server 2008 SP2  (32-bit)/(64-bit)/ia64">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <criterion comment="Wmp.dll version is greater than or equal 11.0.6002.18000" test_ref="oval:gov.nist.fdcc.patch:tst:1170908"/>
               <criterion comment="Wmp.dll version is less than 11.0.6002.18311" test_ref="oval:gov.nist.fdcc.patch:tst:1170909"/>
            </criteria>
            <criteria operator="AND" comment="Windows Media Player 11 on Windows Vista SP2/Server 2008 SP2  (32-bit)/(64-bit)/ia64">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <criterion comment="Wmp.dll version is greater than or equal 11.0.6002.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1170910"/>
               <criterion comment="Wmp.dll version is less than 11.0.6002.22486" test_ref="oval:gov.nist.fdcc.patch:tst:1170911"/>
            </criteria>
            <criteria operator="AND" comment="Vulnerable Microsoft Windows 7 x86/x64, Windows Server 2008 R2 x64/ia64">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows 7 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:6165"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:5950"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:6438"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed" definition_ref="oval:org.mitre.oval:def:5954"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criterion comment="Wmp.dll version is less than 12.0.7600.16667" test_ref="oval:gov.nist.fdcc.patch:tst:1170912"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Wmp.dll version is greater than or equal to 12.0.7600.20000" test_ref="oval:gov.nist.fdcc.patch:tst:1170913"/>
                     <criterion comment="Wmp.dll version is less than 12.0.7600.20792" test_ref="oval:gov.nist.fdcc.patch:tst:1170914"/>
                  </criteria>
               </criteria>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11710" version="1" class="patch">
         <metadata>
            <title>MS10-083: Vulnerability in COM Validation in Windows Shell and WordPad Could Allow Remote Code Execution (2405882)</title>
            <affected family="windows">
               <platform>Microsoft Windows XP</platform>
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows Server 2008</platform>
               <platform>Microsoft Windows 7</platform>
               <platform>Microsoft Windows Server 2008 R2</platform>
            </affected>
            <reference source="Microsoft" ref_id="MS10-083" ref_url="http://www.microsoft.com/technet/security/Bulletin/MS10-083.mspx"/>
            <reference source="Microsoft" ref_id="KB2405882" ref_url="http://support.microsoft.com/default.aspx/kb/2405882"/>
            <reference source="CVE" ref_id="CVE-2010-1263" ref_url="http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1263"/>
            <description>Microsoft has released MS10-083 to address security issues in Windows XP, Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2 as documented by CVE-2010-1263</description>
         </metadata>
         <criteria operator="OR">
            <criteria operator="AND" comment="WinXP,SP3 (32-bit)">
               <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
               <criterion comment="Ole32.dll version is less than 5.1.2600.6010" test_ref="oval:gov.nist.fdcc.patch:tst:1171000"/>
            </criteria>
            <criteria operator="AND" comment="Vulnerable Microsoft Windows XP x64 SP2">
               <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
               <criterion comment="Ole32.dll version is less than 5.2.3790.4750" test_ref="oval:gov.nist.fdcc.patch:tst:1171001"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit, 64-bit, ia-64) - GDR or LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criterion comment="Ole32.dll version is less than 6.0.6001.18498" test_ref="oval:gov.nist.fdcc.patch:tst:1171002"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Ole32.dll version is greater than or equal to 6.0.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1171003"/>
                     <criterion comment="Ole32.dll version is less than 6.0.6001.22720" test_ref="oval:gov.nist.fdcc.patch:tst:1171004"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - GDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <criterion comment="Ole32.dll version is greater than or equal to 6.0.6002.18000" test_ref="oval:gov.nist.fdcc.patch:tst:1171005"/>
               <criterion comment="Ole32.dll version is less than 6.0.6002.18277" test_ref="oval:gov.nist.fdcc.patch:tst:1171006"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <criterion comment="Ole32.dll version is greater than or equal to 6.0.6002.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1171007"/>
               <criterion comment="Ole32.dll version is less than 6.0.6002.22433" test_ref="oval:gov.nist.fdcc.patch:tst:1171008"/>
            </criteria>
            <criteria operator="AND" comment="Vulnerable Microsoft Windows 7 x86/x64, Windows Server 2008 R2 x64/ia64">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows 7 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:6165"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:5950"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:6438"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed" definition_ref="oval:org.mitre.oval:def:5954"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criterion comment="Ole32.dll version is less than 6.1.7600.16624" test_ref="oval:gov.nist.fdcc.patch:tst:1171009"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Ole32.dll version is greater than or equal to 6.1.7600.20000" test_ref="oval:gov.nist.fdcc.patch:tst:1171010"/>
                     <criterion comment="Ole32.dll version is less than 6.1.7600.20744" test_ref="oval:gov.nist.fdcc.patch:tst:1171011"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit, 64-bit, ia-64) - GDR or LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criterion comment="Msshsq.dll version is less than 6.0.6001.18470" test_ref="oval:gov.nist.fdcc.patch:tst:1171012"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Msshsq.dll version is greater than or equal to 6.0.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1171013"/>
                     <criterion comment="Msshsq.dll version is less than 6.0.6001.22685" test_ref="oval:gov.nist.fdcc.patch:tst:1171014"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - GDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <criterion comment="Msshsq.dll version is greater than or equal to 7.0.6002.18000" test_ref="oval:gov.nist.fdcc.patch:tst:1171015"/>
               <criterion comment="Msshsq.dll version is less than 7.0.6002.18255" test_ref="oval:gov.nist.fdcc.patch:tst:1171016"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <criterion comment="Msshsq.dll version is greater than or equal to 7.0.6002.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1171017"/>
               <criterion comment="Msshsq.dll version is less than 7.0.6002.22398" test_ref="oval:gov.nist.fdcc.patch:tst:1171018"/>
            </criteria>
            <criteria operator="AND" comment="Vulnerable Microsoft Windows 7 x86/x64, Windows Server 2008 R2 x64/ia64">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows 7 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:6165"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:5950"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:6438"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed" definition_ref="oval:org.mitre.oval:def:5954"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criterion comment="Structuredquery.dll version is less than 7.0.7600.16587" test_ref="oval:gov.nist.fdcc.patch:tst:1171019"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Structuredquery.dll version is greater than or equal to 7.0.7600.20000" test_ref="oval:gov.nist.fdcc.patch:tst:1171020"/>
                     <criterion comment="Structuredquery.dll version is less than 7.0.7600.20707" test_ref="oval:gov.nist.fdcc.patch:tst:1171021"/>
                  </criteria>
               </criteria>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11712" version="3" class="patch">
         <metadata>
            <title>MS10-085: Vulnerability in SChannel Could Allow Denial of Service (2207566)</title>
            <affected family="windows">
               <platform>Microsoft Windows Server 2008</platform>
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows 7</platform>
               <platform>Microsoft Windows Server 2008 R2</platform>
            </affected>
            <reference source="Microsoft" ref_id="MS10-085" ref_url="http://www.microsoft.com/technet/security/bulletin/MS10-085.mspx"/>
            <reference source="Microsoft" ref_id="KB2207566" ref_url="http://support.microsoft.com/kb/2207566"/>
            <reference source="CVE" ref_id="CVE-2010-3229" ref_url="http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3229"/>
            <description>Microsoft has released MS10-085 to address security issues in Windows Shell in Microsoft Windows Vista SP1 and SP2, Server 2008 SP2 and R2, and Windows 7 as documented by CVE-2010-3229</description>
         </metadata>
         <criteria operator="OR">
            <criteria operator="AND" comment="Vulnerable Microsoft Windows Vista x86/x64 SP1, Server 2008 x86/x64/ia64">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criterion comment="Schannel.dll version is less than 6.0.6001.18507" test_ref="oval:gov.nist.fdcc.patch:tst:117120"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Schannel.dll version is greater than or equal to 6.0.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:115578"/>
                     <criterion comment="Schannel.dll version is less than 6.0.6001.22739" test_ref="oval:gov.nist.fdcc.patch:tst:117121"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="Vulnerable Microsoft Windows Vista x86/x64 SP2, Server 2008 x86/x64/ia64 SP2">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criterion comment="Schannel.dll version is less than 6.0.6002.18290" test_ref="oval:gov.nist.fdcc.patch:tst:117122"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Schannel.dll version is greater than or equal to 6.0.6002.22000" test_ref="oval:gov.nist.fdcc.patch:tst:116828"/>
                     <criterion comment="Schannel.dll version is less than 6.0.6002.22463" test_ref="oval:gov.nist.fdcc.patch:tst:117123"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="Vulnerable Microsoft Windows 7 x86/x64, Windows Server 2008 R2 x64/ia64">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows 7 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:6165"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:5950"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:6438"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed" definition_ref="oval:org.mitre.oval:def:5954"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criterion comment="Schannel.dll version is less than 6.1.7600.16661" test_ref="oval:gov.nist.fdcc.patch:tst:117124"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Schannel.dll version is greater than or equal to 6.1.7600.20000" test_ref="oval:gov.nist.fdcc.patch:tst:1168291"/>
                     <criterion comment="Schannel.dll version is less than 6.1.7600.20785" test_ref="oval:gov.nist.fdcc.patch:tst:117125"/>
                  </criteria>
               </criteria>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11716" version="1" class="patch">
         <metadata>
            <title>MS10-092: Vulnerability in Task Scheduler Could Allow Elevation of Privilege (2305420)</title>
            <affected family="windows">
               <platform>Microsoft Windows Server 2008</platform>
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows 7</platform>
               <platform>Microsoft Windows Server 2008 R2</platform>
            </affected>
            <reference source="Microsoft" ref_id="MS10-092" ref_url="http://www.microsoft.com/technet/security/bulletin/MS10-092.mspx"/>
            <reference source="Microsoft" ref_id="KB2305420" ref_url="http://support.microsoft.com/kb/2305420"/>
            <reference source="CVE" ref_id="CVE-2010-3338" ref_url="http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3338"/>
            <description>Microsoft has released MS10-092 to address security issues in Windows Shell in Microsoft Windows Vista SP1 and SP2, Server 2008 SP2 and R2, and Windows 7 as documented by CVE-2010-3338</description>
         </metadata>
         <criteria operator="OR">
            <criteria operator="AND" comment="Vulnerable Microsoft Windows Vista x86/x64 SP1, Server 2008 x86/x64/ia64">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criterion comment="Taskeng.exe version is less than 6.0.6001.18551" test_ref="oval:gov.nist.fdcc.patch:tst:117160"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Taskeng.exe version is greater than or equal to 6.0.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:117161"/>
                     <criterion comment="Taskeng.exe version is less than 6.0.6001.22791" test_ref="oval:gov.nist.fdcc.patch:tst:117162"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="Vulnerable Microsoft Windows Vista x86/x64 SP2, Server 2008 x86/x64/ia64 SP2">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criterion comment=" Taskeng.exe version is less than 6.0.6002.18342" test_ref="oval:gov.nist.fdcc.patch:tst:117163"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Taskeng.exe version is greater than or equal to 6.0.6002.22000" test_ref="oval:gov.nist.fdcc.patch:tst:117164"/>
                     <criterion comment="Taskeng.exe version is less than 6.0.6002.22519" test_ref="oval:gov.nist.fdcc.patch:tst:117165"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="Vulnerable Microsoft Windows 7 x86/x64, Windows Server 2008 R2 x64/ia64">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows 7 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:6165"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:5950"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:6438"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed" definition_ref="oval:org.mitre.oval:def:5954"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criterion comment="Taskeng.exe version is less than 6.1.7600.16699" test_ref="oval:gov.nist.fdcc.patch:tst:117166"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Taskeng.exe version is greater than or equal to 6.1.7600.20000" test_ref="oval:gov.nist.fdcc.patch:tst:117167"/>
                     <criterion comment="Taskeng.exe version is less than 6.1.7600.20830" test_ref="oval:gov.nist.fdcc.patch:tst:117168"/>
                  </criteria>
               </criteria>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11717" version="1" class="patch">
         <metadata>
            <title>MS10-093: Vulnerability in Windows Movie Maker Could Allow Remote Code Execution (2424434)</title>
            <affected family="windows">
               <platform>Microsoft Windows Vista</platform>
               <product>Movie Maker 2.6</product>
            </affected>
            <reference source="Microsoft" ref_id="MS10-093" ref_url="http://www.microsoft.com/technet/security/bulletin/MS10-093.mspx"/>
            <reference source="Microsoft" ref_id="KB2424434" ref_url="http://support.microsoft.com/kb/2424434"/>
            <reference source="CVE" ref_id="CVE-2010-3967" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3967"/>
            <description>Microsoft has released MS10-093 to address security issues as documented by CVE-2010-3967</description>
         </metadata>
         <criteria operator="AND" comment="Vista SP1 (32-bit,64-bit, ia-64) - GDR">
            <criteria operator="OR">
               <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
               <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
               <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
               <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
            </criteria>
            <extend_definition comment="Windows Movie Maker 2.6 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115292"/>
            <criterion comment="Moviemk.exe version is less than 2.6.4040.0" test_ref="oval:gov.nist.fdcc.patch:tst:117170"/>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11718" version="1" class="patch">
         <metadata>
            <title>MS10-094: Vulnerability in Windows Media Encoder Could Allow Remote Code Execution (2447961)</title>
            <affected family="windows">
               <platform>Microsoft Windows XP</platform>
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows Server 2008</platform>
               <platform>Microsoft Windows 7</platform>
               <platform>Microsoft Windows Server 2008 R2</platform>
               <product>Microsoft Media Encoder</product>
            </affected>
            <reference source="Microsoft" ref_id="MS10-094" ref_url="http://www.microsoft.com/technet/security/bulletin/MS10-094.mspx"/>
            <reference source="Microsoft" ref_id="KB2447961" ref_url="http://support.microsoft.com/kb/2447961"/>
            <reference source="CVE" ref_id="CVE-2010-3965" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3965"/>
            <description>Microsoft has released MS10-094 to address security issues as documented by CVE-2010-3965.</description>
         </metadata>
         <criteria operator="AND">
            <criteria operator="OR">
               <extend_definition comment="Microsoft Windows XP (x86) SP2 is installed" definition_ref="oval:org.mitre.oval:def:754"/>
               <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
               <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
               <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
               <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
               <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
               <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
               <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
               <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
               <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
               <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
               <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
            </criteria>
            <criteria operator="OR" comment="32-bit Windows Media Encoder">
               <criterion comment="Wmenceng.dll version is less than 9.0.0.3374" test_ref="oval:gov.nist.fdcc.patch:tst:117180"/>
               <criteria operator="AND" comment="64-bit Windows Media Encoder">
                  <criterion comment="Wmenceng.dll version is greater than or equal to 10.0.0.0" test_ref="oval:gov.nist.fdcc.patch:tst:117181"/>
                  <criterion comment="Wmenceng.dll version is less than 10.0.0.3822" test_ref="oval:gov.nist.fdcc.patch:tst:117182"/>
               </criteria>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11720" version="1" class="patch">
         <metadata>
            <title>MS10-096: Vulnerability in Windows Address Book Could Allow Remote Code Execution (2423089)</title>
            <affected family="windows">
               <platform>Microsoft Windows XP</platform>
               <platform>Microsoft Windows Server 2008</platform>
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows 7</platform>
               <platform>Microsoft Windows Server 2008 R2</platform>
            </affected>
            <reference source="Microsoft" ref_id="MS10-096" ref_url="http://www.microsoft.com/technet/security/bulletin/MS10-096.mspx"/>
            <reference source="Microsoft" ref_id="KB2423089" ref_url="http://support.microsoft.com/kb/2423089"/>
            <reference source="CVE" ref_id="CVE-2010-3147" ref_url="http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3147"/>
            <description>Microsoft has released MS10-096 to address security issues as documented by CVE-2010-3147</description>
         </metadata>
         <criteria operator="OR">
            <criteria operator="AND" comment="Vulnerable Microsoft Windows XP SP3">
               <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
               <extend_definition comment="Microsoft Outlook Express 6 for Windows XP/2003 is installed" definition_ref="oval:org.mitre.oval:def:208"/>
               <criterion comment="Wab.exe version is less than 6.0.2900.6040" test_ref="oval:gov.nist.fdcc.patch:tst:1172000"/>
            </criteria>
            <criteria operator="AND" comment="Vulnerable Microsoft Windows XP x64 SP2">
               <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
               <extend_definition comment="Microsoft Outlook Express 6 for Windows XP/2003 is installed" definition_ref="oval:org.mitre.oval:def:208"/>
               <criterion comment="Wab.exe version is less than 6.0.3790.4785" test_ref="oval:gov.nist.fdcc.patch:tst:1172001"/>
            </criteria>
            <criteria operator="AND" comment="Vulnerable Microsoft Windows Vista x86/x64 SP1, Server 2008 x86/x64/ia64">
               <extend_definition comment="Microsoft Windows Mail is installed" definition_ref="oval:org.mitre.oval:def:2058"/>
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criterion comment="Wab.exe version is less than 6.0.6001.18535" test_ref="oval:gov.nist.fdcc.patch:tst:1172002"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Wab.exe version is greater than or equal to 6.0.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1172003"/>
                     <criterion comment="Wab.exe version is less than 6.0.6001.22774" test_ref="oval:gov.nist.fdcc.patch:tst:1172004"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="Vulnerable Microsoft Windows Vista x86/x64 SP2, Server 2008 x86/x64/ia64 SP2">
               <extend_definition comment="Microsoft Windows Mail is installed" definition_ref="oval:org.mitre.oval:def:2058"/>
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criterion comment="Wab.exe version is less than 6.0.6002.18324" test_ref="oval:gov.nist.fdcc.patch:tst:1172005"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Wab.exe version is greater than or equal to 6.0.6002.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1172006"/>
                     <criterion comment="Wab.exe version is less than 6.0.6002.22503" test_ref="oval:gov.nist.fdcc.patch:tst:1172007"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="Vulnerable Microsoft Windows 7 x86/x64, Windows Server 2008 R2 x64/ia64">
               <extend_definition comment="Microsoft Windows Mail is installed" definition_ref="oval:org.mitre.oval:def:2058"/>
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows 7 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:6165"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:5950"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:6438"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed" definition_ref="oval:org.mitre.oval:def:5954"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criterion comment="Wab.exe version is less than 6.1.7600.16684" test_ref="oval:gov.nist.fdcc.patch:tst:1172008"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Wab.exe version is greater than or equal to 6.1.7600.20000" test_ref="oval:gov.nist.fdcc.patch:tst:1172009"/>
                     <criterion comment="Wab.exe version is less than 6.1.7600.20814" test_ref="oval:gov.nist.fdcc.patch:tst:1172010"/>
                  </criteria>
               </criteria>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11724" version="1" class="patch">
         <metadata>
            <title>MS10-100: Vulnerability in Consent User Interface Could Allow Elevation of Privilege (2442962)</title>
            <affected family="windows">
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows Server 2008</platform>
               <platform>Microsoft Windows 7</platform>
               <platform>Microsoft Windows Server 2008 R2</platform>
            </affected>
            <reference source="Microsoft" ref_id="MS10-100" ref_url="http://www.microsoft.com/technet/security/bulletin/MS10-100.mspx"/>
            <reference source="Microsoft" ref_id="KB2442962" ref_url="http://support.microsoft.com/kb/2442962"/>
            <reference source="CVE" ref_id="CVE-2010-3961" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3961"/>
            <description>Microsoft has released MS10-100 to address security issues in Microsoft Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2 as documented by CVE-2010-3961</description>
         </metadata>
         <criteria operator="OR">
            <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit,64-bit, ia-64) - GDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               </criteria>
               <criterion comment="Consent.exe version is greater than or equal to 6.0.6001.18000" test_ref="oval:gov.nist.fdcc.patch:tst:1172400"/>
               <criterion comment="Consent.exe version is less than  6.0.6001.18539" test_ref="oval:gov.nist.fdcc.patch:tst:1172401"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit, 64-bit, ia-64) - LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               </criteria>
               <criterion comment="Consent.exe version is greater than or equal to 6.0.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1172402"/>
               <criterion comment="Consent.exe version is less than  6.0.6001.22778" test_ref="oval:gov.nist.fdcc.patch:tst:1172403"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - GDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <criterion comment="Consent.exe version is greater than or equal to 6.0.6001.18000" test_ref="oval:gov.nist.fdcc.patch:tst:1172400"/>
               <criterion comment="Consent.exe version is less than  6.0.6002.18328" test_ref="oval:gov.nist.fdcc.patch:tst:1172405"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <criterion comment="Consent.exe version is greater than or equal to 6.0.6002.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1172406"/>
               <criterion comment="Consent.exe version is less than  6.0.6002.22506" test_ref="oval:gov.nist.fdcc.patch:tst:1172407"/>
            </criteria>
            <criteria operator="AND" comment="7, Server 2008 R2 (32-bit, 64-bit, ia-64) - GDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows 7 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:6165"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:5950"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:6438"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed" definition_ref="oval:org.mitre.oval:def:5954"/>
               </criteria>
               <criterion comment="Consent.exe version is less than 6.1.7600.16688" test_ref="oval:gov.nist.fdcc.patch:tst:1172408"/>
            </criteria>
            <criteria operator="AND" comment="7, Server 2008 R2 (32-bit, 64-bit, ia-64) - LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows 7 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:6165"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:5950"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:6438"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed" definition_ref="oval:org.mitre.oval:def:5954"/>
               </criteria>
               <criterion comment="Consent.exe version is greater than or equal to 6.1.7600.20000" test_ref="oval:gov.nist.fdcc.patch:tst:1172409"/>
               <criterion comment="Consent.exe version is less than 6.1.7600.20818" test_ref="oval:gov.nist.fdcc.patch:tst:1172410"/>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11727" version="1" class="patch">
         <metadata>
            <title>MS11-001: Vulnerability in Windows Backup Manager Could Allow Remote Code Execution (2478935)</title>
            <affected family="windows">
               <platform>Microsoft Windows Vista</platform>
            </affected>
            <reference source="Microsoft" ref_id="MS11-001" ref_url="http://www.microsoft.com/technet/security/Bulletin/ms11-001.mspx"/>
            <reference source="Microsoft" ref_id="KB2478935" ref_url="http://support.microsoft.com/default.aspx/kb/2478935"/>
            <reference source="CVE" ref_id="CVE-2010-3145" ref_url="http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3145"/>
            <description>Microsoft has released MS11-001 to address security issues in Windows Vista as documented by CVE-2010-3145</description>
         </metadata>
         <criteria operator="OR">
            <criteria operator="AND" comment="Vista (32/64-bit) SP1">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
               </criteria>
               <criteria operator="OR">
                  <criteria operator="AND" comment="GDR">
                     <criterion comment="Sdclt.exe version is greater than or equal to 6.0.6001.18000" test_ref="oval:gov.nist.fdcc.patch:tst:117270"/>
                     <criterion comment="Sdclt.exe version is less than 6.0.6001.18561" test_ref="oval:gov.nist.fdcc.patch:tst:117271"/>
                  </criteria>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Sdclt.exe version is greater than or equal to 6.0.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:117272"/>
                     <criterion comment="Sdclt.exe version is less than 6.0.6001.22812" test_ref="oval:gov.nist.fdcc.patch:tst:117273"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="Vista (32/64-bit) SP2">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
               </criteria>
               <criteria operator="OR">
                  <criteria operator="AND" comment="GDR">
                     <criterion comment="Sdclt.exe version is greater than or equal to 6.0.6002.18000" test_ref="oval:gov.nist.fdcc.patch:tst:117274"/>
                     <criterion comment="Sdclt.exe version is less than 6.0.6002.18353" test_ref="oval:gov.nist.fdcc.patch:tst:117275"/>
                  </criteria>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Sdclt.exe version is greater than or equal to 6.0.6002.22000" test_ref="oval:gov.nist.fdcc.patch:tst:117276"/>
                     <criterion comment="Sdclt.exe version is less than 6.0.6002.22547" test_ref="oval:gov.nist.fdcc.patch:tst:117277"/>
                  </criteria>
               </criteria>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11728" version="2" class="patch">
         <metadata>
            <title>MS11-002: Vulnerabilities in Microsoft Data Access Components Could Allow Remote Code Execution (2451910)</title>
            <affected family="windows">
               <platform>Microsoft Windows XP</platform>
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows Server 2008</platform>
               <platform>Microsoft Windows 7</platform>
               <platform>Microsoft Windows Server 2008 R2</platform>
               <product>MDAC</product>
               <product>Windows DAC</product>
            </affected>
            <reference source="Microsoft" ref_id="MS11-002" ref_url="http://www.microsoft.com/technet/security/Bulletin/MS11-002.mspx"/>
            <reference source="Microsoft" ref_id="KB2451910" ref_url="http://support.microsoft.com/kb/2451910"/>
            <reference source="CVE" ref_id="CVE-2011-0026" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0026"/>
            <reference source="CVE" ref_id="CVE-2011-0027" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0027"/>
            <description>Microsoft has released MS11-002 to address security issues in MDAC and Windows DAC as documented by CVE-2011-0026 and CVE-2011-0027.</description>
         </metadata>
         <criteria operator="OR">
            <criteria comment="Windows XP SP3 with MDAC 2.8 SP1" operator="AND">
               <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
               <criterion comment="Microsoft Data Access Components 2.8 (SP1) is installed" test_ref="oval:org.mitre.oval:tst:725"/>
               <criterion comment="Msado15.dll version is less than 2.81.3012.0" test_ref="oval:gov.nist.fdcc.patch:tst:1172800"/>
            </criteria>
            <criteria operator="AND" comment="XP (64-bit) SP2 with MDAC 2.8 SP2">
               <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
               <criterion comment="Microsoft Data Access Components 2.8 (SP2) is installed" test_ref="oval:gov.nist.fdcc.patch:tst:1172813"/>
               <criterion comment="Msado15.dll version is less than 2.82.4795.0" test_ref="oval:gov.nist.fdcc.patch:tst:1172801"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit,64-bit, ia-64) with Windows DAC 6.0">
               <criterion comment="Microsoft Data Access Components 6.0 is installed" test_ref="oval:gov.nist.fdcc.patch:tst:1172814"/>
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               </criteria>
               <criteria operator="OR">
                  <criteria operator="AND" comment="GDR">
                     <criterion comment="Msado15.dll version is greater than or equal to 6.0.6001.18000" test_ref="oval:gov.nist.fdcc.patch:tst:1172802"/>
                     <criterion comment="Msado15.dll version is less than  6.0.6001.18570" test_ref="oval:gov.nist.fdcc.patch:tst:1172803"/>
                  </criteria>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Msado15.dll version is greater than or equal to 6.0.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1172804"/>
                     <criterion comment="Msado15.dll version is less than  6.0.6001.22821" test_ref="oval:gov.nist.fdcc.patch:tst:1172805"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) with Windows DAC 6.0">
               <criterion comment="Microsoft Data Access Components 6.0 is installed" test_ref="oval:gov.nist.fdcc.patch:tst:1172814"/>
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <criteria operator="OR">
                  <criteria operator="AND" comment="GDR">
                     <criterion comment="Msado15.dll version is greater than or equal to 6.0.6002.18000" test_ref="oval:gov.nist.fdcc.patch:tst:1172806"/>
                     <criterion comment="Msado15.dll version is less than  6.0.6002.18362" test_ref="oval:gov.nist.fdcc.patch:tst:1172807"/>
                  </criteria>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Msado15.dll version is greater than or equal to 6.0.6002.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1172808"/>
                     <criterion comment="Msado15.dll version is less than  6.0.6002.22555" test_ref="oval:gov.nist.fdcc.patch:tst:1172809"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="7, Server 2008 R2 (32-bit, 64-bit, ia-64) with Windows DAC 6.0">
               <criterion comment="Microsoft Data Access Components 6.0 is installed" test_ref="oval:gov.nist.fdcc.patch:tst:1172814"/>
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows 7 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:6165"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:5950"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:6438"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed" definition_ref="oval:org.mitre.oval:def:5954"/>
               </criteria>
               <criteria operator="OR">
                  <criterion comment="Msado15.dll version is less than 6.1.7600.16688" test_ref="oval:gov.nist.fdcc.patch:tst:1172810"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Msado15.dll version is greater than or equal to 6.1.7600.20000" test_ref="oval:gov.nist.fdcc.patch:tst:1172811"/>
                     <criterion comment="Msado15.dll version is less than 6.1.7600.20818" test_ref="oval:gov.nist.fdcc.patch:tst:1172812"/>
                  </criteria>
               </criteria>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11730" version="1" class="patch">
         <metadata>
            <title>MS11-004: Vulnerability in Internet Information Services (IIS) FTP Service Could Allow Remote Code Execution (2489256)</title>
            <affected family="windows">
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows Server 2008</platform>
               <platform>Microsoft Windows 7</platform>
               <platform>Microsoft Windows Server 2008 R2</platform>
               <product>Microsoft FTP Service 7.0</product>
               <product>Microsoft FTP Service 7.5</product>
            </affected>
            <reference source="Microsoft" ref_id="MS11-004" ref_url="http://www.microsoft.com/technet/security/bulletin/MS11-004.mspx"/>
            <reference source="Microsoft" ref_id="KB2489256" ref_url="http://support.microsoft.com/kb/2489256"/>
            <reference source="CVE" ref_id="CVE-2010-3972" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3972"/>
            <description>Microsoft has released MS11-004 to address security issues in Microsoft FTP Service 7.0 for IIS 7.0 and Microsoft FTP Service 7.5 for IIS 7.0 as documented by CVE-2010-3972.</description>
         </metadata>
         <criteria operator="OR">
            <criteria operator="AND" comment="Vista, Server 2008 SP1/2 (32-bit,64-bit, ia-64)">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <criteria operator="OR">
                  <criteria operator="AND" comment="IIS FTP 7.0">
                     <extend_definition comment="IIS FTP 7.0 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115298"/>
                     <criterion comment="Ftpsvc.dll version is less than 7.0.6545.14979" test_ref="oval:gov.nist.fdcc.patch:tst:117300"/>
                  </criteria>
                  <criteria operator="AND" comment="IIS FTP 7.5">
                     <extend_definition comment="IIS FTP 7.5 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115299"/>
                     <criterion comment="Ftpsvc.dll version is less than 7.5.7600.14978" test_ref="oval:gov.nist.fdcc.patch:tst:117301"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="7, Server 2008 R2 (32-bit, 64-bit, ia-64)">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows 7 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:6165"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:5950"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:6438"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed" definition_ref="oval:org.mitre.oval:def:5954"/>
               </criteria>
               <criteria operator="OR">
                  <criterion comment="Ftpsvc.dll version is less than 7.5.7600.16748" test_ref="oval:gov.nist.fdcc.patch:tst:117302"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Ftpsvc.dll version is greater than or equal to 7.5.7600.20000" test_ref="oval:gov.nist.fdcc.patch:tst:117303"/>
                     <criterion comment="Ftpsvc.dll version is less than 7.5.7600.20888" test_ref="oval:gov.nist.fdcc.patch:tst:117304"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="7, Server 2008 R2 SP1-RC (32-bit, 64-bit, ia-64)">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows 7 (32-bit) Service Pack 1 Release Candidate is installed" definition_ref="oval:org.mitre.oval:def:12295"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Edition Service Pack 1 Release Candidate is installed" definition_ref="oval:org.mitre.oval:def:12435"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Edition Service Pack 1 Release Candidate is installed" definition_ref="oval:org.mitre.oval:def:11590"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition Service Pack 1 Release Candidate is installed" definition_ref="oval:org.mitre.oval:def:12159"/>
               </criteria>
               <criteria operator="OR">
                  <criterion comment="Ftpsvc.dll version is less than 7.5.7601.17550" test_ref="oval:gov.nist.fdcc.patch:tst:117305"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Ftpsvc.dll version is greater than or equal to 7.5.7601.21000" test_ref="oval:gov.nist.fdcc.patch:tst:117306"/>
                     <criterion comment="Ftpsvc.dll version is less than 7.5.7601.21649" test_ref="oval:gov.nist.fdcc.patch:tst:117307"/>
                  </criteria>
               </criteria>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11731" version="1" class="patch">
         <metadata>
            <title>MS11-006: Vulnerability in Windows Shell Graphics Processing Could Allow Remote Code Execution (2483185)</title>
            <affected family="windows">
               <platform>Microsoft Windows XP</platform>
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows Server 2008</platform>
            </affected>
            <reference source="Microsoft" ref_id="MS11-006" ref_url="http://www.microsoft.com/technet/security/bulletin/MS11-006.mspx"/>
            <reference source="Microsoft" ref_id="KB2483185" ref_url="http://support.microsoft.com/kb/2483185"/>
            <reference source="CVE" ref_id="CVE-2010-3970" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3970"/>
            <description>Microsoft has released MS11-006 to address security issues in Windows XP, Windows Vista, and Windows Server 2008 as documented by CVE-2010-3970.</description>
         </metadata>
         <criteria operator="OR">
            <criteria operator="AND" comment="XP (32-bit) SP3">
               <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
               <criterion comment="Shell32.dll version is less than 6.0.2900.6072" test_ref="oval:gov.nist.fdcc.patch:tst:117310"/>
            </criteria>
            <criteria operator="AND" comment="XP (64-bit) SP2">
               <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
               <criterion comment="Shell32.dll version is less than 6.0.3790.4822" test_ref="oval:gov.nist.fdcc.patch:tst:117311"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit, 64-bit, ia-64) - GDR/LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criterion comment="Shell32.dll version is less than 6.0.6001.18588" test_ref="oval:gov.nist.fdcc.patch:tst:117312"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Shell32.dll version is greater than or equal to 6.0.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1167903"/>
                     <criterion comment="Shell32.dll version is less than 6.0.6001.22839" test_ref="oval:gov.nist.fdcc.patch:tst:117314"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - GDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criterion comment="Shell32.dll version is less than 6.0.6002.18393" test_ref="oval:gov.nist.fdcc.patch:tst:117315"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Shell32.dll version is greater than or equal to 6.0.6002.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1167906"/>
                     <criterion comment="Shell32.dll version is less than 6.0.6002.22574" test_ref="oval:gov.nist.fdcc.patch:tst:117317"/>
                  </criteria>
               </criteria>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11735" version="1" class="patch">
         <metadata>
            <title>MS11-011: Vulnerabilities in Windows Kernel Could Allow Elevation of Privilege (2393802)</title>
            <affected family="windows">
               <platform>Microsoft Windows XP</platform>
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows Server 2008</platform>
               <platform>Microsoft Windows 7</platform>
               <platform>Microsoft Windows Server 2008 R2</platform>
            </affected>
            <reference source="Microsoft" ref_id="MS11-011" ref_url="http://www.microsoft.com/technet/security/bulletin/MS11-011.mspx"/>
            <reference source="Microsoft" ref_id="KB2393802" ref_url="http://support.microsoft.com/kb/2393802"/>
            <reference source="CVE" ref_id="CVE-2010-4398" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4398"/>
            <reference source="CVE" ref_id="CVE-2011-0045" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0045"/>
            <description>Microsoft has released MS11-011 to address security issues in Microsoft Windows as documented by CVE-2010-4398 and CVE-2011-0045.</description>
         </metadata>
         <criteria operator="OR">
            <criteria operator="AND" comment="XP (32-bit) SP3">
               <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
               <criterion comment="Ntoskrnl.exe version is less than 5.1.2600.6055" test_ref="oval:gov.nist.fdcc.patch:tst:1173500"/>
            </criteria>
            <criteria operator="AND" comment="XP (64-bit) SP2">
               <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
               <criterion comment="Ntoskrnl.exe version is less than 5.2.3790.4789" test_ref="oval:gov.nist.fdcc.patch:tst:1173501"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit,64-bit, ia-64) - GDR/LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criterion comment="Ntoskrnl.exe version is less than 6.0.6001.18538" test_ref="oval:gov.nist.fdcc.patch:tst:1173502"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Ntoskrnl.exe version is greater than or equal to 6.0.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1159204"/>
                     <criterion comment="Ntoskrnl.exe version is less than 6.0.6001.22777" test_ref="oval:gov.nist.fdcc.patch:tst:1173504"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - GDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criterion comment="Ntoskrnl.exe version is less than 6.0.6002.18327" test_ref="oval:gov.nist.fdcc.patch:tst:1173505"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Ntoskrnl.exe version is greater than or equal to 6.0.6002.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1159206"/>
                     <criterion comment="Ntoskrnl.exe version is less than 6.0.6002.22505" test_ref="oval:gov.nist.fdcc.patch:tst:1173507"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="Vulnerable Microsoft Windows 7 x86/x64, Windows Server 2008 R2 x64/ia64">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows 7 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:6165"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:5950"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:6438"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed" definition_ref="oval:org.mitre.oval:def:5954"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criterion comment="the version of Ntoskrnl.exe is less than 6.1.7600.16695" test_ref="oval:gov.nist.fdcc.patch:tst:1173508"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="the version of Ntoskrnl.exe is greater than or equal to 6.1.7600.20000" test_ref="oval:gov.nist.fdcc.patch:tst:1173509"/>
                     <criterion comment="the version of Ntoskrnl.exe is less than 6.1.7600.20826" test_ref="oval:gov.nist.fdcc.patch:tst:1173510"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="Vulnerable Microsoft Windows 7 x86/x64, Windows Server 2008 R2 x64/ia64 SP1 RC">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows 7 (32-bit) Service Pack 1 Release Candidate is installed" definition_ref="oval:org.mitre.oval:def:12295"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Edition Service Pack 1 Release Candidate is installed" definition_ref="oval:org.mitre.oval:def:12435"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Edition Service Pack 1 Release Candidate is installed" definition_ref="oval:org.mitre.oval:def:11590"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition Service Pack 1 Release Candidate is installed" definition_ref="oval:org.mitre.oval:def:12159"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criterion comment="the version of Ntoskrnl.exe is less than 6.1.7601.17695" test_ref="oval:gov.nist.fdcc.patch:tst:1173511"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="the version of Ntoskrnl.exe is greater than or equal to 6.1.7601.21000" test_ref="oval:gov.nist.fdcc.patch:tst:1173512"/>
                     <criterion comment="the version of Ntoskrnl.exe is less than 6.1.7601.21826" test_ref="oval:gov.nist.fdcc.patch:tst:1173513"/>
                  </criteria>
               </criteria>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11736" version="1" class="patch">
         <metadata>
            <title>MS11-012: Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Elevation of Privilege (2479628)</title>
            <affected family="windows">
               <platform>Microsoft Windows XP</platform>
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows Server 2008</platform>
               <platform>Microsoft Windows 7</platform>
               <platform>Microsoft Windows Server 2008 R2</platform>
            </affected>
            <reference source="Microsoft" ref_id="MS11-012" ref_url="http://www.microsoft.com/technet/security/bulletin/MS11-012.mspx"/>
            <reference source="Microsoft" ref_id="KB2479628" ref_url="http://support.microsoft.com/kb/2479628"/>
            <reference source="CVE" ref_id="CVE-2011-0086" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0086"/>
            <reference source="CVE" ref_id="CVE-2011-0087" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0087"/>
            <reference source="CVE" ref_id="CVE-2011-0088" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0088"/>
            <reference source="CVE" ref_id="CVE-2011-0089" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0089"/>
            <reference source="CVE" ref_id="CVE-2011-0090" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0090"/>
            <description>Microsoft has released MS11-012 to address security issues in Microsoft Windows as documented by CVE-2011-0086, CVE-2011-0087, CVE-2011-0088, CVE-2011-0089, and CVE-2011-0090.</description>
         </metadata>
         <criteria operator="OR">
            <criteria operator="AND" comment="XP (32-bit) SP3">
               <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
               <criterion comment="Win32k.sys version is less than 5.1.2600.6064" test_ref="oval:gov.nist.fdcc.patch:tst:1173600"/>
            </criteria>
            <criteria operator="AND" comment="XP (64-bit) SP2">
               <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
               <criterion comment="Win32k.sys version is less than 5.2.3790.4813" test_ref="oval:gov.nist.fdcc.patch:tst:1173601"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit,64-bit, ia-64) - GDR/LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criterion comment="Win32k.sys version is less than 6.0.6001.18573" test_ref="oval:gov.nist.fdcc.patch:tst:1173602"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Win32k.sys version is greater than or equal to 6.0.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:115477"/>
                     <criterion comment="Win32k.sys version is less than 6.0.6001.22824" test_ref="oval:gov.nist.fdcc.patch:tst:1173604"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - GDR/LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criterion comment="Win32k.sys version is less than 6.0.6002.18365" test_ref="oval:gov.nist.fdcc.patch:tst:1173605"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Win32k.sys version is greater than or equal to 6.0.6002.22000" test_ref="oval:gov.nist.fdcc.patch:tst:116219"/>
                     <criterion comment="Win32k.sys version is less than 6.0.6002.22560" test_ref="oval:gov.nist.fdcc.patch:tst:1173607"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="7, Server 2008 R2 (32-bit, 64-bit, ia-64) - GDR/LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows 7 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:6165"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:5950"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:6438"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed" definition_ref="oval:org.mitre.oval:def:5954"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criterion comment="Win32k.sys version is less than 6.1.7600.16732" test_ref="oval:gov.nist.fdcc.patch:tst:1173608"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Win32k.sys version is greater than or equal to 6.1.7600.20000" test_ref="oval:gov.nist.fdcc.patch:tst:1167094"/>
                     <criterion comment="Win32k.sys version is less than 6.1.7600.20873" test_ref="oval:gov.nist.fdcc.patch:tst:1173610"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="7, Server 2008 R2 (32-bit, 64-bit, ia-64) SP1 RC - GDR/LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows 7 (32-bit) Service Pack 1 Release Candidate is installed" definition_ref="oval:org.mitre.oval:def:12295"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Edition Service Pack 1 Release Candidate is installed" definition_ref="oval:org.mitre.oval:def:12435"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Edition Service Pack 1 Release Candidate is installed" definition_ref="oval:org.mitre.oval:def:11590"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition Service Pack 1 Release Candidate is installed" definition_ref="oval:org.mitre.oval:def:12159"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criterion comment="Win32k.sys version is less than 6.1.7601.17535" test_ref="oval:gov.nist.fdcc.patch:tst:1173611"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Win32k.sys version is greater than or equal to 6.1.7601.21000" test_ref="oval:gov.nist.fdcc.patch:tst:1173612"/>
                     <criterion comment="Win32k.sys version is less than 6.1.7601.21634" test_ref="oval:gov.nist.fdcc.patch:tst:1173613"/>
                  </criteria>
               </criteria>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11739" version="3" class="patch">
         <metadata>
            <title>MS11-015: Vulnerabilities in Windows Media Could Allow Remote Code Execution (2510030)</title>
            <affected family="windows">
               <platform>Microsoft Windows XP</platform>
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows 7</platform>
               <platform>Microsoft Windows Server 2008 R2</platform>
            </affected>
            <reference source="Microsoft" ref_id="MS11-015" ref_url="http://www.microsoft.com/technet/security/bulletin/MS11-015.mspx"/>
            <reference source="Microsoft" ref_id="KB2510030" ref_url="http://support.microsoft.com/kb/2510030"/>
            <reference source="CVE" ref_id="CVE-2011-0032" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0032"/>
            <reference source="CVE" ref_id="CVE-2011-0042" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0042"/>
            <description>Microsoft has released MS11-015 to address security issues in Windows XP, Windows Vista, Windows 7 and Windows Server 2008 R2 as documented by CVE-2011-0032 and CVE-2011-0042.</description>
         </metadata>
         <criteria operator="OR">
            <criteria operator="AND" comment="XP (32-bit) SP3">
               <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
               <criterion comment="Encdec.dll version is less than 6.5.2600.6076" test_ref="oval:gov.nist.fdcc.patch:tst:1173900"/>
            </criteria>
            <criteria operator="AND" comment="XP (64-bit) SP2">
               <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
               <criterion comment="Encdec.dll version is less than 6.5.3790.4826" test_ref="oval:gov.nist.fdcc.patch:tst:1173901"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit,64-bit, ia-64) - GDR/LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criterion comment="Encdec.dll version is less than 6.6.6001.18571" test_ref="oval:gov.nist.fdcc.patch:tst:1173902"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Encdec.dll version is greater than or equal to 6.6.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1173903"/>
                     <criterion comment="Encdec.dll version is less than 6.6.6001.22822" test_ref="oval:gov.nist.fdcc.patch:tst:1173904"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - GDR/LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criterion comment="Encdec.dll version is less than 6.6.6002.18363" test_ref="oval:gov.nist.fdcc.patch:tst:1173905"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Encdec.dll version is greater than or equal to 6.6.6002.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1173906"/>
                     <criterion comment="Encdec.dll version is less than 6.6.6002.22558" test_ref="oval:gov.nist.fdcc.patch:tst:1173907"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="7, Server 2008 R2 (32-bit, 64-bit, ia-64) - GDR/LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows 7 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:6165"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:5950"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:6438"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed" definition_ref="oval:org.mitre.oval:def:5954"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criterion comment="Encdec.sys version is less than 6.6.7600.16724" test_ref="oval:gov.nist.fdcc.patch:tst:1173908"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Encdec.dll version is greater than or equal to 6.6.7600.20000" test_ref="oval:gov.nist.fdcc.patch:tst:1173909"/>
                     <criterion comment="Encdec.dll version is less than 6.6.7600.20865" test_ref="oval:gov.nist.fdcc.patch:tst:1173910"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="7, Server 2008 R2 (32-bit, 64-bit, ia-64) SP1 - GDR/LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows 7 (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:12292"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:12627"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Service Pack 1 Edition is installed" definition_ref="oval:org.mitre.oval:def:12567"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:12583"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criterion comment="Encdec.dll version is less than 6.6.7601.17528" test_ref="oval:gov.nist.fdcc.patch:tst:1173911"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Encdec.dll version is greater than or equal to 6.6.7601.21000" test_ref="oval:gov.nist.fdcc.patch:tst:1173912"/>
                     <criterion comment="Encdec.dll version is less than 6.6.7601.21626" test_ref="oval:gov.nist.fdcc.patch:tst:1173913"/>
                  </criteria>
               </criteria>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11740" version="3" class="patch">
         <metadata>
            <title>MS11-017: Vulnerability in Remote Desktop Client Could Allow Remote Code Execution (2508062)</title>
            <affected family="windows">
               <platform>Microsoft Windows XP</platform>
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows Server 2008</platform>
               <platform>Microsoft Windows 7</platform>
               <platform>Microsoft Windows Server 2008 R2</platform>
            </affected>
            <reference source="Microsoft" ref_id="MS11-017" ref_url="http://www.microsoft.com/technet/security/bulletin/MS11-017.mspx"/>
            <reference source="Microsoft" ref_id="KB2508062" ref_url="http://support.microsoft.com/kb/2508062"/>
            <reference source="CVE" ref_id="CVE-2011-0029" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0029"/>
            <description>Microsoft has released MS11-017 to address security issues in Windows Remote Desktop Client as documented by CVE-2011-0029.</description>
         </metadata>
         <criteria operator="OR">
            <criteria operator="AND" comment="XP SP3 w/ Remote Desktop Client 5.2">
               <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
               <criterion comment="2k3mstscax.dll version is less than 5.2.3790.4807" test_ref="oval:gov.nist.fdcc.patch:tst:1174000"/>
            </criteria>
            <criteria operator="AND" comment="XP (64-bit) SP2 or Vista, Server 2008 SP1 (32-bit, 64-bit, ia-64) w/ Remote Desktop Client 6.0">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criterion comment="Mstscax.dll version is less than 6.0.6001.18564" test_ref="oval:gov.nist.fdcc.patch:tst:1174014"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Mstscax.dll version is greater than or equal to 6.0.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1174005"/>
                     <criterion comment="Mstscax.dll version is less than 6.0.6001.22815" test_ref="oval:gov.nist.fdcc.patch:tst:1174006"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="XP SP3 w/ Remote Desktop Client 6.1">
               <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Mstscax.dll version is greater than 6.0.6001.18564" test_ref="oval:gov.nist.fdcc.patch:tst:1174004"/>
                     <criterion comment="Mstscax.dll version is less than 6.0.6001.18589" test_ref="oval:gov.nist.fdcc.patch:tst:1174001"/>
                  </criteria>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Mstscax.dll version is greater than to 6.0.6001.22815" test_ref="oval:gov.nist.fdcc.patch:tst:1174002"/>
                     <criterion comment="Mstscax.dll version is less than 6.0.6001.22840" test_ref="oval:gov.nist.fdcc.patch:tst:1174003"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) w/ Remote Desktop Client 6.x">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criterion comment="Mstscax.dll version is less than 6.0.6002.18356" test_ref="oval:gov.nist.fdcc.patch:tst:1174007"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Mstscax.dll version is greater than or equal to 6.0.6002.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1174008"/>
                     <criterion comment="Mstscax.dll version is less than 6.0.6002.22550" test_ref="oval:gov.nist.fdcc.patch:tst:1174009"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="XP SP3, XP (64-bit) SP2, Vista, Server 2008 SP1 (32-bit, 64-bit, ia-64), 7, Server 2008 R2 RTM/SP1 (32-bit, 64-bit, ia-64) w/ Remote Desktop Client 7.0">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
                  <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
                  <extend_definition comment="Microsoft Windows 7 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:6165"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:5950"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:6438"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed" definition_ref="oval:org.mitre.oval:def:5954"/>
                  <extend_definition comment="Microsoft Windows 7 (32-bit) Service Pack 1 Release Candidate is installed" definition_ref="oval:org.mitre.oval:def:12292"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Edition Service Pack 1 Release Candidate is installed" definition_ref="oval:org.mitre.oval:def:12627"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:12567"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:12583"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criteria operator="AND" comment="GDR">
                     <criterion comment="Mstscax.dll version is greater than or equal to 6.1.7600.16000" test_ref="oval:gov.nist.fdcc.patch:tst:1174010"/>
                     <criterion comment="Mstscax.dll version is less than 6.1.7600.16722" test_ref="oval:gov.nist.fdcc.patch:tst:1174011"/>
                  </criteria>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Mstscax.dll version is greater than or equal to 6.1.7600.20000" test_ref="oval:gov.nist.fdcc.patch:tst:1174012"/>
                     <criterion comment="Mstscax.dll version is less than 6.1.7600.20861" test_ref="oval:gov.nist.fdcc.patch:tst:1174013"/>
                  </criteria>
               </criteria>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11742" version="5" class="patch">
         <metadata>
            <title>MS11-019: Vulnerabilities in SMB Client Could Allow Remote Code Execution (2511455)</title>
            <affected family="windows">
               <!--<platform>Microsoft Windows XP</platform>-->
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows Server 2008</platform>
               <platform>Microsoft Windows 7</platform>
               <platform>Microsoft Windows Server 2008 R2</platform>
            </affected>
            <reference source="Microsoft" ref_id="MS11-019" ref_url="http://www.microsoft.com/technet/security/bulletin/MS11-019.mspx"/>
            <reference source="Microsoft" ref_id="KB2511455" ref_url="http://support.microsoft.com/kb/2511455"/>
            <reference source="CVE" ref_id="CVE-2011-0654" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0654"/>
            <reference source="CVE" ref_id="CVE-2011-0660" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0660"/>
            <description>Microsoft has released MS11-019 to address security issues in Microsoft Windows XP, Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2 as documented by CVE-2011-0654 abd CVE-2011-0660 .</description>
         </metadata>
         <criteria operator="OR">
            <!--<criteria operator="AND" comment="XP (32-bit) SP3">
                    <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
                    <criterion comment="Mrxsmb.sys version is less than 5.1.2600.6082" test_ref="oval:gov.nist.fdcc.patch:tst:1174201"/>
                </criteria>
                <criteria operator="AND" comment="XP (64-bit) SP2">
                    <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
                    <criterion comment="Mrxsmb.sys version is less than 5.2.3790.4833" test_ref="oval:gov.nist.fdcc.patch:tst:1174202"/>
                </criteria>-->
            <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit) - GDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criterion comment="Mrxsmb.sys version is less than 6.0.6001.18604" test_ref="oval:gov.nist.fdcc.patch:tst:1174203"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Mrxsmb.sys version is greater than or equal to 6.0.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1174204"/>
                     <criterion comment="Mrxsmb.sys version is less 6.0.6001.22859" test_ref="oval:gov.nist.fdcc.patch:tst:1174205"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit) - GDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criterion comment="Mrxsmb.sys version is less than 6.0.6002.18409" test_ref="oval:gov.nist.fdcc.patch:tst:1174206"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Mrxsmb.sys version is greater than or equal to 6.0.6002.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1174207"/>
                     <criterion comment="Mrxsmb.sys version is less than 6.0.6002.22594" test_ref="oval:gov.nist.fdcc.patch:tst:1174208"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP1 (64-bit, ia-64) - GDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criterion comment="Mrxsmb.sys version is less than 6.0.6001.18602" test_ref="oval:gov.nist.fdcc.patch:tst:1174209"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Mrxsmb.sys version is greater than or equal to 6.0.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1174204"/>
                     <criterion comment="Mrxsmb.sys version is less than 6.0.6001.22857" test_ref="oval:gov.nist.fdcc.patch:tst:1174211"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP2 (64-bit, ia-64) - GDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criterion comment="Mrxsmb.sys version is less than 6.0.6002.18407" test_ref="oval:gov.nist.fdcc.patch:tst:1174212"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Mrxsmb.sys version is greater than or equal to 6.0.6002.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1174207"/>
                     <criterion comment="Mrxsmb.sys version is less than 6.0.6002.22592" test_ref="oval:gov.nist.fdcc.patch:tst:1174214"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="7, Server 2008 R2 (32-bit, 64-bit, ia-64) - GDR/LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows 7 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:6165"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:5950"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:6438"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed" definition_ref="oval:org.mitre.oval:def:5954"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criterion comment="Mrxsmb.sys version is less than 6.1.7600.16765" test_ref="oval:gov.nist.fdcc.patch:tst:1174215"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Mrxsmb.sys version is greater than or equal to 6.1.7600.20000" test_ref="oval:gov.nist.fdcc.patch:tst:1174216"/>
                     <criterion comment="Mrxsmb.sys version is less than 6.1.7600.20907" test_ref="oval:gov.nist.fdcc.patch:tst:1174217"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="7, Server 2008 R2 SP1 (32-bit, 64-bit, ia-64)">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows 7 (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:12292"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:12627"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Service Pack 1 Edition is installed" definition_ref="oval:org.mitre.oval:def:12567"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:12583"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criterion comment="Mrxsmb.sys version is less than 6.1.7601.17565" test_ref="oval:gov.nist.fdcc.patch:tst:1174218"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Mrxsmb.sys version is greater than or equal to 6.1.7601.20000" test_ref="oval:gov.nist.fdcc.patch:tst:1174219"/>
                     <criterion comment="Mrxsmb.sys version is less than 6.1.7601.21666" test_ref="oval:gov.nist.fdcc.patch:tst:1174220"/>
                  </criteria>
               </criteria>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11743" version="4" class="patch">
         <metadata>
            <title>MS11-020: Vulnerabilities in SMB Server Could Allow Remote Code Execution (2508429)</title>
            <affected family="windows">
               <platform>Microsoft Windows XP</platform>
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows Server 2008</platform>
               <!--<platform>Microsoft Windows 7</platform>
                    <platform>Microsoft Windows Server 2008 R2</platform>-->
            </affected>
            <reference source="Microsoft" ref_id="MS11-020" ref_url="http://www.microsoft.com/technet/security/bulletin/MS11-020.mspx"/>
            <reference source="Microsoft" ref_id="KB2508429" ref_url="http://support.microsoft.com/kb/2508429"/>
            <reference source="CVE" ref_id="CVE-2011-0661" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0661"/>
            <description>Microsoft has released MS11-020 to address security issues in Windows XP, Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2 as documented by CVE-2011-0661</description>
         </metadata>
         <criteria operator="OR">
            <criteria operator="AND" comment="XP (32-bit) SP3">
               <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
               <criterion comment="Srv.sys version is less than 5.1.2600.6082" test_ref="oval:gov.nist.fdcc.patch:tst:1174301"/>
            </criteria>
            <criteria operator="AND" comment="XP (64-bit) SP2">
               <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
               <criterion comment="Srv.sys version is less than 5.2.3790.4832" test_ref="oval:gov.nist.fdcc.patch:tst:1174302"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit, 64-bit, ia-64) - GDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criterion comment="Srv.sys version is less than 6.0.6001.18602" test_ref="oval:gov.nist.fdcc.patch:tst:1174303"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Srv.sys version is greater than or equal to 6.0.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1174304"/>
                     <criterion comment="Srv.sys version is less than 6.0.6001.22857" test_ref="oval:gov.nist.fdcc.patch:tst:1174305"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - GDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criterion comment="Srv.sys version is less than 6.0.6002.18407" test_ref="oval:gov.nist.fdcc.patch:tst:1174306"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Srv.sys version is greater than or equal to 6.0.6002.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1164910"/>
                     <criterion comment="Srv.sys version is less than 6.0.6002.22592" test_ref="oval:gov.nist.fdcc.patch:tst:1174308"/>
                  </criteria>
               </criteria>
            </criteria>
            <!--<criteria operator="AND" comment="7, Server 2008 R2 (32-bit, 64-bit, ia-64) - GDR/LDR">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows 7 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:6165"/>
                        <extend_definition comment="Microsoft Windows 7 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:5950"/>
                        <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:6438"/>
                        <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed" definition_ref="oval:org.mitre.oval:def:5954"/>
                    </criteria>
                    <criteria operator="OR" comment="GDR or LDR Service branch">
                        <criterion comment="Srv.sys version is less than 6.1.7600.16765" test_ref="oval:gov.nist.fdcc.patch:tst:1174309"/>
                        <criteria operator="AND" comment="LDR">
                            <criterion comment="Srv.sys version is greater than or equal to 6.1.7600.20000" test_ref="oval:gov.nist.fdcc.patch:tst:1164914"/>
                            <criterion comment="Srv.sys version is less than 6.1.7600.20907" test_ref="oval:gov.nist.fdcc.patch:tst:1174311"/>
                        </criteria>
                    </criteria>
                </criteria>
                <criteria operator="AND" comment="7, Server 2008 R2 SP1-RC (32-bit, 64-bit, ia-64)">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows 7 (32-bit) Service Pack 1 Release Candidate is installed" definition_ref="oval:org.mitre.oval:def:12295"/>
                        <extend_definition comment="Microsoft Windows 7 x64 Edition Service Pack 1 Release Candidate is installed" definition_ref="oval:org.mitre.oval:def:12435"/>
                        <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Edition Service Pack 1 Release Candidate is installed" definition_ref="oval:org.mitre.oval:def:11590"/>
                        <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition Service Pack 1 Release Candidate is installed" definition_ref="oval:org.mitre.oval:def:12159"/>
                    </criteria>
                    <criteria operator="OR" comment="GDR or LDR Service branch">
                        <criterion comment="Srv.sys version is less than 6.1.7601.17565" test_ref="oval:gov.nist.fdcc.patch:tst:1174312"/>
                        <criteria operator="AND" comment="LDR">
                            <criterion comment="Srv.sys version is greater than or equal to 6.1.7601.20000" test_ref="oval:gov.nist.fdcc.patch:tst:1174313"/>
                            <criterion comment="Srv.sys version is less than 6.1.7601.21666" test_ref="oval:gov.nist.fdcc.patch:tst:1174314"/>
                        </criteria>
                    </criteria>
                </criteria>-->
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11744" version="2" class="patch">
         <metadata>
            <title>MS11-024: Vulnerability in Windows Fax Cover Page Editor Could Allow Remote Code Execution (2527308)</title>
            <affected family="windows">
               <platform>Microsoft Windows XP</platform>
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows Server 2008</platform>
               <platform>Microsoft Windows 7</platform>
               <platform>Microsoft Windows Server 2008 R2</platform>
            </affected>
            <reference source="Microsoft" ref_id="MS11-024" ref_url="http://www.microsoft.com/technet/security/bulletin/MS11-024.mspx"/>
            <reference source="Microsoft" ref_id="KB2527308" ref_url="http://support.microsoft.com/kb/2527308"/>
            <reference source="CVE" ref_id="CVE-2010-3974" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3974"/>
            <description>Microsoft has released MS11-024 to address security issues in Windows XP, Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2 as documented by CVE-2010-3974</description>
         </metadata>
         <criteria operator="AND">
            <criteria operator="OR">
               <criteria operator="AND" comment="XP (32-bit) SP3">
                  <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
                  <criteria operator="OR">
                     <criterion comment="Fxscover.exe version is less than 5.2.2600.6078" test_ref="oval:gov.nist.fdcc.patch:tst:1174401"/>
                     <criterion comment="Mfc42.dll version is less than 6.2.8081.0" test_ref="oval:gov.nist.fdcc.patch:tst:1174415"/>
                  </criteria>
               </criteria>
               <criteria operator="AND" comment="XP (64-bit) SP2">
                  <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
                  <criteria operator="OR">
                     <criterion comment="Fxscover.exe version is less than 5.2.3790.4829" test_ref="oval:gov.nist.fdcc.patch:tst:1174402"/>
                     <criterion comment="Mfc42.dll version is less than 6.5.9151.0" test_ref="oval:gov.nist.fdcc.patch:tst:1174416"/>
                  </criteria>
               </criteria>
               <criteria operator="AND" comment="Vista, Server 2008 SP1 or SP 2 or 7, Server 2008 R2 RTM or SP1(32-bit, 64-bit, ia-64)">
                  <criteria operator="OR">
                     <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                     <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                     <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                     <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                     <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
                     <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                     <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                     <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                     <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                     <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
                     <extend_definition comment="Microsoft Windows 7 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:6165"/>
                     <extend_definition comment="Microsoft Windows 7 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:5950"/>
                     <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:6438"/>
                     <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed" definition_ref="oval:org.mitre.oval:def:5954"/>
                     <extend_definition comment="Microsoft Windows 7 (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:12292"/>
                     <extend_definition comment="Microsoft Windows 7 x64 Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:12627"/>
                     <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Service Pack 1 Edition is installed" definition_ref="oval:org.mitre.oval:def:12567"/>
                     <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:12583"/>
                  </criteria>
                  <criterion comment="Mfc42.dll version is less than 6.6.8064.0" test_ref="oval:gov.nist.fdcc.patch:tst:1174417"/>
               </criteria>
               <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit, 64-bit) - GDR">
                  <criteria operator="OR">
                     <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                     <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                     <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                     <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  </criteria>
                  <criteria operator="OR" comment="GDR or LDR Service branch">
                     <criterion comment="Fxscover.exe version is less than 6.0.6001.18597" test_ref="oval:gov.nist.fdcc.patch:tst:1174403"/>
                     <criteria operator="AND" comment="LDR">
                        <criterion comment="Fxscover.exe version is greater than or equal to 6.0.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1174404"/>
                        <criterion comment="Fxscover.exe version is less than 6.0.6001.22852" test_ref="oval:gov.nist.fdcc.patch:tst:1174405"/>
                     </criteria>
                  </criteria>
               </criteria>
               <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit) - GDR">
                  <criteria operator="OR">
                     <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                     <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                     <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                     <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  </criteria>
                  <criteria operator="OR" comment="GDR or LDR Service branch">
                     <criterion comment="Fxscover.exe version is less than 6.0.6002.18403" test_ref="oval:gov.nist.fdcc.patch:tst:1174406"/>
                     <criteria operator="AND" comment="LDR">
                        <criterion comment="Fxscover.exe version is greater than or equal to 6.0.6002.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1174407"/>
                        <criterion comment="Fxscover.exe version is less than 6.0.6002.22586" test_ref="oval:gov.nist.fdcc.patch:tst:1174408"/>
                     </criteria>
                  </criteria>
               </criteria>
               <criteria operator="AND" comment="7, Server 2008 R2 (32-bit, 64-bit) - GDR/LDR">
                  <criteria operator="OR">
                     <extend_definition comment="Microsoft Windows 7 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:6165"/>
                     <extend_definition comment="Microsoft Windows 7 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:5950"/>
                     <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:6438"/>
                  </criteria>
                  <criteria operator="OR" comment="GDR or LDR Service branch">
                     <criterion comment="Fxscover.exe version is less than 6.1.7600.16759" test_ref="oval:gov.nist.fdcc.patch:tst:1174409"/>
                     <criteria operator="AND" comment="LDR">
                        <criterion comment="Fxscover.exe version is greater than or equal to 6.1.7600.20000" test_ref="oval:gov.nist.fdcc.patch:tst:1174410"/>
                        <criterion comment="Fxscover.exe version is less than 6.1.7600.20900" test_ref="oval:gov.nist.fdcc.patch:tst:1174411"/>
                     </criteria>
                  </criteria>
               </criteria>
               <criteria operator="AND" comment="7, Server 2008 R2 SP1 (32-bit, 64-bit) - GDR/LDR">
                  <criteria operator="OR">
                     <extend_definition comment="Microsoft Windows 7 (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:12292"/>
                     <extend_definition comment="Microsoft Windows 7 x64 Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:12627"/>
                     <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Service Pack 1 Edition is installed" definition_ref="oval:org.mitre.oval:def:12567"/>
                  </criteria>
                  <criteria operator="OR" comment="GDR or LDR Service branch">
                     <criterion comment="Fxscover.exe version is less than 6.1.7601.17559" test_ref="oval:gov.nist.fdcc.patch:tst:1174412"/>
                     <criteria operator="AND" comment="LDR">
                        <criterion comment="Fxscover.exe version is greater than or equal to 6.1.7601.20000" test_ref="oval:gov.nist.fdcc.patch:tst:1174413"/>
                        <criterion comment="Fxscover.exe version is less than 6.1.7601.21659" test_ref="oval:gov.nist.fdcc.patch:tst:1174414"/>
                     </criteria>
                  </criteria>
               </criteria>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11746" version="1" class="patch">
         <metadata>
            <title>MS11-027: Cumulative Security Update of ActiveX Kill Bits (2508272)</title>
            <affected family="windows">
               <platform>Microsoft Windows XP</platform>
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows 7</platform>
               <platform>Microsoft Windows Server 2008</platform>
               <platform>Microsoft Windows Server 2008 R2</platform>
            </affected>
            <reference source="Microsoft" ref_id="MS11-027" ref_url="http://www.microsoft.com/technet/security/bulletin/MS11-027.mspx"/>
            <reference source="Microsoft" ref_id="KB2508272" ref_url="http://support.microsoft.com/kb/2508272"/>
            <reference source="CVE" ref_id="CVE-2010-0811" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0811"/>
            <reference source="CVE" ref_id="CVE-2010-3973" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3973"/>
            <reference source="CVE" ref_id="CVE-2011-1243" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1243"/>
            <description>Microsoft has released MS11-027 to address security issues as documented by CVE-2010-0811, CVE-2010-3973, and CVE-2011-1243</description>
         </metadata>
         <criteria operator="AND">
            <criteria operator="OR">
               <extend_definition comment="Microsoft Windows XP (x86) SP2 is installed" definition_ref="oval:org.mitre.oval:def:754"/>
               <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
               <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
               <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
               <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
               <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
               <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
               <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               <extend_definition comment="Microsoft Windows 7 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:6165"/>
               <extend_definition comment="Microsoft Windows 7 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:5950"/>
               <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:6438"/>
               <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed" definition_ref="oval:org.mitre.oval:def:5954"/>
               <extend_definition comment="Microsoft Windows 7 (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:12292"/>
               <extend_definition comment="Microsoft Windows 7 x64 Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:12627"/>
               <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Service Pack 1 Edition is installed" definition_ref="oval:org.mitre.oval:def:12567"/>
               <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:12583"/>
            </criteria>
            <criteria operator="OR">
               <criterion comment="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{1a6fe369-f28c-4ad9-a3e6-2bcb50807cf1}!Compatibility Flags does not exist" test_ref="oval:gov.nist.fdcc.patch:tst:117460"/>
               <criterion comment="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{1a6fe369-f28c-4ad9-a3e6-2bcb50807cf1}!Compatibility Flags is not equal to 0x00000400" test_ref="oval:gov.nist.fdcc.patch:tst:117461"/>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11748" version="1" class="patch">
         <metadata>
            <title>MS11-029: Vulnerability in GDI+ Could Allow Remote Code Execution (2489979)</title>
            <affected family="windows">
               <platform>Microsoft Windows XP</platform>
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows Server 2008</platform>
            </affected>
            <reference source="Microsoft" ref_id="MS11-029" ref_url="http://www.microsoft.com/technet/security/bulletin/MS11-029.mspx"/>
            <reference source="Microsoft" ref_id="KB2489979" ref_url="http://support.microsoft.com/kb/2489979"/>
            <reference source="CVE" ref_id="CVE-2011-0041" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0041"/>
            <description>Microsoft has released MS11-029 to address security issues in Windows XP, Windows Vista, and Windows Server 2008 as documented by 2011-0041.</description>
         </metadata>
         <criteria operator="OR">
            <criteria operator="AND" comment="XP (32-bit) SP3">
               <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
               <criterion comment="Gdiplus.dll version is less than 5.2.6002.22509" test_ref="oval:gov.nist.fdcc.patch:tst:1174800"/>
            </criteria>
            <criteria operator="AND" comment="XP (64-bit) SP2">
               <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
               <criterion comment="Gdiplus.dll version is less than 5.2.6002.22507" test_ref="oval:gov.nist.fdcc.patch:tst:1174801"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit, 64-bit, ia-64) - GDR/LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criterion comment="Gdiplus.dll version is less than 5.2.6001.18551" test_ref="oval:gov.nist.fdcc.patch:tst:1174802"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Gdiplus.dll version is greater than or equal to 5.2.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1174803"/>
                     <criterion comment="Gdiplus.dll version is less than 5.2.6001.22791" test_ref="oval:gov.nist.fdcc.patch:tst:1174804"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - GDR/LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criterion comment="Gdiplus.dll version is less than 5.2.6002.18342" test_ref="oval:gov.nist.fdcc.patch:tst:1174805"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Gdiplus.dll version is greater than or equal to 5.2.6002.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1174806"/>
                     <criterion comment="Gdiplus.dll version is less than 5.2.6002.22519" test_ref="oval:gov.nist.fdcc.patch:tst:1174807"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit, 64-bit, ia-64) - GDR/LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criteria operator="AND" comment="GDR">
                     <criterion comment="Gdiplus.dll version is greater than or equal to 6.0.6001.18000" test_ref="oval:gov.nist.fdcc.patch:tst:1174808"/>
                     <criterion comment="Gdiplus.dll version is less than 6.0.6001.18551" test_ref="oval:gov.nist.fdcc.patch:tst:1174809"/>
                  </criteria>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Gdiplus.dll version is greater than or equal to 6.0.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1174810"/>
                     <criterion comment="Gdiplus.dll version is less than 6.0.6001.22791" test_ref="oval:gov.nist.fdcc.patch:tst:1174811"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - GDR/LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criteria operator="AND" comment="GDR">
                     <criterion comment="Gdiplus.dll version is greater than or equal to 6.0.6002.18000" test_ref="oval:gov.nist.fdcc.patch:tst:1174812"/>
                     <criterion comment="Gdiplus.dll version is less than 6.0.6002.18342" test_ref="oval:gov.nist.fdcc.patch:tst:1174813"/>
                  </criteria>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Gdiplus.dll version is greater than or equal to 6.0.6002.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1174814"/>
                     <criterion comment="Gdiplus.dll version is less than 6.0.6002.22519" test_ref="oval:gov.nist.fdcc.patch:tst:1174815"/>
                  </criteria>
               </criteria>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11749" version="2" class="patch">
         <metadata>
            <title>MS11-030: Vulnerability in DNS Resolution Could Allow Remote Code Execution (2509553)</title>
            <affected family="windows">
               <platform>Microsoft Windows XP</platform>
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows Server 2008</platform>
               <platform>Microsoft Windows 7</platform>
               <platform>Microsoft Windows Server 2008 R2</platform>
            </affected>
            <reference source="Microsoft" ref_id="MS11-030" ref_url="http://www.microsoft.com/technet/security/bulletin/MS11-030.mspx"/>
            <reference source="Microsoft" ref_id="KB2509553" ref_url="http://support.microsoft.com/kb/2509553"/>
            <reference source="CVE" ref_id="CVE-2011-0657" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0657"/>
            <description>Microsoft has released MS11-030 to address security issues in Windows XP, Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2 as documented by CVE-2011-0657</description>
         </metadata>
         <criteria operator="OR">
            <criteria operator="AND" comment="XP (32-bit) SP3">
               <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
               <criterion comment="Dnsapi.dll version is less than 5.1.2600.6089" test_ref="oval:gov.nist.fdcc.patch:tst:1174900"/>
            </criteria>
            <criteria operator="AND" comment="XP (64-bit) SP2">
               <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
               <criterion comment="Dnsapi.dll version is less than 5.2.3790.4840" test_ref="oval:gov.nist.fdcc.patch:tst:1174901"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit,64-bit, ia-64) - GDR/LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criterion comment="Dnsapi.dll version is less than 6.0.6001.18611" test_ref="oval:gov.nist.fdcc.patch:tst:1174902"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Dnsapi.dll version is greater than or equal to 6.0.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1174903"/>
                     <criterion comment="Dnsapi.dll version is less than 6.0.6001.22866" test_ref="oval:gov.nist.fdcc.patch:tst:1174904"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - GDR/LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criterion comment="Dnsapi.dll version is less than 6.0.6002.18416" test_ref="oval:gov.nist.fdcc.patch:tst:1174905"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Dnsapi.dll version is greater than or equal to 6.0.6002.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1174906"/>
                     <criterion comment="Dnsapi.dll version is less than 6.0.6002.22600" test_ref="oval:gov.nist.fdcc.patch:tst:1174907"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="7, Server 2008 R2 (32-bit, 64-bit, ia-64) - GDR/LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows 7 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:6165"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:5950"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:6438"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed" definition_ref="oval:org.mitre.oval:def:5954"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criterion comment="Dnsapi.dll version is less than 6.1.7600.16772" test_ref="oval:gov.nist.fdcc.patch:tst:1174908"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Dnsapi.dll version is greater than or equal to 6.1.7600.20000" test_ref="oval:gov.nist.fdcc.patch:tst:1174909"/>
                     <criterion comment="Dnsapi.dll version is less than 6.1.7600.20914" test_ref="oval:gov.nist.fdcc.patch:tst:1174910"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="7, Server 2008 R2 (32-bit, 64-bit, ia-64) SP1 - GDR/LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows 7 (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:12292"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:12627"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Service Pack 1 Edition is installed" definition_ref="oval:org.mitre.oval:def:12567"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:12583"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criterion comment="Dnsapi.dll version is less than 6.1.7601.17570" test_ref="oval:gov.nist.fdcc.patch:tst:1174911"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Dnsapi.dll version is greater than or equal to 6.1.7601.21000" test_ref="oval:gov.nist.fdcc.patch:tst:1174912"/>
                     <criterion comment="Dnsapi.dll version is less than 6.1.7601.21673" test_ref="oval:gov.nist.fdcc.patch:tst:1174913"/>
                  </criteria>
               </criteria>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11750" version="5" class="patch">
         <metadata>
            <title>MS11-031: Vulnerability in JScript and VBScript Scripting Engines Could Allow Remote Code Execution (2514666)</title>
            <affected family="windows">
               <platform>Microsoft Windows XP</platform>
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows Server 2008</platform>
               <platform>Microsoft Windows 7</platform>
               <platform>Microsoft Windows Server 2008 R2</platform>
            </affected>
            <reference source="Microsoft" ref_id="MS11-031" ref_url="http://www.microsoft.com/technet/security/bulletin/MS11-031.mspx"/>
            <reference source="Microsoft" ref_id="KB2514666" ref_url="http://support.microsoft.com/kb/2514666"/>
            <reference source="CVE" ref_id="CVE-2011-0663" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0663"/>
            <description>Microsoft has released MS11-031 to address security issues in JScript and VBScript scripting engines as documented by 2011-0663</description>
         </metadata>
         <criteria operator="OR">
            <criteria operator="AND" comment="JScript 5.6 and VBScript 5.6 on XP (32-bit SP2 or SP3, 64-bit SP2)">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows XP (x86) SP2 is installed" definition_ref="oval:org.mitre.oval:def:754"/>
                  <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
                  <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
               </criteria>
               <criterion comment="Jscript.dll version is greater than or equal to 5.6.0.0" test_ref="oval:gov.nist.fdcc.patch:tst:115851"/>
               <criterion comment="Jscript.dll version is less than 5.6.0.8850" test_ref="oval:gov.nist.fdcc.patch:tst:1175001"/>
               <criterion comment="Vbscript.dll version is greater than or equal to 5.1.0.0" test_ref="oval:gov.nist.fdcc.patch:tst:1175002"/>
               <criterion comment="Vbscript.dll version is less than 5.6.0.8850" test_ref="oval:gov.nist.fdcc.patch:tst:1175003"/>
            </criteria>
            <criteria operator="AND" comment="JScript 5.7 and VBScript 5.7 on XP (32-bit SP2 or SP3, 64-bit SP2)">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows XP (x86) SP2 is installed" definition_ref="oval:org.mitre.oval:def:754"/>
                  <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
                  <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
               </criteria>
               <criterion comment="Jscript.dll version is greater than or equal to 5.7.0.0" test_ref="oval:gov.nist.fdcc.patch:tst:115853"/>
               <criterion comment="Jscript.dll version is less than 5.7.6002.22589" test_ref="oval:gov.nist.fdcc.patch:tst:1175005"/>
               <criterion comment="Vbscript.dll version is greater than or equal to 5.7.0.0" test_ref="oval:gov.nist.fdcc.patch:tst:1165802"/>
               <criterion comment="Vbscript.dll version is less than 5.7.6002.22589" test_ref="oval:gov.nist.fdcc.patch:tst:1175007"/>
            </criteria>
            <criteria operator="AND" comment="JScript 5.7 and VBScript 5.7 on Vista, Server 2008 SP1 (32-bit, 64-bit, ia-64) - GDR/LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR">
                  <criteria operator="AND" comment="GDR">
                     <criterion comment="Jscript.dll version is greater than or equal to 5.7.0.18000" test_ref="oval:gov.nist.fdcc.patch:tst:115857"/>
                     <criterion comment="Jscript.dll version is less than 5.7.0.18599" test_ref="oval:gov.nist.fdcc.patch:tst:1175009"/>
                     <criterion comment="Vbscript.dll version is greater than or equal to 5.7.0.18000" test_ref="oval:gov.nist.fdcc.patch:tst:1165806"/>
                     <criterion comment="Vbscript.dll version is less than 5.7.0.18599" test_ref="oval:gov.nist.fdcc.patch:tst:1175011"/>
                  </criteria>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Jscript.dll version is greater than or equal to 5.7.0.22000" test_ref="oval:gov.nist.fdcc.patch:tst:115859"/>
                     <criterion comment="Jscript.dll version is less than 5.7.0.22854" test_ref="oval:gov.nist.fdcc.patch:tst:1175013"/>
                     <criterion comment="Vbscript.dll version is greater than or equal to 5.7.0.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1165810"/>
                     <criterion comment="Vbscript.dll version is less than 5.7.0.22854" test_ref="oval:gov.nist.fdcc.patch:tst:1175015"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="JScript 5.7 and VBScript 5.7 on Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - GDR/LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR">
                  <criteria operator="AND" comment="GDR">
                     <criterion comment="Jscript.dll version is greater than or equal to 5.7.6002.18000" test_ref="oval:gov.nist.fdcc.patch:tst:1158592"/>
                     <criterion comment="Jscript.dll version is less than 5.7.6002.18405" test_ref="oval:gov.nist.fdcc.patch:tst:1175017"/>
                     <criterion comment="Vbscript.dll version is greater than or equal to 5.7.6002.18000" test_ref="oval:gov.nist.fdcc.patch:tst:1165813"/>
                     <criterion comment="Vbscript.dll version is less than 5.7.6002.18405" test_ref="oval:gov.nist.fdcc.patch:tst:1175019"/>
                  </criteria>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Jscript.dll version is greater than or equal to 5.7.6002.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1158531"/>
                     <criterion comment="Jscript.dll version is less than 5.7.6002.22589" test_ref="oval:gov.nist.fdcc.patch:tst:1175005"/>
                     <criterion comment="Vbscript.dll version is greater than or equal to 5.7.6002.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1165815"/>
                     <criterion comment="Vbscript.dll version is less than 5.7.6002.22589" test_ref="oval:gov.nist.fdcc.patch:tst:1175007"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="JScript 5.8 and VBScript 5.8 on XP (32-bit SP2 or SP3, 64-bit SP2)">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows XP (x86) SP2 is installed" definition_ref="oval:org.mitre.oval:def:754"/>
                  <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
                  <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
               </criteria>
               <criterion comment="Jscript.dll version is greater than or equal to 5.8.0.0" test_ref="oval:gov.nist.fdcc.patch:tst:115855"/>
               <criterion comment="Jscript.dll version is less than 5.8.6001.23141" test_ref="oval:gov.nist.fdcc.patch:tst:1175025"/>
               <criterion comment="Vbscript.dll version is greater than or equal to 5.8.0.0" test_ref="oval:gov.nist.fdcc.patch:tst:1165804"/>
               <criterion comment="Vbscript.dll version is less than 5.8.6001.23141" test_ref="oval:gov.nist.fdcc.patch:tst:1175027"/>
            </criteria>
            <criteria operator="AND" comment="JScript 5.8 and VBScript 5.8 on Vista, Server 2008 SP1 (32-bit, 64-bit, ia-64) - GDR/LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               </criteria>
               <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:org.mitre.oval:def:11985" negate="true"/>
               <criteria operator="OR" comment="GDR or LDR">
                  <criteria operator="AND" comment="GDR">
                     <criterion comment="Jscript.dll version is greater than or equal to 5.8.6001.18000" test_ref="oval:gov.nist.fdcc.patch:tst:1158595"/>
                     <criterion comment="Jscript.dll version is less than 5.8.6001.19046" test_ref="oval:gov.nist.fdcc.patch:tst:1175029"/>
                     <criterion comment="Vbscript.dll version is greater than or equal to 5.8.6001.18000" test_ref="oval:gov.nist.fdcc.patch:tst:1175030"/>
                     <criterion comment="Vbscript.dll version is less than 5.8.6001.19046" test_ref="oval:gov.nist.fdcc.patch:tst:1175031"/>
                  </criteria>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Jscript.dll version is greater than or equal to 5.8.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1175032"/>
                     <criterion comment="Jscript.dll version is less than 5.8.6001.23141" test_ref="oval:gov.nist.fdcc.patch:tst:1175025"/>
                     <criterion comment="Vbscript.dll version is greater than or equal to 5.8.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1175034"/>
                     <criterion comment="Vbscript.dll version is less than 5.8.6001.23141" test_ref="oval:gov.nist.fdcc.patch:tst:1175027"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="JScript 5.8 and VBScript 5.8 on Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - GDR/LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:org.mitre.oval:def:11985" negate="true"/>
               <criteria operator="OR" comment="GDR or LDR">
                  <criteria operator="AND" comment="GDR">
                     <criterion comment="Jscript.dll version is greater than or equal to 5.8.6001.18000" test_ref="oval:gov.nist.fdcc.patch:tst:1158595"/>
                     <criterion comment="Jscript.dll version is less than 5.8.6001.19046" test_ref="oval:gov.nist.fdcc.patch:tst:1175029"/>
                     <criterion comment="Vbscript.dll version is greater than or equal to 5.8.6001.18000" test_ref="oval:gov.nist.fdcc.patch:tst:1175030"/>
                     <criterion comment="Vbscript.dll version is less than 5.8.6001.19046" test_ref="oval:gov.nist.fdcc.patch:tst:1175031"/>
                  </criteria>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Jscript.dll version is greater than or equal to 5.8.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1175032"/>
                     <criterion comment="Jscript.dll version is less than 5.8.6001.23141" test_ref="oval:gov.nist.fdcc.patch:tst:1175025"/>
                     <criterion comment="Vbscript.dll version is greater than or equal to 5.8.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1175034"/>
                     <criterion comment="Vbscript.dll version is less than 5.8.6001.23141" test_ref="oval:gov.nist.fdcc.patch:tst:1175027"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="JScript 5.8 and VBScript 5.8 on Windows 7, Server 2008 R2 (32-bit, 64-bit, ia-64) - GDR/LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows 7 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:6165"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:5950"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:6438"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed" definition_ref="oval:org.mitre.oval:def:5954"/>
               </criteria>
               <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:org.mitre.oval:def:11985" negate="true"/>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criteria operator="AND" comment="GDR">
                     <criterion comment="Jscript.dll version is less than 5.8.7600.16762" test_ref="oval:gov.nist.fdcc.patch:tst:1175036"/>
                     <criterion comment="Vbscript.dll version is less than 5.8.7600.16762" test_ref="oval:gov.nist.fdcc.patch:tst:1175037"/>
                  </criteria>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Jscript.dll version is greater than or equal to 5.8.7600.20000" test_ref="oval:gov.nist.fdcc.patch:tst:1173302"/>
                     <criterion comment="Jscript.dll version is less than 5.8.7600.20904" test_ref="oval:gov.nist.fdcc.patch:tst:1175039"/>
                     <criterion comment="Vbscript.dll version is greater than or equal to 5.8.7600.20000" test_ref="oval:gov.nist.fdcc.patch:tst:1165818"/>
                     <criterion comment="Vbscript.dll version is less than 5.8.7600.20904" test_ref="oval:gov.nist.fdcc.patch:tst:1175041"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="JScript 5.8 and VBScript 5.8 on Windows 7, Server 2008 R2 SP1 (32-bit, 64-bit, ia-64) - GDR/LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows 7 (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:12292"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:12627"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Service Pack 1 Edition is installed" definition_ref="oval:org.mitre.oval:def:12567"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:12583"/>
               </criteria>
               <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:org.mitre.oval:def:11985" negate="true"/>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criteria operator="AND" comment="GDR">
                     <criterion comment="Jscript.dll version is less than 5.8.7601.17562" test_ref="oval:gov.nist.fdcc.patch:tst:1175042"/>
                     <criterion comment="Vbscript.dll version is less than 5.8.7601.17562" test_ref="oval:gov.nist.fdcc.patch:tst:1175043"/>
                  </criteria>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Jscript.dll version is greater than or equal to 5.8.7601.21000" test_ref="oval:gov.nist.fdcc.patch:tst:1173308"/>
                     <criterion comment="Jscript.dll version is less than 5.8.7601.21663" test_ref="oval:gov.nist.fdcc.patch:tst:1175045"/>
                     <criterion comment="Vbscript.dll version is greater than or equal to 5.8.7601.21000" test_ref="oval:gov.nist.fdcc.patch:tst:1173310"/>
                     <criterion comment="Vbscript.dll version is less than 5.8.7601.21663" test_ref="oval:gov.nist.fdcc.patch:tst:1175047"/>
                  </criteria>
               </criteria>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11751" version="3" class="patch">
         <metadata>
            <title>MS11-032: Vulnerability in the OpenType Compact Font Format (CFF) Driver Could Allow Remote Code Execution (2507618)</title>
            <affected family="windows">
               <platform>Microsoft Windows XP</platform>
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows Server 2008</platform>
               <platform>Microsoft Windows 7</platform>
               <platform>Microsoft Windows Server 2008 R2</platform>
            </affected>
            <reference source="Microsoft" ref_id="MS11-032" ref_url="http://www.microsoft.com/technet/security/bulletin/MS11-032.mspx"/>
            <reference source="Microsoft" ref_id="KB2507618" ref_url="http://support.microsoft.com/kb/2507618"/>
            <reference source="CVE" ref_id="CVE-2011-0034" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0034"/>
            <description>Microsoft has released MS11-032 to address security issues in the OpenType Compact Font Format (CFF) driver as documented by CVE-2011-0034.</description>
         </metadata>
         <criteria operator="OR">
            <criteria operator="AND" comment="(vista sp1/2 (32/64) OR 2008 RTM/sp2 (32/64) OR xp sp2/3)">
               <criteria operator="OR" comment="vista sp1/2 (32/64) OR 2008 RTM/sp2 (32/64) OR xp sp2/3 OR xp x64 sp2 OR 7 OR 2008 R2">
                  <extend_definition comment="Microsoft Windows XP (x86) SP2 is installed" definition_ref="oval:org.mitre.oval:def:754"/>
                  <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <criterion comment="Atmfd.dll version is less than 5.1.2.232" test_ref="oval:gov.nist.fdcc.patch:tst:117510"/>
            </criteria>
            <criteria operator="AND" comment="xp x64 sp2">
               <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
               <criterion comment="Atmfd.dll version is less than 5.2.2.232" test_ref="oval:gov.nist.fdcc.patch:tst:117511"/>
            </criteria>
            <criteria operator="AND" comment="Windows 7, Server 2008 R2 RTM/SP1 (32-bit, 64-bit, ia-64)">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows 7 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:6165"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:5950"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:6438"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed" definition_ref="oval:org.mitre.oval:def:5954"/>
                  <extend_definition comment="Microsoft Windows 7 (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:12292"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:12627"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Service Pack 1 Edition is installed" definition_ref="oval:org.mitre.oval:def:12567"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:12583"/>
               </criteria>
               <criterion comment="Atmfd.dll version is less than 5.1.2.234" test_ref="oval:gov.nist.fdcc.patch:tst:117512"/>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11755" version="2" class="patch">
         <metadata>
            <title>MS11-037: Vulnerability in MHTML Could Allow Information Disclosure (2544893)</title>
            <affected family="windows">
               <platform>Microsoft Windows XP</platform>
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows Server 2008</platform>
               <platform>Microsoft Windows 7</platform>
               <platform>Microsoft Windows Server 2008 R2</platform>
            </affected>
            <reference source="Microsoft" ref_id="MS11-037" ref_url="http://www.microsoft.com/technet/security/bulletin/MS11-037.mspx"/>
            <reference source="Microsoft" ref_id="KB2544893" ref_url="http://support.microsoft.com/kb/2544893"/>
            <reference source="CVE" ref_id="CVE-2011-1894" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1894"/>
            <description>Microsoft has released MS11-037 to address security issues in Windows XP, Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2 as documented by CVE-2011-1894.</description>
         </metadata>
         <criteria operator="OR">
            <criteria operator="AND" comment="XP (32-bit) SP3">
               <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
               <criterion comment="Inetcomm.dll version is less than 6.0.2900.6109" test_ref="oval:gov.nist.fdcc.patch:tst:1175500"/>
            </criteria>
            <criteria operator="AND" comment="XP (64-bit) SP2">
               <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
               <criterion comment="Inetcomm.dll version is less than 6.0.3790.4862" test_ref="oval:gov.nist.fdcc.patch:tst:1175501"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit, 64-bit) - GDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criterion comment="Inetcomm.dll version is less than 6.0.6001.18645" test_ref="oval:gov.nist.fdcc.patch:tst:1175502"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Inetcomm.dll version is greater than or equal to 6.0.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1174504"/>
                     <criterion comment="Inetcomm.dll version is less than 6.0.6001.22911" test_ref="oval:gov.nist.fdcc.patch:tst:1175504"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit) - GDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criterion comment="Inetcomm.dll version is less than 6.0.6002.18463" test_ref="oval:gov.nist.fdcc.patch:tst:1175505"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Inetcomm.dll version is greater than or equal to 6.0.6002.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1174507"/>
                     <criterion comment="Inetcomm.dll version is less than 6.0.6002.22634" test_ref="oval:gov.nist.fdcc.patch:tst:1175507"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="7, Server 2008 R2 (32-bit, 64-bit) - GDR/LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows 7 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:6165"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:5950"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:6438"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criterion comment="Inetcomm.dll version is less than 6.1.7600.16807" test_ref="oval:gov.nist.fdcc.patch:tst:1175508"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Inetcomm.dll version is greater than or equal to 6.1.7600.20000" test_ref="oval:gov.nist.fdcc.patch:tst:1174510"/>
                     <criterion comment="Inetcomm.dll version is less than 6.1.7600.20958" test_ref="oval:gov.nist.fdcc.patch:tst:1175510"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="7, Server 2008 R2 SP1 (32-bit, 64-bit)">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows 7 (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:12292"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:12627"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Service Pack 1 Edition is installed" definition_ref="oval:org.mitre.oval:def:12567"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criterion comment="Inetcomm.dll version is less than 6.1.7601.17609" test_ref="oval:gov.nist.fdcc.patch:tst:1175511"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Inetcomm.dll version is greater than or equal to 6.1.7601.20000" test_ref="oval:gov.nist.fdcc.patch:tst:1174513"/>
                     <criterion comment="Inetcomm.dll version is less than 6.1.7601.21719" test_ref="oval:gov.nist.fdcc.patch:tst:1175513"/>
                  </criteria>
               </criteria>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11756" version="1" class="patch">
         <metadata>
            <title>MS11-038: Vulnerability in OLE Automation Could Allow Remote Code Execution (2476490)</title>
            <affected family="windows">
               <platform>Microsoft Windows XP</platform>
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows Server 2008</platform>
               <platform>Microsoft Windows 7</platform>
               <platform>Microsoft Windows Server 2008 R2</platform>
            </affected>
            <reference source="Microsoft" ref_id="MS11-038" ref_url="http://www.microsoft.com/technet/security/bulletin/MS11-038.mspx"/>
            <reference source="Microsoft" ref_id="KB2476490" ref_url="http://support.microsoft.com/kb/2476490"/>
            <reference source="CVE" ref_id="CVE-2011-0658" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0658"/>
            <description>Microsoft has released MS11-038 to address security issues in Windows XP, Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2 as documented by CVE-2011-0658.</description>
         </metadata>
         <criteria operator="OR">
            <criteria operator="AND" comment="XP (32-bit) SP3">
               <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
               <criterion comment="Oleaut32.dll version is less than 5.1.2600.6058" test_ref="oval:gov.nist.fdcc.patch:tst:1175600"/>
            </criteria>
            <criteria operator="AND" comment="XP (64-bit) SP2">
               <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
               <criterion comment="Oleaut32.dll version is less than 5.2.3790.4807" test_ref="oval:gov.nist.fdcc.patch:tst:1175601"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit, 64-bit) - GDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criterion comment="Oleaut32.dll version is less than 6.0.6001.18565" test_ref="oval:gov.nist.fdcc.patch:tst:1175602"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Oleaut32.dll version is greater than or equal to 6.0.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1175603"/>
                     <criterion comment="Oleaut32.dll version is less than 6.0.6001.22816" test_ref="oval:gov.nist.fdcc.patch:tst:1175604"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit) - GDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criterion comment="Oleaut32.dll version is less than 6.0.6002.18357" test_ref="oval:gov.nist.fdcc.patch:tst:1175605"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Oleaut32.dll version is greater than or equal to 6.0.6002.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1175606"/>
                     <criterion comment="Oleaut32.dll version is less than 6.0.6002.22551" test_ref="oval:gov.nist.fdcc.patch:tst:1175607"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="7, Server 2008 R2 (32-bit, 64-bit) - GDR/LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows 7 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:6165"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:5950"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:6438"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criterion comment="Oleaut32.dll version is less than 6.1.7600.16722" test_ref="oval:gov.nist.fdcc.patch:tst:1175608"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Oleaut32.dll version is greater than or equal to 6.1.7600.20000" test_ref="oval:gov.nist.fdcc.patch:tst:1175609"/>
                     <criterion comment="Oleaut32.dll version is less than 6.1.7600.20861" test_ref="oval:gov.nist.fdcc.patch:tst:1175610"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="7, Server 2008 R2 SP1 (32-bit, 64-bit)">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows 7 (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:12292"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:12627"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Service Pack 1 Edition is installed" definition_ref="oval:org.mitre.oval:def:12567"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criterion comment="Oleaut32.dll version is less than 6.1.7601.16722" test_ref="oval:gov.nist.fdcc.patch:tst:1175611"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Oleaut32.dll version is greater than or equal to 6.1.7601.20000" test_ref="oval:gov.nist.fdcc.patch:tst:1175612"/>
                     <criterion comment="Oleaut32.dll version is less than 6.1.7601.21669" test_ref="oval:gov.nist.fdcc.patch:tst:1175613"/>
                  </criteria>
               </criteria>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11759" version="1" class="patch">
         <metadata>
            <title>MS11-042: Vulnerabilities in Distributed File System Could Allow Remote Code Execution (2535512)</title>
            <affected family="windows">
               <platform>Microsoft Windows XP</platform>
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows Server 2008</platform>
               <platform>Microsoft Windows 7</platform>
               <platform>Microsoft Windows Server 2008 R2</platform>
            </affected>
            <reference source="Microsoft" ref_id="MS11-042" ref_url="http://www.microsoft.com/technet/security/bulletin/MS11-042.mspx"/>
            <reference source="Microsoft" ref_id="KB2535512" ref_url="http://support.microsoft.com/kb/2535512"/>
            <reference source="CVE" ref_id="CVE-2011-1868" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1868"/>
            <reference source="CVE" ref_id="CVE-2011-1869" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1869"/>
            <description>Microsoft has released MS11-042 to address security issues in Windows XP, Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2 as documented by CVE-2011-1868 and CVE-2011-1869.</description>
         </metadata>
         <criteria operator="OR">
            <criteria operator="AND" comment="XP (32-bit) SP3">
               <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
               <criterion comment="Mup.sys version is less than 5.1.2600.6103" test_ref="oval:gov.nist.fdcc.patch:tst:1175900"/>
            </criteria>
            <criteria operator="AND" comment="XP (64-bit) SP2">
               <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
               <criterion comment="Mup.sys version is less than 5.2.3790.4851" test_ref="oval:gov.nist.fdcc.patch:tst:1175901"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit,64-bit, ia-64) - GDR/LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criterion comment="Dfsc.sys version is less than 6.0.6001.18633" test_ref="oval:gov.nist.fdcc.patch:tst:1175902"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Dfsc.sys version is greater than or equal to 6.0.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1175903"/>
                     <criterion comment="Dfsc.sys version is less than 6.0.6001.22899" test_ref="oval:gov.nist.fdcc.patch:tst:1175904"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - GDR/LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criterion comment="Dfsc.sys version is less than 6.0.6002.18451" test_ref="oval:gov.nist.fdcc.patch:tst:1175905"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Dfsc.sys version is greater than or equal to 6.0.6002.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1175906"/>
                     <criterion comment="Dfsc.sys version is less than 6.0.6002.22625" test_ref="oval:gov.nist.fdcc.patch:tst:1175907"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="7, Server 2008 R2 (32-bit, 64-bit, ia-64) - GDR/LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows 7 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:6165"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:5950"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:6438"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed" definition_ref="oval:org.mitre.oval:def:5954"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criterion comment="Dfsc.sys version is less than 6.1.7600.16804" test_ref="oval:gov.nist.fdcc.patch:tst:1175908"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Dfsc.sys version is greater than or equal to 6.1.7600.20000" test_ref="oval:gov.nist.fdcc.patch:tst:1175909"/>
                     <criterion comment="Dfsc.sys version is less than 6.1.7600.20953" test_ref="oval:gov.nist.fdcc.patch:tst:1175910"/>
                  </criteria>
               </criteria>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11760" version="2" class="patch">
         <metadata>
            <title>MS11-043: Vulnerability in SMB Client Could Allow Remote Code Execution (2536276)</title>
            <affected family="windows">
               <platform>Microsoft Windows XP</platform>
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows Server 2008</platform>
               <platform>Microsoft Windows 7</platform>
               <platform>Microsoft Windows Server 2008 R2</platform>
            </affected>
            <reference source="Microsoft" ref_id="MS11-043" ref_url="http://www.microsoft.com/technet/security/bulletin/MS11-043.mspx"/>
            <reference source="Microsoft" ref_id="KB2536276" ref_url="http://support.microsoft.com/kb/2536276"/>
            <reference source="CVE" ref_id="CVE-2011-1268" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1268"/>
            <description>Microsoft has released MS11-043 to address security issues in Windows XP, Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2 as documented by CVE-2011-1268.</description>
         </metadata>
         <criteria operator="OR">
            <criteria operator="AND" comment="XP (32-bit) SP3">
               <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
               <criterion comment="Mrxsmb.sys version is less than 5.1.2600.6133" test_ref="oval:gov.nist.fdcc.patch:tst:1176000"/>
            </criteria>
            <criteria operator="AND" comment="XP (64-bit) SP2">
               <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
               <criterion comment="Mrxsmb.sys version is less than 5.2.3790.4883" test_ref="oval:gov.nist.fdcc.patch:tst:1176001"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit,64-bit, ia-64) - GDR/LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criterion comment="Mrxsmb10.sys version is less than 6.0.6001.18644" test_ref="oval:gov.nist.fdcc.patch:tst:1176002"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Mrxsmb10.sys version is greater than or equal to 6.0.6001.22000" test_ref="oval:org.mitre.oval:tst:9535"/>
                     <criterion comment="Mrxsmb10.sys version is less than 6.0.6001.22939" test_ref="oval:gov.nist.fdcc.patch:tst:1176004"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - GDR/LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criterion comment="Mrxsmb10.sys version is less than 6.0.6002.18490" test_ref="oval:gov.nist.fdcc.patch:tst:1176005"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Mrxsmb10.sys version is greater than or equal 6.0.6002.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1176006"/>
                     <criterion comment="Mrxsmb10.sys version is less than 6.0.6002.22672" test_ref="oval:gov.nist.fdcc.patch:tst:1176007"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="7, Server 2008 R2 (32-bit, 64-bit, ia-64) - GDR/LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows 7 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:6165"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:5950"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:6438"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed" definition_ref="oval:org.mitre.oval:def:5954"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criterion comment="Mrxsmb10.sys version is less than 6.1.7600.16847" test_ref="oval:gov.nist.fdcc.patch:tst:1176008"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Mrxsmb10.sys version is greater than or equal 6.1.7600.20000" test_ref="oval:gov.nist.fdcc.patch:tst:1176009"/>
                     <criterion comment="Mrxsmb10.sys version is less than 6.1.7600.21005" test_ref="oval:gov.nist.fdcc.patch:tst:1176010"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="7, Server 2008 R2 SP1 (32-bit, 64-bit, ia-64) - GDR/LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows 7 (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:12292"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:12627"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Service Pack 1 Edition is installed" definition_ref="oval:org.mitre.oval:def:12567"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:12583"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criterion comment="Mrxsmb10.sys version is less than 6.1.7601.17647" test_ref="oval:gov.nist.fdcc.patch:tst:1176011"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Mrxsmb10.sys version is greater than or equal 6.1.7601.21000" test_ref="oval:gov.nist.fdcc.patch:tst:1176012"/>
                     <criterion comment="Mrxsmb10.sys version is less than 6.1.7601.21767" test_ref="oval:gov.nist.fdcc.patch:tst:1176013"/>
                  </criteria>
               </criteria>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11761" version="2" class="patch">
         <metadata>
            <title>MS11-044: Vulnerability in .NET Framework Could Allow Remote Code Execution (2538814)</title>
            <affected family="windows">
               <platform>Microsoft Windows XP</platform>
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows Server 2008</platform>
               <platform>Microsoft Windows 7</platform>
               <platform>Microsoft Windows Server 2008 R2</platform>
            </affected>
            <reference source="Microsoft" ref_id="MS11-044" ref_url="http://www.microsoft.com/technet/security/bulletin/MS11-044.mspx"/>
            <reference source="Microsoft" ref_id="KB2538814" ref_url="http://support.microsoft.com/kb/2538814"/>
            <reference source="CVE" ref_id="CVE-2011-1271" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1271"/>
            <description>Microsoft has released MS11-044 to address security issues in Windows XP, Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2 as documented by CVE-2011-1271.</description>
         </metadata>
         <criteria operator="OR">
            <criteria operator="AND" comment="(xp sp3 OR xp x64 sp2) AND 2.0 sp2">
               <criteria operator="OR" comment="xp sp3 OR xp x64 sp2">
                  <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
                  <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
               </criteria>
               <criteria operator="OR" comment=".net 2.0 sp2 or 3.5 sp1">
                  <extend_definition comment="Microsoft .NET Framework 2.0 Service Pack 2, or later, is installed" definition_ref="oval:org.mitre.oval:def:6158"/>
                  <extend_definition comment="Microsoft .NET Framework 3.5 Service Pack 1, or later, is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11583"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR update has been applied">
                  <criterion comment="Mscorlib.dll version is less than 2.0.50727.3623" test_ref="oval:gov.nist.fdcc.patch:tst:1176100"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Mscorlib.dll version is greater than or equal to 2.0.50727.5000" test_ref="oval:gov.nist.fdcc.patch:tst:1169106"/>
                     <criterion comment="Mscorlib.dll version is less than 2.0.50727.5662" test_ref="oval:gov.nist.fdcc.patch:tst:1176102"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="(xp sp3 OR xp x64 sp2) AND 3.5 (gold) or 4.0">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
                  <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
                  <extend_definition comment="Microsoft Windows 7 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:6165"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:5950"/>
                  <extend_definition comment="Microsoft Windows 7 (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:12292"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:12627"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:6438"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed" definition_ref="oval:org.mitre.oval:def:5954"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:12567"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:12583"/>
               </criteria>
               <criteria operator="OR">
                  <extend_definition comment="Microsoft .NET Framework 4.0 is Installed" definition_ref="oval:gov.nist.fdcc.patch:def:115295"/>
                  <extend_definition comment="Microsoft .NET Framework 3.5 (Gold) is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11582"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR update has been applied">
                  <criterion comment="Mscorlib.dll version is less than 4.0.30319.235" test_ref="oval:gov.nist.fdcc.patch:tst:1176103"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Mscorlib.dll version is greater than or equal to 4.0.30319.300" test_ref="oval:gov.nist.fdcc.patch:tst:1174710"/>
                     <criterion comment="Mscorlib.dll version is less than 4.0.30319.454" test_ref="oval:gov.nist.fdcc.patch:tst:1176105"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="(vista sp1 (32/64) OR 2008 RTM (32/64)) AND .net 2.0 sp1 AND 3.5 (Gold)">
               <criteria operator="OR" comment="vista sp1 (32/64) OR 2008 RTM (32/64)">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               </criteria>
               <extend_definition comment="Microsoft .NET Framework 2.0 Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:6428"/>
               <extend_definition comment="Microsoft .NET Framework 3.5 (Gold) is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11582"/>
               <criterion comment="Mscorlib.dll version is less than 2.0.50727.1891" test_ref="oval:gov.nist.fdcc.patch:tst:1176106"/>
            </criteria>
            <criteria operator="AND" comment="(vista sp1 (32/64) OR 2008 RTM (32/64)) AND .net 2.0 sp2 AND 3.5 sp1">
               <criteria operator="OR" comment="vista sp1 (32/64) OR 2008 RTM (32/64)">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               </criteria>
               <extend_definition comment="Microsoft .NET Framework 2.0 Service Pack 2, or later, is installed" definition_ref="oval:org.mitre.oval:def:6158"/>
               <extend_definition comment="Microsoft .NET Framework 3.5 Service Pack 1, or later, is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11583"/>
               <criteria operator="OR" comment="GDR or LDR update has been applied">
                  <criterion comment="Mscorlib.dll version is less than 2.0.50727.3623" test_ref="oval:gov.nist.fdcc.patch:tst:1176100"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Mscorlib.dll version is greater than or equal to 2.0.50727.4000" test_ref="oval:gov.nist.fdcc.patch:tst:1159403"/>
                     <criterion comment="Mscorlib.dll version is less than 2.0.50727.5662" test_ref="oval:gov.nist.fdcc.patch:tst:1176102"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="(vista sp2 (32/64) OR 2008 SP2 (32/64)) AND .net 2.0 sp2 OR 3.5 sp1">
               <criteria operator="OR" comment="vista sp2 (32/64) OR 2008 SP2 (32/64)">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <criteria operator="OR" comment=".net 2.0 sp2 OR 3.5 sp1">
                  <extend_definition comment="Microsoft .NET Framework 2.0 Service Pack 2, or later, is installed" definition_ref="oval:org.mitre.oval:def:6158"/>
                  <extend_definition comment="Microsoft .NET Framework 3.5 Service Pack 1, or later, is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11583"/>
               </criteria>
               <criteria operator="OR">
                  <criterion comment="Mscorlib.dll version is less than 2.0.50727.4214" test_ref="oval:gov.nist.fdcc.patch:tst:1176110"/>
                  <criteria operator="AND">
                     <criterion comment="Mscorlib.dll version is greater than or equal to 2.0.50727.5000" test_ref="oval:gov.nist.fdcc.patch:tst:1176111"/>
                     <criterion comment="Mscorlib.dll version is less than 2.0.50727.5662" test_ref="oval:gov.nist.fdcc.patch:tst:1176112"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="Windows 7 x86/x64, Windows Server 2008 R2 x64/ia64 AND .net 3.5.1">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows 7 (32-bit) is installed" definition_ref="oval:gov.nist.oval:def:115301"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Edition is installed" definition_ref="oval:gov.nist.oval:def:115302"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Edition is installed" definition_ref="oval:gov.nist.oval:def:115303"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed" definition_ref="oval:gov.nist.oval:def:115302"/>
               </criteria>
               <criteria operator="OR">
                  <criterion comment="Mscorlib.dll version is less than 2.0.50727.4961" test_ref="oval:gov.nist.fdcc.patch:tst:1176113"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Mscorlib.dll version is greater than or equal to 2.0.50727.5000" test_ref="oval:gov.nist.fdcc.patch:tst:1176111"/>
                     <criterion comment="Mscorlib.dll version is less than 2.0.50727.5662" test_ref="oval:gov.nist.fdcc.patch:tst:1176112"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="Windows 7 SP1 x86/x64, Windows Server 2008 R2 SP1 x64/ia64 AND .net 3.5.1">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows 7 (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:12292"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:12627"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Service Pack 1 Edition is installed" definition_ref="oval:org.mitre.oval:def:12567"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:12583"/>
               </criteria>
               <criteria operator="OR">
                  <criterion comment="Mscorlib.dll version is less than 2.0.50727.5446" test_ref="oval:gov.nist.fdcc.patch:tst:1176116"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Mscorlib.dll version is greater than or equal to 2.0.50727.5600" test_ref="oval:gov.nist.fdcc.patch:tst:1176117"/>
                     <criterion comment="Mscorlib.dll version is less than 2.0.50727.5662" test_ref="oval:gov.nist.fdcc.patch:tst:1176112"/>
                  </criteria>
               </criteria>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11762" version="1" class="patch">
         <metadata>
            <title>MS11-046: Vulnerability in Ancillary Function Driver Could Allow Elevation of Privilege (2503665)</title>
            <affected family="windows">
               <platform>Microsoft Windows XP</platform>
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows Server 2008</platform>
               <platform>Microsoft Windows 7</platform>
               <platform>Microsoft Windows Server 2008 R2</platform>
            </affected>
            <reference source="Microsoft" ref_id="MS11-046" ref_url="http://www.microsoft.com/technet/security/bulletin/MS11-046.mspx"/>
            <reference source="Microsoft" ref_id="KB2503665" ref_url="http://support.microsoft.com/kb/2503665"/>
            <reference source="CVE" ref_id="CVE-2011-1249" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1249"/>
            <description>Microsoft has released MS11-046 to address security issues in Windows XP, Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2 as documented by CVE-2011-1249.</description>
         </metadata>
         <criteria operator="OR">
            <criteria operator="AND" comment="XP (32-bit) SP3">
               <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
               <criterion comment="Afd.sys version is less than 5.1.2600.6081" test_ref="oval:gov.nist.fdcc.patch:tst:1176200"/>
            </criteria>
            <criteria operator="AND" comment="XP (64-bit) SP2">
               <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
               <criterion comment="Afd.sys version is less than 5.2.3790.4828" test_ref="oval:gov.nist.fdcc.patch:tst:1176201"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit,64-bit, ia-64) - GDR/LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criterion comment="Afd.sys version is less than 6.0.6001.18639" test_ref="oval:gov.nist.fdcc.patch:tst:1176202"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Afd.sys version is greater than or equal to 6.0.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1176203"/>
                     <criterion comment="Afd.sys version is less than 6.0.6001.22905" test_ref="oval:gov.nist.fdcc.patch:tst:1176204"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - GDR/LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criterion comment="Afd.sys version is less than 6.0.6002.18457" test_ref="oval:gov.nist.fdcc.patch:tst:1176205"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Afd.sys version is greater than or equal to 6.0.6002.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1176206"/>
                     <criterion comment="Afd.sys version is less than 6.0.6002.22629" test_ref="oval:gov.nist.fdcc.patch:tst:1176207"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="7, Server 2008 R2 (32-bit, 64-bit, ia-64) - GDR/LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows 7 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:6165"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:5950"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:6438"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed" definition_ref="oval:org.mitre.oval:def:5954"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criterion comment="Afd.sys version is less than 6.1.7600.16802" test_ref="oval:gov.nist.fdcc.patch:tst:1176208"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Afd.sys version is greater than or equal to 6.1.7600.20000" test_ref="oval:gov.nist.fdcc.patch:tst:1176209"/>
                     <criterion comment="Afd.sys version is less than 6.1.7600.20951" test_ref="oval:gov.nist.fdcc.patch:tst:1176210"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="7, Server 2008 R2 (32-bit, 64-bit, ia-64) SP1 - GDR/LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows 7 (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:12292"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:12627"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Service Pack 1 Edition is installed" definition_ref="oval:org.mitre.oval:def:12567"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:12583"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criterion comment="Afd.sys version is less than 6.1.7601.17603" test_ref="oval:gov.nist.fdcc.patch:tst:1176211"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Afd.sys version is greater than or equal to 6.1.7601.21000" test_ref="oval:gov.nist.fdcc.patch:tst:1176212"/>
                     <criterion comment="Afd.sys version is less than 6.1.7601.21712" test_ref="oval:gov.nist.fdcc.patch:tst:1176213"/>
                  </criteria>
               </criteria>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11764" version="1" class="patch">
         <metadata>
            <title>MS11-048: Vulnerability in SMB Server Could Allow Denial of Service (2536275)</title>
            <affected family="windows">
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows Server 2008</platform>
               <platform>Microsoft Windows 7</platform>
               <platform>Microsoft Windows Server 2008 R2</platform>
            </affected>
            <reference source="Microsoft" ref_id="MS11-048" ref_url="http://www.microsoft.com/technet/security/bulletin/MS11-048.mspx"/>
            <reference source="Microsoft" ref_id="KB2536275" ref_url="http://support.microsoft.com/kb/2536275"/>
            <reference source="CVE" ref_id="CVE-2011-1267" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1267"/>
            <description>Microsoft has released MS11-048 to address security issues in Windows XP, Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2 as documented by CVE-2011-1267</description>
         </metadata>
         <criteria operator="OR">
            <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit, 64-bit, ia-64) - GDR/LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               </criteria>
               <criteria operator="OR" comment="GDR/LDR">
                  <criterion comment="Srv2.sys version is less than 6.0.6001.18644" test_ref="oval:gov.nist.fdcc.patch:tst:1176400"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Srv2.sys version is greater than or equal to 6.0.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:116003"/>
                     <criterion comment="Srv2.sys version is less than 6.0.6001.22910" test_ref="oval:gov.nist.fdcc.patch:tst:1176402"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - GDR/LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <criteria operator="OR" comment="GDR/LDR">
                  <criterion comment="Srv2.sys version is less than 6.0.6002.18462" test_ref="oval:gov.nist.fdcc.patch:tst:1176403"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Srv2.sys version is greater than or equal to 6.0.6002.22000" test_ref="oval:gov.nist.fdcc.patch:tst:116007"/>
                     <criterion comment="Srv2.sys version is less than 6.0.6002.22634" test_ref="oval:gov.nist.fdcc.patch:tst:1176405"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="7, Server 2008 R2 (32-bit, 64-bit, ia-64) - GDR/LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows 7 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:6165"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:5950"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:6438"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed" definition_ref="oval:org.mitre.oval:def:5954"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criterion comment="Srv.sys version is less than 6.1.7600.16806" test_ref="oval:gov.nist.fdcc.patch:tst:1176406"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Srv.sys version is greater than or equal to 6.1.7600.20000" test_ref="oval:gov.nist.fdcc.patch:tst:1164914"/>
                     <criterion comment="Srv.sys version is less than 6.1.7600.20956" test_ref="oval:gov.nist.fdcc.patch:tst:1176408"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="7, Server 2008 R2 (32-bit, 64-bit, ia-64) SP1 - GDR/LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows 7 (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:12292"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:12627"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Service Pack 1 Edition is installed" definition_ref="oval:org.mitre.oval:def:12567"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:12583"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criterion comment="Srv.sys version is less than 6.1.7601.17608" test_ref="oval:gov.nist.fdcc.patch:tst:1176409"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Srv.sys version is greater than or equal to 6.1.7601.20000" test_ref="oval:gov.nist.fdcc.patch:tst:1174313"/>
                     <criterion comment="Srv.sys version is less than 6.1.7601.21717" test_ref="oval:gov.nist.fdcc.patch:tst:1176411"/>
                  </criteria>
               </criteria>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11765" version="2" class="patch">
         <metadata>
            <title>MS11-050: Cumulative Security Update for Internet Explorer (2530548)</title>
            <affected family="windows">
               <!--<platform>Microsoft Windows XP</platform>-->
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows Server 2008</platform>
               <!--<platform>Microsoft Windows 7</platform>
               <platform>Microsoft Windows Server 2008 R2</platform>
               <product>Microsoft Internet Explorer 6</product>-->
               <product>Microsoft Internet Explorer 7</product>
               <product>Microsoft Internet Explorer 8</product>
               <product>Microsoft Internet Explorer 9</product>
            </affected>
            <reference source="Microsoft" ref_id="MS11-050" ref_url="http://www.microsoft.com/technet/security/bulletin/MS11-050.mspx"/>
            <reference source="Microsoft" ref_id="KB2530548" ref_url="http://support.microsoft.com/kb/2530548"/>
            <reference source="CVE" ref_id="CVE-2011-1246" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1246"/>
            <reference source="CVE" ref_id="CVE-2011-1250" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1250"/>
            <reference source="CVE" ref_id="CVE-2011-1251" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1251"/>
            <reference source="CVE" ref_id="CVE-2011-1252" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1252"/>
            <reference source="CVE" ref_id="CVE-2011-1254" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1254"/>
            <reference source="CVE" ref_id="CVE-2011-1255" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1255"/>
            <reference source="CVE" ref_id="CVE-2011-1256" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1256"/>
            <reference source="CVE" ref_id="CVE-2011-1258" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1258"/>
            <reference source="CVE" ref_id="CVE-2011-1260" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1260"/>
            <reference source="CVE" ref_id="CVE-2011-1261" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1261"/>
            <reference source="CVE" ref_id="CVE-2011-1262" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1262"/>
            <description>Microsoft has released MS11-050 to address security issues in Microsoft Internet Explorer 6, 7, and 8 on Windows as documented by CVE-2011-1246, CVE-2011-1250, CVE-2011-1251, CVE-2011-1252, CVE-2011-1254, CVE-2011-1255, CVE-2011-1256, CVE-2011-1258, CVE-2011-1260, CVE-2011-1261, and CVE-2011-1262.</description>
         </metadata>
         <criteria operator="OR">
            <!--<criteria operator="AND" comment="Internet Explorer 6">
               <extend_definition comment="Microsoft Internet Explorer 6 is installed" definition_ref="oval:org.mitre.oval:def:563"/>
               <criteria operator="OR">
                  <criteria operator="AND" comment="XP x64 SP2">
                     <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
                     <criterion comment="Mshtml.dll version is less than 6.0.3790.4857" test_ref="oval:gov.nist.fdcc.patch:tst:1176500"/>
                  </criteria>
                  <criteria operator="AND" comment="XP x86 SP3">
                     <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
                     <criterion comment="Mshtml.dll version is less than 6.0.2900.6104" test_ref="oval:gov.nist.fdcc.patch:tst:1176501"/>
                  </criteria>
               </criteria>
            </criteria>-->
            <criteria operator="AND" comment="Internet Explorer 7">
               <extend_definition comment="Microsoft Internet Explorer 7 is installed" definition_ref="oval:org.mitre.oval:def:627"/>
               <!--<criteria operator="OR">
                  <criteria operator="AND" comment="XP SP3 (x86), SP2 (x64) - GDR/QFE">
                     <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
                        <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
                     </criteria>
                     <criteria operator="OR" comment="GDR or QFE Service branch">
                        <criterion comment="Mshtml.dll version is less than 7.0.6000.17098" test_ref="oval:gov.nist.fdcc.patch:tst:1176502"/>
                        <criteria operator="AND" comment="QFE">
                           <criterion comment="Mshtml.dll version is greater than or equal to 7.0.6000.20000" test_ref="oval:gov.nist.fdcc.patch:tst:115304"/>
                           <criterion comment="Mshtml.dll version is less than 7.0.6000.21300" test_ref="oval:gov.nist.fdcc.patch:tst:1176504"/>
                        </criteria>
                     </criteria>
                  </criteria>-->
               <criteria operator="AND" comment="Vista, Server 2008 SP1 (32/64-bit, ia-64) - GDR/LDR">
                  <criteria operator="OR">
                     <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                     <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                     <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                     <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                     <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
                  </criteria>
                  <criteria operator="OR" comment="GDR or LDR Service branch">
                     <criterion comment="Mshtml.dll version is less than 7.0.6001.18639" test_ref="oval:gov.nist.fdcc.patch:tst:1176505"/>
                     <criteria operator="AND" comment="LDR">
                        <criterion comment="Mshtml.dll version is greater than or equal to 7.0.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:115259"/>
                        <criterion comment="Mshtml.dll version is less than 7.0.6001.22905" test_ref="oval:gov.nist.fdcc.patch:tst:1176507"/>
                     </criteria>
                  </criteria>
               </criteria>
               <!--<criteria operator="AND" comment="Vista, Server 2008 SP2 (32/64-bit, ia-64) - GDR/LDR">
                     <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                        <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                        <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                        <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
                     </criteria>
                     <criteria operator="OR" comment="GDR or LDR Service branch">
                        <criterion comment="Mshtml.dll version is less than 7.0.6002.18457" test_ref="oval:gov.nist.fdcc.patch:tst:1176508"/>
                        <criteria operator="AND" comment="LDR">
                           <criterion comment="Mshtml.dll version is greater than or equal to 7.0.6002.22000" test_ref="oval:gov.nist.fdcc.patch:tst:115658"/>
                           <criterion comment="Mshtml.dll version is less than 7.0.6002.22629" test_ref="oval:gov.nist.fdcc.patch:tst:1176510"/>
                        </criteria>
                     </criteria>
                  </criteria>
               </criteria>-->
            </criteria>
            <criteria operator="AND" comment="Internet Explorer 8">
               <extend_definition comment="Microsoft Internet Explorer 8 is installed" definition_ref="oval:org.mitre.oval:def:6210"/>
               <!--<criteria operator="OR">
                  <criteria operator="AND" comment="XP SP3 (x86), SP2 (x64) - GDR/QFE">
                     <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
                        <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
                     </criteria>
                     <criteria operator="OR" comment="GDR or QFE Service branch">
                        <criterion comment="Mshtml.dll version is less than 8.0.6001.19088" test_ref="oval:gov.nist.fdcc.patch:tst:1176511"/>
                        <criteria operator="AND" comment="QFE">
                           <criterion comment="Mshtml.dll version is greater than or equal to 8.0.6001.20000" test_ref="oval:gov.nist.fdcc.patch:tst:1171414"/>
                           <criterion comment="Mshtml.dll version is less than 8.0.6001.23181" test_ref="oval:gov.nist.fdcc.patch:tst:1176513"/>
                        </criteria>
                     </criteria>
                  </criteria>-->
               <criteria operator="AND" comment="Vista, Server 2008 (32/64-bit, ia-64) - GDR/LDR">
                  <criteria operator="OR">
                     <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                     <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                     <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                     <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                     <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
                     <!--<extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                        <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                        <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                        <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>-->
                  </criteria>
                  <criteria operator="OR" comment="GDR or LDR Service branch">
                     <criterion comment="Mshtml.dll version is less than 8.0.6001.19088" test_ref="oval:gov.nist.fdcc.patch:tst:1176511"/>
                     <criteria operator="AND" comment="LDR">
                        <criterion comment="Mshtml.dll version is greater than or equal to 8.0.6001.20000" test_ref="oval:gov.nist.fdcc.patch:tst:1171414"/>
                        <criterion comment="Mshtml.dll version is less than 8.0.6001.23181" test_ref="oval:gov.nist.fdcc.patch:tst:1176513"/>
                     </criteria>
                  </criteria>
               </criteria>
               <!--<criteria operator="AND" comment="7, Server 2008 R2 (32-bit) - GDR/LDR">
                     <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows 7 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:6165"/>
                        <extend_definition comment="Microsoft Windows 7 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:5950"/>
                        <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:6438"/>
                        <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed" definition_ref="oval:org.mitre.oval:def:5954"/>
                        <extend_definition comment="Microsoft Windows 7 (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:12292"/>
                        <extend_definition comment="Microsoft Windows 7 x64 Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:12627"/>
                        <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Service Pack 1 Edition is installed" definition_ref="oval:org.mitre.oval:def:12567"/>
                        <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:12583"/>
                     </criteria>
                     <criteria operator="OR" comment="GDR or LDR Service branch">
                        <criterion comment="Mshtml.dll version is less than 8.0.7600.16821" test_ref="oval:gov.nist.fdcc.patch:tst:1176517"/>
                        <criteria operator="AND" comment="LDR">
                           <criterion comment="Mshtml.dll version is greater than or equal to 8.0.7600.20000" test_ref="oval:gov.nist.fdcc.patch:tst:1171418"/>
                           <criterion comment="Mshtml.dll version is less than 8.0.7600.20975" test_ref="oval:gov.nist.fdcc.patch:tst:1176519"/>
                        </criteria>
                     </criteria>
                  </criteria>
               </criteria>-->
            </criteria>
            <criteria operator="AND" comment="Internet Explorer 9">
               <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:org.mitre.oval:def:11985"/>
               <!--<criteria operator="OR">-->
               <criteria operator="AND" comment="Vista, Server 2008, 7, 2008 r2 (32/64-bit, ia-64) - GDR/LDR">
                  <criteria operator="OR">
                     <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                     <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                     <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                     <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                     <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
                     <!--<extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                        <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                        <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                        <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
                        <extend_definition comment="Microsoft Windows 7 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:6165"/>
                        <extend_definition comment="Microsoft Windows 7 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:5950"/>
                        <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:6438"/>
                        <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed" definition_ref="oval:org.mitre.oval:def:5954"/>
                        <extend_definition comment="Microsoft Windows 7 (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:12292"/>
                        <extend_definition comment="Microsoft Windows 7 x64 Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:12627"/>
                        <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Service Pack 1 Edition is installed" definition_ref="oval:org.mitre.oval:def:12567"/>
                        <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:12583"/>-->
                  </criteria>
                  <criteria operator="OR" comment="GDR or LDR Service branch">
                     <criterion comment="Mshtml.dll version is less than 9.0.8112.16430" test_ref="oval:gov.nist.fdcc.patch:tst:1176520"/>
                     <criteria operator="AND" comment="LDR">
                        <criterion comment="Mshtml.dll version is greater than or equal to 9.0.8112.20000" test_ref="oval:gov.nist.fdcc.patch:tst:1176521"/>
                        <criterion comment="Mshtml.dll version is less than 9.0.8112.20530" test_ref="oval:gov.nist.fdcc.patch:tst:1176522"/>
                     </criteria>
                  </criteria>
               </criteria>
               <!--</criteria>-->
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11767" version="1" class="patch">
         <metadata>
            <title>MS11-052: Vulnerability in Vector Markup Language Could Allow Remote Code Execution (2544521)</title>
            <affected family="windows">
               <platform>Microsoft Windows XP</platform>
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows Server 2008</platform>
               <platform>Microsoft Windows 7</platform>
               <platform>Microsoft Windows Server 2008 R2</platform>
            </affected>
            <reference source="Microsoft" ref_id="MS11-052" ref_url="http://www.microsoft.com/technet/security/bulletin/MS11-052.mspx"/>
            <reference source="Microsoft" ref_id="KB2544521" ref_url="http://support.microsoft.com/kb/2544521"/>
            <reference source="CVE" ref_id="CVE-2011-1266" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1266"/>
            <description>Microsoft has released MS11-052 to address security issues in Windows XP, Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2 as documented by CVE-2011-1266.</description>
         </metadata>
         <criteria operator="OR">
            <criteria operator="AND" comment="Internet Explorer 6">
               <extend_definition comment="Microsoft Internet Explorer 6 is installed" definition_ref="oval:org.mitre.oval:def:563"/>
               <criteria operator="OR">
                  <criteria operator="AND" comment="XP x64 SP2">
                     <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
                     <criterion comment="Vgx.dll version is less than 6.0.3790.4861" test_ref="oval:gov.nist.fdcc.patch:tst:1176700"/>
                  </criteria>
                  <criteria operator="AND" comment="XP x86 SP3">
                     <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
                     <criterion comment="Vgx.dll version is less than 6.0.2900.6108" test_ref="oval:gov.nist.fdcc.patch:tst:1176701"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="Internet Explorer 7">
               <extend_definition comment="Microsoft Internet Explorer 7 is installed" definition_ref="oval:org.mitre.oval:def:627"/>
               <criteria operator="OR">
                  <criteria operator="AND" comment="XP SP3 (x86), SP2 (x64) - GDR/QFE">
                     <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
                        <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
                     </criteria>
                     <criterion comment="Vgx.dll version is less than 7.0.6000.21301" test_ref="oval:gov.nist.fdcc.patch:tst:1176702"/>
                  </criteria>
                  <criteria operator="AND" comment="Vista, Server 2008 SP1 (32/64-bit, ia-64) - GDR/LDR">
                     <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                        <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
                     </criteria>
                     <criteria operator="OR" comment="GDR or LDR Service branch">
                        <criterion comment="Vgx.dll version is less than 7.0.6001.18645" test_ref="oval:gov.nist.fdcc.patch:tst:1176703"/>
                        <criteria operator="AND" comment="LDR">
                           <criterion comment="Vgx.dll version is greater than or equal to 7.0.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1176704"/>
                           <criterion comment="Vgx.dll version is less than 7.0.6001.22911" test_ref="oval:gov.nist.fdcc.patch:tst:1176705"/>
                        </criteria>
                     </criteria>
                  </criteria>
                  <criteria operator="AND" comment="Vista, Server 2008 SP2 (32/64-bit, ia-64) - GDR/LDR">
                     <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                        <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                        <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                        <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
                     </criteria>
                     <criteria operator="OR" comment="GDR or LDR Service branch">
                        <criterion comment="Vgx.dll version is less than 7.0.6002.18463" test_ref="oval:gov.nist.fdcc.patch:tst:1176706"/>
                        <criteria operator="AND" comment="LDR">
                           <criterion comment="Vgx.dll version is greater than or equal to 7.0.6002.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1176707"/>
                           <criterion comment="Vgx.dll version is less than 7.0.6002.22634" test_ref="oval:gov.nist.fdcc.patch:tst:1176708"/>
                        </criteria>
                     </criteria>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="Internet Explorer 8">
               <extend_definition comment="Microsoft Internet Explorer 8 is installed" definition_ref="oval:org.mitre.oval:def:6210"/>
               <criteria operator="OR">
                  <criteria operator="AND" comment="XP SP3 (x86), SP2 (x64) - GDR/QFE">
                     <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
                        <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
                     </criteria>
                     <criterion comment="Vgx.dll version is less than 8.0.6001.23167" test_ref="oval:gov.nist.fdcc.patch:tst:1176709"/>
                  </criteria>
                  <criteria operator="AND" comment="Vista, Server 2008 (32/64-bit, ia-64) - GDR/LDR">
                     <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                        <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
                        <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                        <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                        <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                        <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
                     </criteria>
                     <criteria operator="OR" comment="GDR or LDR Service branch">
                        <criterion comment="Vgx.dll version is less than 8.0.6001.19076" test_ref="oval:gov.nist.fdcc.patch:tst:1176710"/>
                        <criteria operator="AND" comment="LDR">
                           <criterion comment="Vgx.dll version is greater than or equal to 8.0.6001.20000" test_ref="oval:gov.nist.fdcc.patch:tst:1176711"/>
                           <criterion comment="Vgx.dll version is less than 8.0.6001.23169" test_ref="oval:gov.nist.fdcc.patch:tst:1176712"/>
                        </criteria>
                     </criteria>
                  </criteria>
                  <criteria operator="AND" comment="7, Server 2008 R2 (32-bit) - GDR/LDR">
                     <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows 7 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:6165"/>
                        <extend_definition comment="Microsoft Windows 7 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:5950"/>
                        <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:6438"/>
                        <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed" definition_ref="oval:org.mitre.oval:def:5954"/>
                     </criteria>
                     <criteria operator="OR" comment="GDR or LDR Service branch">
                        <criterion comment="Vgx.dll version is less than 8.0.7600.16806" test_ref="oval:gov.nist.fdcc.patch:tst:1176713"/>
                        <criteria operator="AND" comment="LDR">
                           <criterion comment="Vgx.dll version is greater than or equal to 8.0.7600.20000" test_ref="oval:gov.nist.fdcc.patch:tst:1176714"/>
                           <criterion comment="Vgx.dll version is less than 8.0.7600.20975" test_ref="oval:gov.nist.fdcc.patch:tst:1176715"/>
                        </criteria>
                     </criteria>
                  </criteria>
                  <criteria operator="AND" comment="7, Server 2008 R2 SP1 (32-bit) - GDR/LDR">
                     <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows 7 (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:12292"/>
                        <extend_definition comment="Microsoft Windows 7 x64 Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:12627"/>
                        <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Service Pack 1 Edition is installed" definition_ref="oval:org.mitre.oval:def:12567"/>
                        <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:12583"/>
                     </criteria>
                     <criteria operator="OR" comment="GDR or LDR Service branch">
                        <criterion comment="Vgx.dll version is less than 8.0.7600.17608" test_ref="oval:gov.nist.fdcc.patch:tst:1176716"/>
                        <criteria operator="AND" comment="LDR">
                           <criterion comment="Vgx.dll version is greater than or equal to 8.0.7600.21000" test_ref="oval:gov.nist.fdcc.patch:tst:1176717"/>
                           <criterion comment="Vgx.dll version is less than 8.0.7600.21718" test_ref="oval:gov.nist.fdcc.patch:tst:1176718"/>
                        </criteria>
                     </criteria>
                  </criteria>
               </criteria>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11768" version="2" class="patch">
         <metadata>
            <title>MS11-053: Vulnerability in Bluetooth Stack Could Allow Remote Code Execution (2566220)</title>
            <affected family="windows">
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows 7</platform>
            </affected>
            <reference source="Microsoft" ref_id="MS11-053" ref_url="http://www.microsoft.com/technet/security/bulletin/MS11-053.mspx"/>
            <reference source="Microsoft" ref_id="KB2566220" ref_url="http://support.microsoft.com/kb/2566220"/>
            <reference source="CVE" ref_id="CVE-2011-1265" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1265"/>
            <description>Microsoft has released MS11-053 to address security issues in Windows Vista and Windows 7 as documented by CVE-2011-1265</description>
         </metadata>
         <criteria operator="OR">
            <criteria operator="AND" comment="Vista SP1 (32-bit, 64-bit) - GDR/LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
               </criteria>
               <criterion comment="Bthport.sys version is less than 6.0.6001.22204" test_ref="oval:gov.nist.fdcc.patch:tst:1176800"/>
               <!--<criterion comment="FileRepository Bthport.sys version is less than 6.0.6001.22204" test_ref="oval:gov.nist.fdcc.patch:tst:1176810"/>-->
            </criteria>
            <criteria operator="AND" comment="Vista SP2 (32-bit, 64-bit) - GDR/LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
               </criteria>
               <criteria operator="OR" comment="GDR/LDR">
                  <!--<criteria operator="AND">-->
                  <criterion comment="Bthport.sys version is less than 6.0.6002.18457" test_ref="oval:gov.nist.fdcc.patch:tst:1176801"/>
                  <!--<criterion comment="FileRepository Bthport.sys version is less than 6.0.6002.18457" test_ref="oval:gov.nist.fdcc.patch:tst:1176811"/>
                        </criteria>-->
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Bthport.sys version is greater than or equal to 6.0.6002.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1176802"/>
                     <criterion comment="Bthport.sys version is less than 6.0.6002.22629" test_ref="oval:gov.nist.fdcc.patch:tst:1176803"/>
                     <!--<criterion comment="FileRepository Bthport.sys version is greater than or equal to 6.0.6002.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1176812"/>
                            <criterion comment="FileRepository Bthport.sys version is less than 6.0.6002.22629" test_ref="oval:gov.nist.fdcc.patch:tst:1176813"/>-->
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="7 (32-bit, 64-bit) - GDR/LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows 7 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:6165"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:5950"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <!--<criteria operator="AND">-->
                  <criterion comment="Bthport.sys version is less than 6.1.7600.16805" test_ref="oval:gov.nist.fdcc.patch:tst:1176804"/>
                  <!--<criterion comment="FileRepository Bthport.sys version is less than 6.1.7600.16805" test_ref="oval:gov.nist.fdcc.patch:tst:1176814"/>
                        </criteria>-->
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Bthport.sys version is greater than or equal to 6.1.7600.20000" test_ref="oval:gov.nist.fdcc.patch:tst:1176805"/>
                     <criterion comment="Bthport.sys version is less than 6.1.7600.20955" test_ref="oval:gov.nist.fdcc.patch:tst:1176806"/>
                     <!--<criterion comment="FileRepository Bthport.sys version is greater than or equal to 6.1.7600.20000" test_ref="oval:gov.nist.fdcc.patch:tst:1176815"/>
                            <criterion comment="FileRepository Bthport.sys version is less than 6.1.7600.20955" test_ref="oval:gov.nist.fdcc.patch:tst:1176816"/>-->
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="7 (32-bit, 64-bit) SP1 - GDR/LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows 7 (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:12292"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:12627"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <!--<criteria operator="AND">-->
                  <criterion comment="Bthport.sys version is less than 6.1.7601.17607" test_ref="oval:gov.nist.fdcc.patch:tst:1176807"/>
                  <!--<criterion comment="FileRepository Bthport.sys version is less than 6.1.7601.17607" test_ref="oval:gov.nist.fdcc.patch:tst:1176817"/>
                        </criteria>-->
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Bthport.sys version is greater than or equal to 6.1.7601.21000" test_ref="oval:gov.nist.fdcc.patch:tst:1176808"/>
                     <criterion comment="Bthport.sys version is less than 6.1.7601.21716" test_ref="oval:gov.nist.fdcc.patch:tst:1176809"/>
                     <!--<criterion comment="FileRepository Bthport.sys version is greater than or equal to 6.1.7601.21000" test_ref="oval:gov.nist.fdcc.patch:tst:1176818"/>
                            <criterion comment="FileRepository Bthport.sys version is less than 6.1.7601.21716" test_ref="oval:gov.nist.fdcc.patch:tst:1176819"/>-->
                  </criteria>
               </criteria>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11769" version="1" class="patch">
         <metadata>
            <title>MS11-054: Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Elevation of Privilege (2555917)</title>
            <affected family="windows">
               <platform>Microsoft Windows XP</platform>
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows Server 2008</platform>
               <platform>Microsoft Windows 7</platform>
               <platform>Microsoft Windows Server 2008 R2</platform>
            </affected>
            <reference source="Microsoft" ref_id="MS11-054" ref_url="http://www.microsoft.com/technet/security/bulletin/MS11-054.mspx"/>
            <reference source="Microsoft" ref_id="KB2555917" ref_url="http://support.microsoft.com/kb/2555917"/>
            <reference source="CVE" ref_id="CVE-2011-1874" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1874"/>
            <reference source="CVE" ref_id="CVE-2011-1874" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1874"/>
            <reference source="CVE" ref_id="CVE-2011-1874" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1875"/>
            <reference source="CVE" ref_id="CVE-2011-1874" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1876"/>
            <reference source="CVE" ref_id="CVE-2011-1874" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1877"/>
            <reference source="CVE" ref_id="CVE-2011-1874" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1878"/>
            <reference source="CVE" ref_id="CVE-2011-1874" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1879"/>
            <reference source="CVE" ref_id="CVE-2011-1874" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1880"/>
            <reference source="CVE" ref_id="CVE-2011-1874" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1881"/>
            <reference source="CVE" ref_id="CVE-2011-1874" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1882"/>
            <reference source="CVE" ref_id="CVE-2011-1874" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1883"/>
            <reference source="CVE" ref_id="CVE-2011-1874" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1884"/>
            <reference source="CVE" ref_id="CVE-2011-1874" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1885"/>
            <reference source="CVE" ref_id="CVE-2011-1874" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1886"/>
            <reference source="CVE" ref_id="CVE-2011-1874" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1887"/>
            <reference source="CVE" ref_id="CVE-2011-1874" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1888"/>
            <description>Microsoft has released MS11-054 to address security issues in Windows XP, Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2 as documented by CVE-2011-1874, CVE-2011-1875, CVE-2011-1876, CVE-2011-1877, CVE-2011-1878, CVE-2011-1879, CVE-2011-1880, CVE-2011-1881, CVE-2011-1882, CVE-2011-1883, CVE-2011-1884, CVE-2011-1885, CVE-2011-1886, CVE-2011-1887, and CVE-2011-1888.</description>
         </metadata>
         <criteria operator="OR">
            <criteria operator="AND" comment="XP (32-bit) SP3">
               <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
               <criterion comment="Win32k.sys version is less than 5.1.2600.6119" test_ref="oval:gov.nist.fdcc.patch:tst:1176900"/>
            </criteria>
            <criteria operator="AND" comment="XP (64-bit) SP2">
               <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
               <criterion comment="Win32k.sys version is less than 5.2.3790.4872" test_ref="oval:gov.nist.fdcc.patch:tst:1176901"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit,64-bit, ia-64) - GDR/LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criterion comment="Win32k.sys version is less than 6.0.6001.18653" test_ref="oval:gov.nist.fdcc.patch:tst:1176902"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Win32k.sys version is greater than or equal to 6.0.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:115477"/>
                     <criterion comment="Win32k.sys version is less than 6.0.6001.22927" test_ref="oval:gov.nist.fdcc.patch:tst:1176904"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - GDR/LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criterion comment="Win32k.sys version is less than 6.0.6002.18475" test_ref="oval:gov.nist.fdcc.patch:tst:1176905"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Win32k.sys version is greater than or equal to 6.0.6002.22000" test_ref="oval:gov.nist.fdcc.patch:tst:116219"/>
                     <criterion comment="Win32k.sys version is less than 6.0.6002.22653" test_ref="oval:gov.nist.fdcc.patch:tst:1176907"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="7, Server 2008 R2 (32-bit, 64-bit, ia-64) - GDR/LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows 7 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:6165"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:5950"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:6438"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed" definition_ref="oval:org.mitre.oval:def:5954"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criterion comment="Win32k.sys version is less than 6.1.7600.16830" test_ref="oval:gov.nist.fdcc.patch:tst:1176908"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Win32k.sys version is greater than or equal to 6.1.7600.20000" test_ref="oval:gov.nist.fdcc.patch:tst:1167094"/>
                     <criterion comment="Win32k.sys version is less than 6.1.7600.20983" test_ref="oval:gov.nist.fdcc.patch:tst:1176910"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="7, Server 2008 R2 SP1 (32-bit, 64-bit, ia-64) - GDR/LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows 7 (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:12292"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:12627"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Service Pack 1 Edition is installed" definition_ref="oval:org.mitre.oval:def:12567"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:12583"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criterion comment="Win32k.sys version is less than 6.1.7601.17630" test_ref="oval:gov.nist.fdcc.patch:tst:1176911"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Win32k.sys version is greater than or equal to 6.1.7601.21000" test_ref="oval:gov.nist.fdcc.patch:tst:1173612"/>
                     <criterion comment="Win32k.sys version is less than 6.1.7601.21744" test_ref="oval:gov.nist.fdcc.patch:tst:1176913"/>
                  </criteria>
               </criteria>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11770" version="2" class="patch">
         <metadata>
            <title>MS11-056: Vulnerabilities in Windows Client/Server Run-time Subsystem Could Allow Elevation of Privilege (2507938)</title>
            <affected family="windows">
               <platform>Microsoft Windows XP</platform>
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows Server 2008</platform>
               <!--<platform>Microsoft Windows 7</platform>
               <platform>Microsoft Windows Server 2008 R2</platform>-->
            </affected>
            <reference source="Microsoft" ref_id="MS11-056" ref_url="http://www.microsoft.com/technet/security/bulletin/MS11-056.mspx"/>
            <reference source="Microsoft" ref_id="KB2507938" ref_url="http://support.microsoft.com/kb/2507938"/>
            <reference source="CVE" ref_id="CVE-2011-1281" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1281"/>
            <reference source="CVE" ref_id="CVE-2011-1281" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1282"/>
            <reference source="CVE" ref_id="CVE-2011-1281" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1283"/>
            <reference source="CVE" ref_id="CVE-2011-1281" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1284"/>
            <reference source="CVE" ref_id="CVE-2011-1281" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1870"/>
            <description>Microsoft has released MS11-056 to address security issues in Windows XP, Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2 as documented by CVE-2011-1281, CVE-2011-1282, CVE-2011-1283, CVE-2011-1284, and CVE-2011-1870.</description>
         </metadata>
         <criteria operator="OR">
            <criteria operator="AND" comment="Vulnerable Windows XP (x86) SP3">
               <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
               <criterion comment="Winsrv.dll version is less than 5.1.2600.6104" test_ref="oval:gov.nist.fdcc.patch:tst:1177000"/>
               <criterion comment="Csrsrv.dll version is less than 5.1.2600.6104" test_ref="oval:gov.nist.fdcc.patch:tst:1177001"/>
            </criteria>
            <criteria operator="AND" comment="Vulnerable Windows XP (x64) SP2">
               <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
               <criterion comment="Winsrv.dll version is less than 5.2.3790.4860" test_ref="oval:gov.nist.fdcc.patch:tst:1177002"/>
               <criterion comment="Csrsrv.dll version is less than 5.2.3790.4860" test_ref="oval:gov.nist.fdcc.patch:tst:1177003"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit, 64-bit) - GDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criteria operator="AND" comment="GDR">
                     <criterion comment="Csrsrv.dll version is less than 6.0.6001.18638" test_ref="oval:gov.nist.fdcc.patch:tst:1177004"/>
                     <criterion comment="Winsrv.dll version is less than 6.0.6001.18638" test_ref="oval:gov.nist.fdcc.patch:tst:1177005"/>
                  </criteria>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Csrsrv.dll version is greater than or equal to 6.0.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1177006"/>
                     <criterion comment="Csrsrv.dll version is less than 6.0.6001.22904" test_ref="oval:gov.nist.fdcc.patch:tst:1177007"/>
                     <criterion comment="Winsrv.dll version is greater than or equal to 6.0.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1177008"/>
                     <criterion comment="Winsrv.dll version is less than 6.0.6001.22904" test_ref="oval:gov.nist.fdcc.patch:tst:1177009"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit) - GDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criteria operator="AND" comment="GDR">
                     <criterion comment="Csrsrv.dll version is less than 6.0.6002.18456" test_ref="oval:gov.nist.fdcc.patch:tst:1177010"/>
                     <criterion comment="Winsrv.dll version is less than 6.0.6002.18456" test_ref="oval:gov.nist.fdcc.patch:tst:1177011"/>
                  </criteria>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Csrsrv.dll version is greater than or equal to 6.0.6002.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1177012"/>
                     <criterion comment="Csrsrv.dll version is less than 6.0.6002.22628" test_ref="oval:gov.nist.fdcc.patch:tst:1177013"/>
                     <criterion comment="Winsrv.dll version is greater than or equal to 6.0.6002.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1177014"/>
                     <criterion comment="Winsrv.dll version is less than 6.0.6002.22628" test_ref="oval:gov.nist.fdcc.patch:tst:1177015"/>
                  </criteria>
               </criteria>
            </criteria>
            <!--<criteria operator="AND" comment="7, Server 2008 R2 (32-bit, 64-bit) - GDR/LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows 7 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:6165"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:5950"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:6438"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criteria operator="AND" comment="GDR">
                     <criterion comment="Kernel32.dll version is less than 6.1.7600.16816" test_ref="oval:gov.nist.fdcc.patch:tst:1177016"/>
                  </criteria>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Kernel32.dll version is greater than or equal to 6.1.7600.20000" test_ref="oval:gov.nist.fdcc.patch:tst:1177017"/>
                     <criterion comment="Kernel32.dll version is less than 6.1.7600.20978" test_ref="oval:gov.nist.fdcc.patch:tst:1177018"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="7, Server 2008 R2 SP1 (32-bit, 64-bit)">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows 7 (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:12292"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:12627"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Service Pack 1 Edition is installed" definition_ref="oval:org.mitre.oval:def:12567"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criteria operator="AND" comment="GDR">
                     <criterion comment="Kernel32.dll version is less than 6.1.7601.17617" test_ref="oval:gov.nist.fdcc.patch:tst:1177019"/>
                  </criteria>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Kernel32.dll version is greater than or equal to 6.1.7601.21000" test_ref="oval:gov.nist.fdcc.patch:tst:1177020"/>
                     <criterion comment="Kernel32.dll version is less than 6.1.7601.21728" test_ref="oval:gov.nist.fdcc.patch:tst:1177021"/>
                  </criteria>
               </criteria>
            </criteria>-->
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11771" version="1" class="patch">
         <metadata>
            <title>MS11-057: Cumulative Security Update for Internet Explorer (2559049)</title>
            <affected family="windows">
               <platform>Microsoft Windows XP</platform>
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows Server 2008</platform>
               <platform>Microsoft Windows 7</platform>
               <platform>Microsoft Windows Server 2008 R2</platform>
               <platform>Microsoft Internet Explorer 6</platform>
               <platform>Microsoft Internet Explorer 7</platform>
               <platform>Microsoft Internet Explorer 8</platform>
               <platform>Microsoft Internet Explorer 9</platform>
            </affected>
            <reference source="Microsoft" ref_id="MS11-057" ref_url="http://www.microsoft.com/technet/security/bulletin/MS11-057.mspx"/>
            <reference source="Microsoft" ref_id="KB2559049" ref_url="http://support.microsoft.com/kb/2559049"/>
            <reference source="CVE" ref_id="CVE-2011-1257" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1257"/>
            <reference source="CVE" ref_id="CVE-2011-1960" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1960"/>
            <reference source="CVE" ref_id="CVE-2011-1961" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1961"/>
            <reference source="CVE" ref_id="CVE-2011-1962" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1962"/>
            <reference source="CVE" ref_id="CVE-2011-1963" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1963"/>
            <reference source="CVE" ref_id="CVE-2011-1964" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1964"/>
            <reference source="CVE" ref_id="CVE-2011-2383" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2383"/>
            <description>Microsoft has released MS11-057 to address security issues in Microsoft Internet Explorer 6, 7, 8, and 9 on Windows XP, Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2 as documented by CVE-2011-1257, CVE-2011-1960, CVE-2011-1961, CVE-2011-1962, CVE-2011-1963, CVE-2011-1964, and CVE-2011-2383.</description>
         </metadata>
         <criteria operator="OR">
            <criteria operator="AND" comment="Internet Explorer 6">
               <extend_definition comment="Microsoft Internet Explorer 6 is installed" definition_ref="oval:org.mitre.oval:def:563"/>
               <criteria operator="OR">
                  <criteria operator="AND" comment="XP x64 SP2">
                     <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
                     <criterion comment="Mshtml.dll version is less than 6.0.3790.4879" test_ref="oval:gov.nist.fdcc.patch:tst:1177100"/>
                  </criteria>
                  <criteria operator="AND" comment="XP x86 SP3">
                     <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
                     <criterion comment="Mshtml.dll version is less than 6.0.2900.6129" test_ref="oval:gov.nist.fdcc.patch:tst:1177101"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="Internet Explorer 7">
               <extend_definition comment="Microsoft Internet Explorer 7 is installed" definition_ref="oval:org.mitre.oval:def:627"/>
               <criteria operator="OR">
                  <criteria operator="AND" comment="XP SP3 (x86), SP2 (x64) - GDR/QFE">
                     <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
                        <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
                     </criteria>
                     <criteria operator="OR" comment="GDR or QFE Service branch">
                        <criterion comment="Mshtml.dll version is less than 7.0.6000.17102" test_ref="oval:gov.nist.fdcc.patch:tst:1177102"/>
                        <criteria operator="AND" comment="QFE">
                           <criterion comment="Mshtml.dll version is greater than or equal to 7.0.6000.20000" test_ref="oval:gov.nist.fdcc.patch:tst:115304"/>
                           <criterion comment="Mshtml.dll version is less than 7.0.6000.21305" test_ref="oval:gov.nist.fdcc.patch:tst:1177104"/>
                        </criteria>
                     </criteria>
                  </criteria>
                  <criteria operator="AND" comment="Vista, Server 2008 SP2 (32/64-bit, ia-64) - GDR/LDR">
                     <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                        <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                        <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                        <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
                     </criteria>
                     <criteria operator="OR" comment="GDR or LDR Service branch">
                        <criterion comment="Mshtml.dll version is less than 7.0.6002.18494" test_ref="oval:gov.nist.fdcc.patch:tst:1177105"/>
                        <criteria operator="AND" comment="LDR">
                           <criterion comment="Mshtml.dll version is greater than or equal to 7.0.6002.22000" test_ref="oval:gov.nist.fdcc.patch:tst:115658"/>
                           <criterion comment="Mshtml.dll version is less than 7.0.6002.22683" test_ref="oval:gov.nist.fdcc.patch:tst:1177107"/>
                        </criteria>
                     </criteria>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="Internet Explorer 8">
               <extend_definition comment="Microsoft Internet Explorer 8 is installed" definition_ref="oval:org.mitre.oval:def:6210"/>
               <criteria operator="OR">
                  <criteria operator="AND" comment="XP SP3 (x86), SP2 (x64) - GDR/QFE">
                     <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
                        <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
                     </criteria>
                     <criteria operator="OR" comment="GDR or QFE Service branch">
                        <criterion comment="Mshtml.dll version is less than 8.0.6001.19120" test_ref="oval:gov.nist.fdcc.patch:tst:1177108"/>
                        <criteria operator="AND" comment="QFE">
                           <criterion comment="Mshtml.dll version is greater than or equal to 8.0.6001.20000" test_ref="oval:gov.nist.fdcc.patch:tst:1171414"/>
                           <criterion comment="Mshtml.dll version is less than 8.0.6001.23216" test_ref="oval:gov.nist.fdcc.patch:tst:1177110"/>
                        </criteria>
                     </criteria>
                  </criteria>
                  <criteria operator="AND" comment="Vista, Server 2008 (32/64-bit, ia-64) - GDR/LDR">
                     <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                        <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                        <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                        <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
                     </criteria>
                     <criteria operator="OR" comment="GDR or LDR Service branch">
                        <criterion comment="Mshtml.dll version is less than 8.0.6001.19120" test_ref="oval:gov.nist.fdcc.patch:tst:1177108"/>
                        <criteria operator="AND" comment="LDR">
                           <criterion comment="Mshtml.dll version is greater than or equal to 8.0.6001.20000" test_ref="oval:gov.nist.fdcc.patch:tst:1171414"/>
                           <criterion comment="Mshtml.dll version is less than 8.0.6001.23216" test_ref="oval:gov.nist.fdcc.patch:tst:1177110"/>
                        </criteria>
                     </criteria>
                  </criteria>
                  <criteria operator="AND" comment="7, Server 2008 R2 (32-bit, 64-bit, ia64) - GDR/LDR">
                     <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows 7 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:6165"/>
                        <extend_definition comment="Microsoft Windows 7 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:5950"/>
                        <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:6438"/>
                        <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed" definition_ref="oval:org.mitre.oval:def:5954"/>
                     </criteria>
                     <criteria operator="OR" comment="GDR or LDR Service branch">
                        <criterion comment="Mshtml.dll version is less than 8.0.7600.16853" test_ref="oval:gov.nist.fdcc.patch:tst:1177114"/>
                        <criteria operator="AND" comment="LDR">
                           <criterion comment="Mshtml.dll version is greater than or equal to 8.0.7600.20000" test_ref="oval:gov.nist.fdcc.patch:tst:1171418"/>
                           <criterion comment="Mshtml.dll version is less than 8.0.7600.21013" test_ref="oval:gov.nist.fdcc.patch:tst:1177116"/>
                        </criteria>
                     </criteria>
                  </criteria>
                  <criteria operator="AND" comment="7, Server 2008 R2 SP1 (32-bit, 64-bit, ia64) - GDR/LDR">
                     <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows 7 (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:12292"/>
                        <extend_definition comment="Microsoft Windows 7 x64 Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:12627"/>
                        <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Service Pack 1 Edition is installed" definition_ref="oval:org.mitre.oval:def:12567"/>
                        <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:12583"/>
                     </criteria>
                     <criteria operator="OR" comment="GDR or LDR Service branch">
                        <criterion comment="Mshtml.dll version is less than 8.0.7601.17655" test_ref="oval:gov.nist.fdcc.patch:tst:1177117"/>
                        <criteria operator="AND" comment="LDR">
                           <criterion comment="Mshtml.dll version is greater than or equal to 8.0.7601.21000" test_ref="oval:gov.nist.fdcc.patch:tst:1172918"/>
                           <criterion comment="Mshtml.dll version is less than 8.0.7601.21776" test_ref="oval:gov.nist.fdcc.patch:tst:1177119"/>
                        </criteria>
                     </criteria>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="Internet Explorer 9">
               <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:org.mitre.oval:def:11985"/>
               <criteria operator="OR">
                  <criteria operator="AND" comment="Vista, Server 2008, 7, 2008 r2 (32/64-bit, ia-64) - GDR/LDR">
                     <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                        <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                        <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                        <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
                        <extend_definition comment="Microsoft Windows 7 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:6165"/>
                        <extend_definition comment="Microsoft Windows 7 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:5950"/>
                        <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:6438"/>
                        <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed" definition_ref="oval:org.mitre.oval:def:5954"/>
                        <extend_definition comment="Microsoft Windows 7 (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:12292"/>
                        <extend_definition comment="Microsoft Windows 7 x64 Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:12627"/>
                        <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Service Pack 1 Edition is installed" definition_ref="oval:org.mitre.oval:def:12567"/>
                        <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:12583"/>
                     </criteria>
                     <criteria operator="OR" comment="GDR or LDR Service branch">
                        <criterion comment="Mshtml.dll version is less than 9.0.8112.16434" test_ref="oval:gov.nist.fdcc.patch:tst:1177120"/>
                        <criteria operator="AND" comment="LDR">
                           <criterion comment="Mshtml.dll version is greater than or equal to 9.0.8112.20000" test_ref="oval:gov.nist.fdcc.patch:tst:1176521"/>
                           <criterion comment="Mshtml.dll version is less than 9.0.8112.20534" test_ref="oval:gov.nist.fdcc.patch:tst:1177122"/>
                        </criteria>
                     </criteria>
                  </criteria>
               </criteria>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11776" version="2" class="patch">
         <metadata>
            <title>MS11-063: Vulnerability in Windows Client/Server Run-time Subsystem Could Allow Elevation of Privilege (2567680)</title>
            <affected family="windows">
               <platform>Microsoft Windows XP</platform>
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows Server 2008</platform>
               <platform>Microsoft Windows 7</platform>
               <platform>Microsoft Windows Server 2008 R2</platform>
            </affected>
            <reference source="Microsoft" ref_id="MS11-063" ref_url="http://www.microsoft.com/technet/security/bulletin/MS11-063.mspx"/>
            <reference source="Microsoft" ref_id="KB2567680" ref_url="http://support.microsoft.com/kb/2567680"/>
            <reference source="CVE" ref_id="CVE-2011-1967" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1967"/>
            <description>Microsoft has released MS11-063 to address security issues in Windows XP, Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2 as documented by CVE-2011-1967.</description>
         </metadata>
         <criteria operator="OR">
            <criteria operator="AND" comment="Vulnerable Windows XP (x86) SP3">
               <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
               <criterion comment="Winsrv.dll version is less than 5.1.2600.6125" test_ref="oval:gov.nist.fdcc.patch:tst:1177600"/>
            </criteria>
            <criteria operator="AND" comment="Vulnerable Windows XP (x64) SP2">
               <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
               <criterion comment="Winsrv.dll version is less than 5.2.3790.4877" test_ref="oval:gov.nist.fdcc.patch:tst:1177601"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit) - GDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criterion comment="Winsrv.dll version is less than 6.0.6002.18484" test_ref="oval:gov.nist.fdcc.patch:tst:1177602"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Winsrv.dll version is greater than or equal to 6.0.6002.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1177014"/>
                     <criterion comment="Winsrv.dll version is less than 6.0.6002.22662" test_ref="oval:gov.nist.fdcc.patch:tst:1177604"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="7, Server 2008 R2 (32-bit, 64-bit) - GDR/LDR">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows 7 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:6165"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:5950"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:6438"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criterion comment="Winsrv.dll version is less than 6.1.7600.16850" test_ref="oval:gov.nist.fdcc.patch:tst:1177605"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Winsrv.dll version is greater than or equal to 6.1.7600.20000" test_ref="oval:gov.nist.fdcc.patch:tst:1177606"/>
                     <criterion comment="Winsrv.dll version is less than 6.1.7600.20995" test_ref="oval:gov.nist.fdcc.patch:tst:1177607"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="7, Server 2008 R2 SP1 (32-bit, 64-bit)">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows 7 (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:12292"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:12627"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Service Pack 1 Edition is installed" definition_ref="oval:org.mitre.oval:def:12567"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criterion comment="Winsrv.dll version is less than 6.1.7601.17641" test_ref="oval:gov.nist.fdcc.patch:tst:1177608"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Winsrv.dll version is greater than or equal to 6.1.7601.21000" test_ref="oval:gov.nist.fdcc.patch:tst:1177609"/>
                     <criterion comment="Winsrv.dll version is less than 6.1.7601.21756" test_ref="oval:gov.nist.fdcc.patch:tst:1177610"/>
                  </criteria>
               </criteria>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11777" version="2" class="patch">
         <metadata>
            <title>MS11-064: Vulnerabilities in TCP/IP Stack Could Allow Denial of Service (2563894)</title>
            <affected family="windows">
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows Server 2008</platform>
               <platform>Microsoft Windows 7</platform>
               <platform>Microsoft Windows Server 2008 R2</platform>
            </affected>
            <reference source="Microsoft" ref_id="MS11-064" ref_url="http://www.microsoft.com/technet/security/bulletin/MS11-064.mspx"/>
            <reference source="Microsoft" ref_id="KB2563894" ref_url="http://support.microsoft.com/kb/2563894"/>
            <reference source="CVE" ref_id="CVE-2011-1871" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1871"/>
            <reference source="CVE" ref_id="CVE-2011-1965" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1965"/>
            <description>Microsoft has released MS11-064 to address security issues in Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2 as documented by CVE-2011-1871 and CVE-2011-1965.</description>
         </metadata>
         <criteria operator="OR">
            <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia64)">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criterion comment="Tcpip.sys version is less than 6.0.6002.18484" test_ref="oval:gov.nist.fdcc.patch:tst:117770"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Tcpip.sys version is greater than or equal to 6.0.6002.22000" test_ref="oval:org.mitre.oval:tst:10619"/>
                     <criterion comment="Tcpip.sys version is less than 6.0.6002.22662" test_ref="oval:gov.nist.fdcc.patch:tst:117772"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="7, Server 2008 R2 (32-bit, 64-bit, ia64)">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows 7 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:6165"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:5950"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:6438"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed" definition_ref="oval:org.mitre.oval:def:5954"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criterion comment="Tcpip.sys version is less than 6.1.7600.16839" test_ref="oval:gov.nist.fdcc.patch:tst:117773"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Tcpip.sys version is greater than or equal to 6.1.7600.20000" test_ref="oval:gov.nist.fdcc.patch:tst:1168906"/>
                     <criterion comment="Tcpip.sys version is less than 6.1.7600.20992" test_ref="oval:gov.nist.fdcc.patch:tst:117775"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="7, Server 2008 R2 SP1 (32-bit, 64-bit, ia64)">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows 7 (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:12292"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:12627"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Service Pack 1 Edition is installed" definition_ref="oval:org.mitre.oval:def:12567"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed" definition_ref="oval:org.mitre.oval:def:5954"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criterion comment="Tcpip.sys version is less than 6.1.7601.17638" test_ref="oval:gov.nist.fdcc.patch:tst:117776"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Tcpip.sys version is greater than or equal to 6.1.7601.21000" test_ref="oval:gov.nist.fdcc.patch:tst:117777"/>
                     <criterion comment="Tcpip.sys version is less than 6.1.7601.21754" test_ref="oval:gov.nist.fdcc.patch:tst:117778"/>
                  </criteria>
               </criteria>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11779" version="1" class="patch">
         <metadata>
            <title>MS11-066: Vulnerability in Microsoft Chart Control Could Allow Information Disclosure (2567943)</title>
            <affected family="windows">
               <platform>Microsoft Windows XP</platform>
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows Server 2008</platform>
               <platform>Microsoft Windows 7</platform>
               <platform>Microsoft Windows Server 2008 R2</platform>
            </affected>
            <reference source="Microsoft" ref_id="MS11-066" ref_url="http://www.microsoft.com/technet/security/bulletin/MS11-066.mspx"/>
            <reference source="Microsoft" ref_id="KB2567943" ref_url="http://support.microsoft.com/kb/2567943"/>
            <reference source="CVE" ref_id="CVE-2011-1977" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1977"/>
            <description>Microsoft has released MS11-066 to address security issues in .NET Framework 4.0 on Windows XP, Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2 as documented by CVE-2011-1977.</description>
         </metadata>
         <criteria operator="AND" comment="(XP SP2 OR Vista SP1/SP2 OR Server 2008 RTM/SP2 OR 7 OR 2008 R2)(32-bit/64-bit/ia-64) AND .Net 4.0">
            <criteria operator="OR">
               <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
               <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
               <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
               <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
               <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
               <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
               <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               <extend_definition comment="Microsoft Windows 7 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:6165"/>
               <extend_definition comment="Microsoft Windows 7 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:5950"/>
               <extend_definition comment="Microsoft Windows 7 (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:12292"/>
               <extend_definition comment="Microsoft Windows 7 x64 Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:12627"/>
               <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:6438"/>
               <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed" definition_ref="oval:org.mitre.oval:def:5954"/>
               <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:12567"/>
               <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:12583"/>
            </criteria>
            <extend_definition comment="Microsoft .NET Framework 4.0 is Installed" definition_ref="oval:gov.nist.fdcc.patch:def:115295"/>
            <criteria operator="OR">
               <criteria operator="AND" comment="GDR">
                  <criterion comment="System.Web.DataVisualization.dll version is less than 4.0.30319.236" test_ref="oval:gov.nist.fdcc.patch:tst:117790"/>
               </criteria>
               <criteria operator="AND" comment="LDR">
                  <criterion comment="System.Web.DataVisualization.dll version is greater than or equal to 4.0.30319.300" test_ref="oval:gov.nist.fdcc.patch:tst:117791"/>
                  <criterion comment="System.Web.DataVisualization.dll version is less than 4.0.30319.461" test_ref="oval:gov.nist.fdcc.patch:tst:117792"/>
               </criteria>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11780" version="1" class="patch">
         <metadata>
            <title>MS11-068: Vulnerability in Windows Kernel Could Allow Denial of Service (2556532)</title>
            <affected family="windows">
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows Server 2008</platform>
               <platform>Microsoft Windows 7</platform>
               <platform>Microsoft Windows Server 2008 R2</platform>
               <product>Microsoft .NET Framework</product>
            </affected>
            <reference source="Microsoft" ref_id="MS11-068" ref_url="http://www.microsoft.com/technet/security/bulletin/MS11-068.mspx"/>
            <reference source="Microsoft" ref_id="KB2556532" ref_url="http://support.microsoft.com/kb/2556532"/>
            <reference source="CVE" ref_id="CVE-2011-1971" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1971"/>
            <description>Microsoft has released MS11-068 to address security issues in Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2 as documented by CVE-2011-1971.</description>
         </metadata>
         <criteria operator="OR">
            <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia64)">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criteria operator="AND" comment="GDR">
                     <criterion comment="Ntoskrnl.exe version is less than 6.0.6002.18484" test_ref="oval:gov.nist.fdcc.patch:tst:117800"/>
                  </criteria>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Ntoskrnl.exe version is greater than or equal to 6.0.6002.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1159206"/>
                     <criterion comment="Ntoskrnl.exe version is less than 6.0.6002.22662" test_ref="oval:gov.nist.fdcc.patch:tst:117802"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="7, Server 2008 R2 (32-bit, 64-bit, ia64)">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows 7 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:6165"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:5950"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:6438"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed" definition_ref="oval:org.mitre.oval:def:5954"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criteria operator="AND" comment="GDR">
                     <criterion comment="Ntoskrnl.exe version is less than 6.1.7600.16841" test_ref="oval:gov.nist.fdcc.patch:tst:117803"/>
                  </criteria>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Ntoskrnl.exe version is greater than or equal to 6.1.7600.20000" test_ref="oval:gov.nist.fdcc.patch:tst:116806"/>
                     <criterion comment="Ntoskrnl.exe version is less than 6.1.7600.20994" test_ref="oval:gov.nist.fdcc.patch:tst:117805"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="7, Server 2008 R2 SP1 (32-bit, 64-bit, ia64)">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows 7 (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:12292"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:12627"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Service Pack 1 Edition is installed" definition_ref="oval:org.mitre.oval:def:12567"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed" definition_ref="oval:org.mitre.oval:def:5954"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criteria operator="AND" comment="GDR">
                     <criterion comment="Ntoskrnl.exe version is less than 6.1.7601.17640" test_ref="oval:gov.nist.fdcc.patch:tst:117806"/>
                  </criteria>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Ntoskrnl.exe version is greater than or equal to 6.1.7601.21000" test_ref="oval:gov.nist.fdcc.patch:tst:1173512"/>
                     <criterion comment="Ntoskrnl.exe version is less than 6.1.7601.21755" test_ref="oval:gov.nist.fdcc.patch:tst:117808"/>
                  </criteria>
               </criteria>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11781" version="1" class="patch">
         <metadata>
            <title>MS11-069: Vulnerability in .NET Framework Could Allow Information Disclosure (2567951)</title>
            <affected family="windows">
               <platform>Microsoft Windows XP</platform>
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows Server 2008</platform>
               <platform>Microsoft Windows 7</platform>
               <platform>Microsoft Windows Server 2008 R2</platform>
               <product>Microsoft .NET Framework</product>
            </affected>
            <reference source="Microsoft" ref_id="MS11-069" ref_url="http://www.microsoft.com/technet/security/bulletin/MS11-069.mspx"/>
            <reference source="Microsoft" ref_id="KB2567951" ref_url="http://support.microsoft.com/kb/2567951"/>
            <reference source="CVE" ref_id="CVE-2011-1978" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1978"/>
            <description>Microsoft has released MS11-069 to address security issues in .NET Framework on Windows XP, Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2 as documented by CVE-2011-1978.</description>
         </metadata>
         <criteria operator="OR">
            <criteria operator="AND" comment="(xp sp3 OR xp x64 sp2) AND 2.0 SP2">
               <criteria operator="OR" comment="xp sp3 OR xp x64 sp2">
                  <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
                  <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
               </criteria>
               <extend_definition comment="Microsoft .NET Framework 2.0 Service Pack 2, or later, is installed" definition_ref="oval:org.mitre.oval:def:6158"/>
               <criteria operator="OR">
                  <criterion comment="System.dll version is less than 2.0.50727.3624" test_ref="oval:gov.nist.fdcc.patch:tst:1178100"/>
                  <criteria operator="AND">
                     <criterion comment="System.dll version is greater than or equal 2.0.50727.5600" test_ref="oval:gov.nist.fdcc.patch:tst:1175712"/>
                     <criterion comment="System.dll version is less than 2.0.50727.5668" test_ref="oval:gov.nist.fdcc.patch:tst:1178102"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="(vista sp2 (32/64) OR 2008 SP2 (32/64)) AND .net 2.0 sp2">
               <criteria operator="OR" comment="vista sp2 (32/64) OR 2008 SP2 (32/64)">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <extend_definition comment="Microsoft .NET Framework 2.0 Service Pack 2, or later, is installed" definition_ref="oval:org.mitre.oval:def:6158"/>
               <criteria operator="OR">
                  <criterion comment="System.dll version is less than 2.0.50727.4215" test_ref="oval:gov.nist.fdcc.patch:tst:1178103"/>
                  <criteria operator="AND">
                     <criterion comment="System.dll version is greater than or equal to 2.0.50727.5600" test_ref="oval:gov.nist.fdcc.patch:tst:1175712"/>
                     <criterion comment="System.dll version is less than 2.0.50727.5668" test_ref="oval:gov.nist.fdcc.patch:tst:1178102"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="Windows 7 x86/x64, Windows Server 2008 R2 x64/ia64 AND .net 3.5.1">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows 7 (32-bit) is installed" definition_ref="oval:gov.nist.oval:def:115301"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Edition is installed" definition_ref="oval:gov.nist.oval:def:115302"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Edition is installed" definition_ref="oval:gov.nist.oval:def:115303"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed" definition_ref="oval:gov.nist.oval:def:115302"/>
               </criteria>
               <criteria operator="OR">
                  <criterion comment="System.dll version is less than 2.0.50727.4962" test_ref="oval:gov.nist.fdcc.patch:tst:1178106"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="System.dll version is greater than or equal to 2.0.50727.5600" test_ref="oval:gov.nist.fdcc.patch:tst:1175712"/>
                     <criterion comment="System.dll version is less than 2.0.50727.5668" test_ref="oval:gov.nist.fdcc.patch:tst:1178102"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="Windows 7 SP1 x86/x64, Windows Server 2008 R2 SP1 x64/ia64 AND .net 3.5.1">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows 7 (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:12292"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:12627"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Service Pack 1 Edition is installed" definition_ref="oval:org.mitre.oval:def:12567"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:12583"/>
               </criteria>
               <criteria operator="OR">
                  <criterion comment="System.dll version is less than 2.0.50727.5447" test_ref="oval:gov.nist.fdcc.patch:tst:1178109"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="System.dll version is greater than or equal to 2.0.50727.5600" test_ref="oval:gov.nist.fdcc.patch:tst:1175712"/>
                     <criterion comment="System.dll version is less than 2.0.50727.5668" test_ref="oval:gov.nist.fdcc.patch:tst:1178102"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="(XP SP2 OR Vista SP1/SP2 OR Server 2008 RTM/SP2 OR 7 OR 2008 R2)(32-bit/64-bit/ia-64) AND .Net 4.0">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
                  <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
                  <extend_definition comment="Microsoft Windows 7 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:6165"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:5950"/>
                  <extend_definition comment="Microsoft Windows 7 (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:12292"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:12627"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:6438"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed" definition_ref="oval:org.mitre.oval:def:5954"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:12567"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:12583"/>
               </criteria>
               <extend_definition comment="Microsoft .NET Framework 4.0 is Installed" definition_ref="oval:gov.nist.fdcc.patch:def:115295"/>
               <criteria operator="OR">
                  <criteria operator="AND" comment="GDR">
                     <criterion comment="System.dll version is less than 4.0.30319.236" test_ref="oval:gov.nist.fdcc.patch:tst:1178112"/>
                  </criteria>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="System.dll version is greater than or equal to 4.0.30319.300" test_ref="oval:gov.nist.fdcc.patch:tst:1175715"/>
                     <criterion comment="System.dll version is less than 4.0.30319.463" test_ref="oval:gov.nist.fdcc.patch:tst:1178114"/>
                  </criteria>
               </criteria>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11783" version="1" class="patch">
         <metadata>
            <title>MS11-071: Vulnerability in Windows Components Could Allow Remote Code Execution (2570947)</title>
            <affected family="windows">
               <platform>Microsoft Windows XP</platform>
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows Server 2008</platform>
               <platform>Microsoft Windows 7</platform>
               <platform>Microsoft Windows Server 2008 R2</platform>
            </affected>
            <reference source="Microsoft" ref_id="MS11-071" ref_url="http://www.microsoft.com/technet/security/bulletin/MS11-071.mspx"/>
            <reference source="Microsoft" ref_id="KB2570947" ref_url="http://support.microsoft.com/kb/2570947"/>
            <reference source="CVE" ref_id="CVE-2011-1991" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1991"/>
            <description>Microsoft has released MS11-071 to address security issues in Windows XP, Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2 as documented by CVE-2011-1991.</description>
         </metadata>
         <criteria operator="OR">
            <criteria operator="AND" comment="XP (32-bit) SP3 or (64-bit) SP2">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows XP (x86) SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/>
                  <extend_definition comment="Microsoft Windows XP x64 Edition SP2 is installed" definition_ref="oval:org.mitre.oval:def:4193"/>
               </criteria>
               <criterion comment="AllowProtectedRenames exists and equals 1" test_ref="oval:gov.nist.fdcc.patch:tst:117839"/>
            </criteria>
            <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia64)">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6124"/>
                  <extend_definition comment="Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5653"/>
                  <extend_definition comment="Microsoft Windows Vista x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:5594"/>
                  <extend_definition comment="Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6216"/>
                  <extend_definition comment="Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:6150"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criterion comment="Imjpapi.dll version is less than 10.0.6002.18495" test_ref="oval:gov.nist.fdcc.patch:tst:117830"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Imjpapi.dll version is greater than or equal to 10.0.6002.22000" test_ref="oval:gov.nist.fdcc.patch:tst:117831"/>
                     <criterion comment="Imjpapi.dll version is less than 10.0.6002.22684" test_ref="oval:gov.nist.fdcc.patch:tst:117832"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="7, Server 2008 R2 (32-bit, 64-bit, ia64)">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows 7 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:6165"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:5950"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:6438"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed" definition_ref="oval:org.mitre.oval:def:5954"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criterion comment="Imjpapi.dll version is less than 10.1.7600.16856" test_ref="oval:gov.nist.fdcc.patch:tst:117833"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Imjpapi.dll version is greater than or equal to 10.1.7600.20000" test_ref="oval:gov.nist.fdcc.patch:tst:117834"/>
                     <criterion comment="Imjpapi.dll version is less than 10.1.7600.21016" test_ref="oval:gov.nist.fdcc.patch:tst:117835"/>
                  </criteria>
               </criteria>
            </criteria>
            <criteria operator="AND" comment="7, Server 2008 R2 SP1 (32-bit, 64-bit, ia64)">
               <criteria operator="OR">
                  <extend_definition comment="Microsoft Windows 7 (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:12292"/>
                  <extend_definition comment="Microsoft Windows 7 x64 Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:12627"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 x64 Service Pack 1 Edition is installed" definition_ref="oval:org.mitre.oval:def:12567"/>
                  <extend_definition comment="Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed" definition_ref="oval:org.mitre.oval:def:5954"/>
               </criteria>
               <criteria operator="OR" comment="GDR or LDR Service branch">
                  <criterion comment="Imjpapi.dll version is less than 10.1.7601.17658" test_ref="oval:gov.nist.fdcc.patch:tst:117836"/>
                  <criteria operator="AND" comment="LDR">
                     <criterion comment="Imjpapi.dll version is greater than or equal to 10.1.7601.21000" test_ref="oval:gov.nist.fdcc.patch:tst:117837"/>
                     <criterion comment="Imjpapi.dll version is less than 10.1.7601.21779" test_ref="oval:gov.nist.fdcc.patch:tst:117838"/>
                  </criteria>
               </criteria>
            </criteria>
         </criteria>
      </definition>
      <!-- ==================================================================================================== -->
      <!-- ======================================= EXTENDED DEFINITIONS ======================================= -->
      <!-- ==================================================================================================== -->
      <definition id="oval:org.mitre.oval:def:105" version="5" class="inventory">
         <metadata>
            <title>Microsoft Windows XP is installed</title>
            <affected family="windows">
               <platform>Microsoft Windows XP</platform>
            </affected>
            <reference source="CPE" ref_id="cpe:/o:microsoft:windows_xp"/>
            <description>The operating system installed on the system is Microsoft Windows XP.</description>
            <oval_repository>
               <dates>
                  <submitted date="2006-06-26T12:55:00.000-04:00">
                     <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
                  </submitted>
                  <status_change date="2006-06-26T12:55:00.000-04:00">ACCEPTED</status_change>
                  <modified comment="Added CPE reference." date="2007-04-30T07:48:00.244-04:00">
                     <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
                  </modified>
                  <status_change date="2007-04-30T08:01:55.267-04:00">INTERIM</status_change>
                  <status_change date="2007-05-23T15:05:25.969-04:00">ACCEPTED</status_change>
                  <modified comment="Changed the CPE reference" date="2008-04-04T11:17:00.073-04:00">
                     <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
                  </modified>
                  <status_change date="2008-04-04T11:27:52.098-04:00">INTERIM</status_change>
                  <status_change date="2008-04-21T04:00:10.499-04:00">ACCEPTED</status_change>
                  <modified comment="Changed the test for windows to be case insensitive and replaced the test for Windows 5.1 with a new test for Windows XP" date="2009-12-02T16:05:00.749-04:00">
                     <contributor organization="National Institute of Standards and Technology">Tim Harrison</contributor>
                  </modified>
                  <status_change date="2009-12-02T16:05:00.749-04:00">INTERIM</status_change>
                  <modified comment="Added anchors and spaces to regular expression" date="2009-12-04T14:56:00.359-05:00">
                     <contributor organization="National Institute of Standards and Technology">Tim Harrison</contributor>
                  </modified>
                  <modified comment="Updating regex to include parenthesis" date="2009-12-08T17:32:00.792-05:00">
                     <contributor organization="National Institute of Standards and Technology">Tim Harrison</contributor>
                  </modified>
                  <status_change date="2010-01-04T04:01:15.920-05:00">ACCEPTED</status_change>
               </dates>
               <status>ACCEPTED</status>
            </oval_repository>
         </metadata>
         <criteria operator="AND">
            <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/>
            <criterion comment="Windows XP is installed" test_ref="oval:org.mitre.oval:tst:11179"/>
         </criteria>
      </definition>
      <definition id="oval:org.mitre.oval:def:208" version="3" class="inventory">
         <metadata>
            <title>Microsoft Outlook Express 6 for Windows XP/2003 is installed</title>
            <affected family="windows">
               <platform>Microsoft Windows XP</platform>
            </affected>
            <reference source="CPE" ref_id="cpe:/a:microsoft:outlook_express:6.0"/>
            <description>Microsoft Outlook Express 6 for Windows XP/2003 is installed</description>
            <oval_repository>
               <dates>
                  <submitted date="2007-07-03T12:32:22">
                     <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
                  </submitted>
                  <status_change date="2007-07-03T14:04:49.139-04:00">DRAFT</status_change>
                  <status_change date="2007-07-18T15:57:53.037-04:00">INTERIM</status_change>
                  <status_change date="2007-08-02T14:47:15.591-04:00">ACCEPTED</status_change>
                  <modified date="2009-06-15T04:44:54" comment="Added CPE">
                     <contributor organization="The MITRE Corporation">Brendan Miles</contributor>
                  </modified>
                  <status_change date="2009-06-22T04:00:51.618-04:00">INTERIM</status_change>
                  <status_change date="2009-07-13T04:00:31.131-04:00">ACCEPTED</status_change>
                  <modified comment="EDITED oval:org.mitre.oval:ste:1485 - Correction to pattern match in ste:1485." date="2010-12-27T19:49:00.448-05:00">
                     <contributor organization="National Institute of Standards and Technology">Tim Harrison</contributor>
                  </modified>
                  <status_change date="2010-12-27T19:58:09.275-05:00">INTERIM</status_change>
               </dates>
               <status>INTERIM</status>
            </oval_repository>
         </metadata>
         <criteria operator="AND">
            <criterion comment="Windows XP is installed" test_ref="oval:org.mitre.oval:tst:2838"/>
            <criterion comment="Microsoft Outlook Express 6 for Windows XP/2003 is installed" test_ref="oval:org.mitre.oval:tst:1633"/>
         </criteria>
      </definition>
      <definition id="oval:org.mitre.oval:def:228" version="5" class="inventory">
         <metadata>
            <title>Microsoft Windows Vista is installed</title>
            <affected family="windows">
               <platform>Microsoft Windows Vista</platform>
            </affected>
            <reference source="CPE" ref_id="cpe:/o:microsoft:windows_vista"/>
            <description>The operating system installed on the system is Microsoft Windows Vista</description>
            <oval_repository>
               <dates>
                  <submitted date="2007-02-13T12:46:06">
                     <contributor organization="Secure Elements, Inc.">Dragos Prisaca</contributor>
                  </submitted>
                  <status_change date="2007-02-13T14:53:06-04:00">DRAFT</status_change>
                  <status_change date="2007-03-21T16:17:12.775-04:00">INTERIM</status_change>
                  <status_change date="2007-04-13T15:13:39.760-04:00">ACCEPTED</status_change>
                  <modified comment="Added CPE reference." date="2007-04-30T07:48:00.893-04:00">
                     <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
                  </modified>
                  <status_change date="2007-04-30T07:56:25.929-04:00">INTERIM</status_change>
                  <status_change date="2007-05-23T15:05:40.286-04:00">ACCEPTED</status_change>
                  <modified comment="Vista test updated because of the conflictions with Server 2008" date="2008-03-26T10:51:02.210-04:00">
                     <contributor organization="Secure Elements, Inc.">Sudhir Gandhe</contributor>
                  </modified>
                  <status_change date="2008-03-31T04:00:22.690-04:00">INTERIM</status_change>
                  <modified comment="Changed the CPE reference" date="2008-04-04T11:17:00.315-04:00">
                     <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
                  </modified>
                  <status_change date="2008-04-21T04:00:18.129-04:00">ACCEPTED</status_change>
                  <modified comment="Changed the tests for Vista and windows to be case insensitive" date="2009-12-02T16:05:00.749-04:00">
                     <contributor organization="National Institute of Standards and Technology">Tim Harrison</contributor>
                  </modified>
                  <status_change date="2009-12-02T16:05:00.749-04:00">INTERIM</status_change>
                  <modified comment="Added anchors and spaces to regular expression" date="2009-12-04T14:55:00.401-05:00">
                     <contributor organization="National Institute of Standards and Technology">Tim Harrison</contributor>
                  </modified>
                  <modified comment="Updating regex to include parenthesis" date="2009-12-08T17:31:00.669-05:00">
                     <contributor organization="National Institute of Standards and Technology">Tim Harrison</contributor>
                  </modified>
                  <status_change date="2009-12-28T04:00:11.598-05:00">ACCEPTED</status_change>
               </dates>
               <status>ACCEPTED</status>
            </oval_repository>
         </metadata>
         <criteria>
            <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/>
            <criterion comment="Windows Vista is installed" test_ref="oval:org.mitre.oval:tst:7914"/>
         </criteria>
      </definition>
      <definition id="oval:org.mitre.oval:def:563" version="4" class="inventory">
         <metadata>
            <title>Microsoft Internet Explorer 6 is installed</title>
            <affected family="windows">
               <platform>Microsoft Windows 2000</platform>
               <platform>Microsoft Windows XP</platform>
               <platform>Microsoft Windows Server 2003</platform>
               <product>Microsoft Internet Explorer 6</product>
            </affected>
            <reference source="CPE" ref_id="cpe:/a:microsoft:ie:6"/>
            <description>The application Microsoft Internet Explorer 6 is installed.</description>
            <oval_repository>
               <dates>
                  <submitted date="2006-08-11T12:53:40">
                     <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
                  </submitted>
                  <status_change date="2006-09-08T11:26:00.000-04:00">DRAFT</status_change>
                  <status_change date="2006-09-27T12:29:31.086-04:00">INTERIM</status_change>
                  <status_change date="2006-10-16T15:58:44.500-04:00">ACCEPTED</status_change>
                  <modified comment="Added an anchor to the regex used to check for Internet Explorer 6." date="2007-01-11T20:38:00.950-05:00">
                     <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
                  </modified>
                  <status_change date="2007-01-11T20:49:17.329-05:00">INTERIM</status_change>
                  <status_change date="2007-02-20T13:40:46.580-05:00">ACCEPTED</status_change>
                  <modified comment="Added CPE reference." date="2007-04-30T07:48:00.756-04:00">
                     <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
                  </modified>
                  <status_change date="2007-04-30T07:54:07.779-04:00">INTERIM</status_change>
                  <status_change date="2007-05-23T15:05:48.577-04:00">ACCEPTED</status_change>
                  <modified comment="Added Microsoft Internet Explorer 6 to products. Removed Microsoft reference" date="2009-06-01T16:05:28.035-04:00">
                     <contributor organization="The MITRE Corporation">Brendan Miles</contributor>
                  </modified>
                  <status_change date="2009-06-08T04:00:43.851-04:00">INTERIM</status_change>
                  <status_change date="2009-06-29T04:00:29.720-04:00">ACCEPTED</status_change>
               </dates>
               <status>ACCEPTED</status>
            </oval_repository>
         </metadata>
         <criteria>
            <criterion comment="Internet Explorer 6 (any patch level) is installed" test_ref="oval:org.mitre.oval:tst:2333"/>
         </criteria>
      </definition>
      <definition id="oval:org.mitre.oval:def:627" version="2" class="inventory">
         <metadata>
            <title>Microsoft Internet Explorer 7 is installed</title>
            <affected family="windows">
               <platform>Microsoft Windows XP</platform>
               <platform>Microsoft Windows Server 2003</platform>
               <platform>Microsoft Windows Vista</platform>
               <product>Microsoft Internet Explorer 7</product>
            </affected>
            <reference source="CPE" ref_id="cpe:/a:microsoft:ie:7"/>
            <description>A version of Microsoft Internet Explorer 7 is installed.</description>
            <oval_repository>
               <dates>
                  <submitted date="2007-01-09T06:00:00">
                     <contributor organization="Secure Elements, Inc.">Sudhir Gandhe</contributor>
                  </submitted>
                  <status_change date="2007-01-11T15:30:00-04:00">DRAFT</status_change>
                  <status_change date="2007-02-20T13:40:49.320-05:00">INTERIM</status_change>
                  <modified comment="Added Microsoft Windows Vista to the list of affected platforms." date="2007-03-05T09:10:00.104-05:00">
                     <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
                  </modified>
                  <status_change date="2007-03-21T16:17:23.092-04:00">ACCEPTED</status_change>
                  <modified comment="Added Microsoft Internet Explorer 7 product. Removed Microsoft reference" date="2009-06-01T16:05:28.035-04:00">
                     <contributor organization="The MITRE Corporation">Brendan Miles</contributor>
                  </modified>
                  <status_change date="2009-06-08T04:01:04.886-04:00">INTERIM</status_change>
                  <status_change date="2009-06-29T04:01:07.843-04:00">ACCEPTED</status_change>
               </dates>
               <status>ACCEPTED</status>
            </oval_repository>
         </metadata>
         <criteria>
            <criterion comment="Internet Explorer 7 is installed" test_ref="oval:org.mitre.oval:tst:178"/>
         </criteria>
      </definition>
      <definition id="oval:org.mitre.oval:def:754" version="6" class="inventory">
         <metadata>
            <title>Microsoft Windows XP (x86) SP2 is installed</title>
            <affected family="windows">
               <platform>Microsoft Windows XP</platform>
            </affected>
            <reference source="CPE" ref_id="cpe:/o:microsoft:windows_xp::sp2:x86"/>
            <description>A version of Microsoft Windows XP (x86) Service Pack 2 is installed.</description>
            <oval_repository>
               <dates>
                  <submitted date="2007-03-05T09:00:00">
                     <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
                  </submitted>
                  <status_change date="2007-03-05T09:00:00">DRAFT</status_change>
                  <status_change date="2007-03-21T16:17:26.869-04:00">INTERIM</status_change>
                  <status_change date="2007-04-10T13:44:28.583-04:00">ACCEPTED</status_change>
                  <modified comment="Changed the CPE reference" date="2008-04-04T11:17:00.434-04:00">
                     <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
                  </modified>
                  <status_change date="2008-04-04T11:29:22.458-04:00">INTERIM</status_change>
                  <status_change date="2008-04-21T04:00:24.359-04:00">ACCEPTED</status_change>
                  <modified comment="Updated comment to include Vista and Server 2008" date="2009-05-07T10:32:00.713-04:00">
                     <contributor organization="Gideon Technologies, Inc.">Dragos Prisaca</contributor>
                  </modified>
                  <status_change date="2009-05-07T10:34:02.214-04:00">INTERIM</status_change>
                  <status_change date="2009-06-22T04:00:33.535-04:00">ACCEPTED</status_change>
                  <modified comment="Changed the tests for x86, SP2, and windows to be case insensitive and replaced the test for Windows 5.1 with a new test for Windows XP" date="2009-12-02T16:05:00.749-04:00">
                     <contributor organization="National Institute of Standards and Technology">Tim Harrison</contributor>
                  </modified>
                  <status_change date="2009-12-02T16:05:00.749-04:00">INTERIM</status_change>
                  <modified comment="Added anchors and spaces to regular expression" date="2009-12-04T14:56:00.359-05:00">
                     <contributor organization="National Institute of Standards and Technology">Tim Harrison</contributor>
                  </modified>
                  <modified comment="Updating regex to include parenthesis" date="2009-12-08T17:32:00.792-05:00">
                     <contributor organization="National Institute of Standards and Technology">Tim Harrison</contributor>
                  </modified>
                  <status_change date="2009-12-28T04:00:42.528-05:00">ACCEPTED</status_change>
                  <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
                     <contributor organization="Telos">Sudhir Gandhe</contributor>
                  </modified>
                  <status_change date="2011-04-25T14:44:45.277-04:00">INTERIM</status_change>
                  <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
                     <contributor organization="G2, Inc.">Shane Shaffer</contributor>
                  </modified>
               </dates>
               <status>INTERIM</status>
            </oval_repository>
         </metadata>
         <criteria operator="AND">
            <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/>
            <criterion comment="Windows XP is installed" test_ref="oval:org.mitre.oval:tst:11179"/>
            <criterion comment="a version of Windows for the x86 architecture is installed" test_ref="oval:org.mitre.oval:tst:3823"/>
            <criterion comment="Win2K/XP/2003/Vista/2008 service pack 2 is installed" test_ref="oval:org.mitre.oval:tst:3019"/>
         </criteria>
      </definition>
      <definition id="oval:org.mitre.oval:def:1934" version="2" class="inventory">
         <metadata>
            <title>Microsoft .NET Framework 2.0 (Original RTM or later) is installed</title>
            <affected family="windows">
               <platform>Microsoft Windows 2000</platform>
               <platform>Microsoft Windows XP</platform>
               <platform>Microsoft Windows Server 2003</platform>
               <platform>Microsoft Windows Vista</platform>
               <product>.NET Framework</product>
            </affected>
            <description>Microsoft .NET Framework 2.0 (Original RTM or later) is installed</description>
            <oval_repository>
               <dates>
                  <submitted date="2007-07-11T18:34:24">
                     <contributor organization="Secure Elements, Inc.">Sudhir Gandhe</contributor>
                  </submitted>
                  <status_change date="2007-07-16T09:52:05.115-04:00">DRAFT</status_change>
                  <status_change date="2007-08-01T22:26:15.137-04:00">INTERIM</status_change>
                  <status_change date="2007-08-20T08:04:39.577-04:00">ACCEPTED</status_change>
                  <status_change date="2007-09-13T11:07:56.103-04:00">ACCEPTED</status_change>
               </dates>
               <status>ACCEPTED</status>
            </oval_repository>
         </metadata>
         <criteria operator="AND">
            <criterion comment="Mscorlib.dll version is greater than or equal to 2.0.50727.42" test_ref="oval:org.mitre.oval:tst:3761"/>
         </criteria>
      </definition>
      <definition id="oval:org.mitre.oval:def:2058" version="3" class="inventory">
         <metadata>
            <title>Microsoft Windows Mail is installed</title>
            <affected family="windows">
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows 7</platform>
               <platform>Microsoft Windows Server 2008</platform>
               <product>Windows Mail</product>
            </affected>
            <reference source="CPE" ref_id="cpe:/a:microsoft:windows_mail"/>
            <description>Microsoft Windows Mail is installed</description>
            <oval_repository>
               <dates>
                  <submitted date="2007-06-13T12:32:06.000-04:00">
                     <contributor organization="Secure Elements, Inc.">Sudhir Gandhe</contributor>
                  </submitted>
                  <status_change date="2007-06-13T15:20:00.000-04:00">DRAFT</status_change>
                  <modified comment="Corrected regex in ste:3814 to account for both commas and dots, also anchored the boundaries." date="2007-06-15T13:10:00.106-04:00">
                     <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
                  </modified>
                  <status_change date="2007-07-03T14:05:59.294-04:00">INTERIM</status_change>
                  <status_change date="2007-07-18T15:57:52.876-04:00">ACCEPTED</status_change>
                  <modified comment="Corrected comment for oval:org.mitre.oval:tst:3506 and updated ste:3814 to match with newer versions of Windows Mail 6.0." date="2010-05-12T11:21:00.138-04:00">
                     <contributor organization="Symantec, Inc.">Dragos Prisaca</contributor>
                  </modified>
                  <status_change date="2010-05-12T11:23:48.997-04:00">INTERIM</status_change>
                  <modified comment="Added new test to check for Windows Mail 6.1" date="2010-05-12T11:57:00.591-04:00">
                     <contributor organization="Symantec, Inc.">Dragos Prisaca</contributor>
                  </modified>
                  <status_change date="2010-05-31T04:00:05.436-04:00">ACCEPTED</status_change>
               </dates>
               <status>ACCEPTED</status>
            </oval_repository>
         </metadata>
         <criteria operator="OR">
            <criterion comment="Windows Mail version 6.0" test_ref="oval:org.mitre.oval:tst:3506"/>
            <criterion comment="Windows Mail version 6.1" test_ref="oval:org.mitre.oval:tst:11318"/>
         </criteria>
      </definition>
      <definition id="oval:org.mitre.oval:def:2126" version="1" class="inventory">
         <metadata>
            <title>Windows Media Player v11.0 is installed.</title>
            <affected family="windows">
               <platform>Microsoft Windows XP</platform>
               <platform>Microsoft Windows Server 2003</platform>
               <platform>Microsoft Windows Vista</platform>
               <product>Media Player</product>
            </affected>
            <reference source="CPE" ref_id="cpe:/a:microsoft:media_player:11"/>
            <description>Windows Media Player v11.0 is installed.</description>
            <oval_repository>
               <dates>
                  <submitted date="2007-08-15T09:28:35">
                     <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
                  </submitted>
                  <status_change date="2007-08-15T15:55:11.057-04:00">DRAFT</status_change>
                  <status_change date="2007-09-06T09:13:31.049-04:00">INTERIM</status_change>
                  <status_change date="2007-09-27T08:57:44.929-04:00">ACCEPTED</status_change>
               </dates>
               <status>ACCEPTED</status>
            </oval_repository>
         </metadata>
         <criteria operator="AND">
            <criterion comment="PlayerVersion is greater than 11.0.0.0" test_ref="oval:org.mitre.oval:tst:3203"/>
            <criterion comment="PlayerVersion is less than 12.0.0.0" test_ref="oval:org.mitre.oval:tst:4192"/>
         </criteria>
      </definition>
      <definition id="oval:org.mitre.oval:def:2136" version="2" class="inventory">
         <metadata>
            <title>Microsoft .NET Framework 1.0 (Service Pack 3 or later) is Installed</title>
            <affected family="windows">
               <platform>Microsoft Windows 2000</platform>
               <platform>Microsoft Windows XP</platform>
               <platform>Microsoft Windows Server 2003</platform>
               <platform>Microsoft Windows Vista</platform>
               <product>.NET Framework</product>
            </affected>
            <description>Microsoft .NET Framework 1.0 (Service Pack 3 or later) is Installed</description>
            <oval_repository>
               <dates>
                  <submitted date="2007-07-11T18:34:24">
                     <contributor organization="Secure Elements, Inc.">Sudhir Gandhe</contributor>
                  </submitted>
                  <status_change date="2007-07-16T09:52:04.577-04:00">DRAFT</status_change>
                  <status_change date="2007-08-01T22:26:16.025-04:00">INTERIM</status_change>
                  <status_change date="2007-08-20T08:04:40.665-04:00">ACCEPTED</status_change>
                  <status_change date="2007-09-13T11:07:56.167-04:00">ACCEPTED</status_change>
               </dates>
               <status>ACCEPTED</status>
            </oval_repository>
         </metadata>
         <criteria operator="AND">
            <criterion comment="Mscorlib.dll version is greater than or equal to 1.0.3705.6018" test_ref="oval:org.mitre.oval:tst:3168"/>
         </criteria>
      </definition>
      <definition id="oval:org.mitre.oval:def:2147" version="1" class="inventory">
         <metadata>
            <title>Windows Media Player v9.0 is installed.</title>
            <affected family="windows">
               <platform>Microsoft Windows XP</platform>
               <product>Media Player</product>
            </affected>
            <reference source="CPE" ref_id="cpe:/a:microsoft:media_player:9"/>
            <description>Windows Media Player v9.0 is installed.</description>
            <oval_repository>
               <dates>
                  <submitted date="2007-08-15T09:28:35">
                     <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
                  </submitted>
                  <status_change date="2007-08-15T15:55:11.096-04:00">DRAFT</status_change>
                  <status_change date="2007-09-06T09:13:31.363-04:00">INTERIM</status_change>
                  <status_change date="2007-09-27T08:57:45.263-04:00">ACCEPTED</status_change>
               </dates>
               <status>ACCEPTED</status>
            </oval_repository>
         </metadata>
         <criteria operator="AND">
            <criterion comment="Windows Media Player 9 is installed" test_ref="oval:org.mitre.oval:tst:786"/>
            <criterion negate="true" comment="Windows Media Player 10 is installed" test_ref="oval:org.mitre.oval:tst:833"/>
            <extend_definition negate="true" comment="Windows Media Player v11.0 is installed." definition_ref="oval:org.mitre.oval:def:2126"/>
         </criteria>
      </definition>
      <definition id="oval:org.mitre.oval:def:2172" version="1" class="inventory">
         <metadata>
            <title>Windows Media Player v10.0 is installed.</title>
            <affected family="windows">
               <platform>Microsoft Windows XP</platform>
               <platform>Microsoft Windows Server 2003</platform>
               <product>Media Player</product>
            </affected>
            <reference source="CPE" ref_id="cpe:/a:microsoft:media_player:10"/>
            <description>Windows Media Player v10.0 is installed.</description>
            <oval_repository>
               <dates>
                  <submitted date="2007-08-15T09:28:35">
                     <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
                  </submitted>
                  <status_change date="2007-08-15T15:55:11.378-04:00">DRAFT</status_change>
                  <status_change date="2007-09-06T09:13:31.729-04:00">INTERIM</status_change>
                  <status_change date="2007-09-27T08:57:45.569-04:00">ACCEPTED</status_change>
               </dates>
               <status>ACCEPTED</status>
            </oval_repository>
         </metadata>
         <criteria operator="AND">
            <criterion comment="Windows Media Player 10 is installed" test_ref="oval:org.mitre.oval:tst:833"/>
            <extend_definition negate="true" comment="Windows Media Player v11.0 is installed." definition_ref="oval:org.mitre.oval:def:2126"/>
         </criteria>
      </definition>
      <definition id="oval:org.mitre.oval:def:4193" version="6" class="inventory">
         <metadata>
            <title>Microsoft Windows XP x64 Edition SP2 is installed</title>
            <affected family="windows">
               <platform>Microsoft Windows XP</platform>
            </affected>
            <reference source="CPE" ref_id="cpe:/o:microsoft:windows_xp::sp2:x64"/>
            <description>A version of Microsoft Windows XP Professional x64 Edition Service Pack 2 is installed.</description>
            <oval_repository>
               <dates>
                  <submitted date="2007-11-15T15:56:12">
                     <contributor organization="Secure Elements, Inc.">Sudhir Gandhe</contributor>
                  </submitted>
                  <status_change date="2007-11-16T08:53:11.596-05:00">DRAFT</status_change>
                  <status_change date="2007-12-03T04:06:19.275-05:00">INTERIM</status_change>
                  <status_change date="2007-12-24T04:06:02.885-05:00">ACCEPTED</status_change>
                  <modified comment="Changed the CPE reference" date="2008-04-04T11:17:00.080-04:00">
                     <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
                  </modified>
                  <status_change date="2008-04-04T11:21:54.103-04:00">INTERIM</status_change>
                  <status_change date="2008-04-21T04:00:19.231-04:00">ACCEPTED</status_change>
                  <modified comment="Changed registry check for amd64 to be case insensitive equals" date="2009-11-19T18:33:00.593-05:00">
                     <contributor organization="Hewlett-Packard">Todd Dolinsky</contributor>
                  </modified>
                  <status_change date="2009-11-19T18:35:09.716-05:00">INTERIM</status_change>
                  <modified comment="Replaced the test for 'SP2 or later' with a test for strictly 'SP2' and the test for Windows 5.1 with a new test for Windows XP and changed the tests for SP2 and windows to be case insensitive" date="2009-12-02T16:05:00.749-04:00">
                     <contributor organization="National Institute of Standards and Technology">Tim Harrison</contributor>
                  </modified>
                  <modified comment="Added anchors and spaces to regular expression" date="2009-12-04T14:56:00.359-05:00">
                     <contributor organization="National Institute of Standards and Technology">Tim Harrison</contributor>
                  </modified>
                  <modified comment="Updating regex to include parenthesis" date="2009-12-08T17:32:00.792-05:00">
                     <contributor organization="National Institute of Standards and Technology">Tim Harrison</contributor>
                  </modified>
                  <status_change date="2010-01-04T04:01:31.215-05:00">ACCEPTED</status_change>
                  <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
                     <contributor organization="Telos">Sudhir Gandhe</contributor>
                  </modified>
                  <status_change date="2011-04-25T14:45:59.384-04:00">INTERIM</status_change>
                  <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
                     <contributor organization="G2, Inc.">Shane Shaffer</contributor>
                  </modified>
               </dates>
               <status>INTERIM</status>
            </oval_repository>
         </metadata>
         <criteria operator="AND">
            <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/>
            <criterion comment="Windows XP is installed" test_ref="oval:org.mitre.oval:tst:11179"/>
            <criterion comment="a version of Windows for the x64 architecture is installed" test_ref="oval:org.mitre.oval:tst:3653"/>
            <criterion comment="Win2K/XP/2003/Vista/2008 service pack 2 is installed" test_ref="oval:org.mitre.oval:tst:3019"/>
         </criteria>
      </definition>
      <definition id="oval:org.mitre.oval:def:4870" version="6" class="inventory">
         <metadata>
            <title>Microsoft Windows Server 2008 (32-bit) is installed</title>
            <affected family="windows">
               <platform>Microsoft Windows Server 2008</platform>
            </affected>
            <reference source="CPE" ref_id="cpe:/o:microsoft:windows_server_2008:::x86"/>
            <description>The operating system installed on the system is Microsoft Windows Server 2008 (32-bit)</description>
            <oval_repository>
               <dates>
                  <submitted date="2008-03-26T10:44:02">
                     <contributor organization="Secure Elements, Inc.">Sudhir Gandhe</contributor>
                  </submitted>
                  <status_change date="2008-03-26T16:27:25.280-04:00">DRAFT</status_change>
                  <modified comment="Changed the CPE reference" date="2008-04-04T11:17:00.555-04:00">
                     <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
                  </modified>
                  <status_change date="2008-04-21T04:00:20.181-04:00">INTERIM</status_change>
                  <status_change date="2008-05-12T04:00:10.618-04:00">ACCEPTED</status_change>
                  <modified comment="Changed registry check for amd64 to be a case insensitive equals" date="2009-09-04T10:48:00.140-05:00">
                     <contributor organization="Hewlett-Packard">Todd Dolinsky</contributor>
                  </modified>
                  <status_change date="2009-09-07T04:00:25.188-04:00">INTERIM</status_change>
                  <status_change date="2009-09-28T04:00:03.365-04:00">ACCEPTED</status_change>
                  <modified comment="Replaced negation of test for x64 with a case insensitive test for x86, added a negated test for 2008 R2, and changed the test for windows to be case insensitive" date="2009-12-02T16:05:00.749-04:00">
                     <contributor organization="National Institute of Standards and Technology">Tim Harrison</contributor>
                  </modified>
                  <status_change date="2009-12-02T16:05:00.749-04:00">INTERIM</status_change>
                  <modified comment="Added anchors and spaces to regular expression" date="2009-12-04T14:54:00.233-05:00">
                     <contributor organization="National Institute of Standards and Technology">Tim Harrison</contributor>
                  </modified>
                  <modified comment="Added anchors and spaces to regular expression" date="2009-12-04T14:56:00.439-05:00">
                     <contributor organization="National Institute of Standards and Technology">Tim Harrison</contributor>
                  </modified>
                  <modified comment="Updating regex to include parenthesis" date="2009-12-08T17:32:00.144-05:00">
                     <contributor organization="National Institute of Standards and Technology">Tim Harrison</contributor>
                  </modified>
                  <status_change date="2010-01-04T04:01:33.629-05:00">ACCEPTED</status_change>
                  <modified comment="EDITED oval:org.mitre.oval:def:4870 - Corrected the CPE names for Windows Server 2008" date="2010-12-21T10:57:00.617-05:00">
                     <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
                  </modified>
                  <status_change date="2010-12-21T11:00:20.655-05:00">INTERIM</status_change>
                  <status_change date="2011-02-07T04:00:11.791-05:00">ACCEPTED</status_change>
               </dates>
               <status>ACCEPTED</status>
            </oval_repository>
         </metadata>
         <criteria>
            <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/>
            <criterion comment="Windows Server 2008 is installed" test_ref="oval:org.mitre.oval:tst:7697"/>
            <criterion comment="a version of Windows for the x86 architecture is installed" test_ref="oval:org.mitre.oval:tst:3823"/>
            <criterion negate="true" comment="Windows Server 2008 R2 is installed" test_ref="oval:org.mitre.oval:tst:10317"/>
         </criteria>
      </definition>
      <definition id="oval:org.mitre.oval:def:4873" version="5" class="inventory">
         <metadata>
            <title>Microsoft Windows Vista (32-bit) Service Pack 1 is installed</title>
            <affected family="windows">
               <platform>Microsoft Windows Vista</platform>
            </affected>
            <reference source="CPE" ref_id="cpe:/o:microsoft:windows_vista::sp1:x86"/>
            <description>The operating system installed on the system is Microsoft Windows Vista (32-bit) Service Pack 1</description>
            <oval_repository>
               <dates>
                  <submitted date="2008-03-26T10:44:02">
                     <contributor organization="Secure Elements, Inc.">Sudhir Gandhe</contributor>
                  </submitted>
                  <status_change date="2008-03-26T16:27:29.495-04:00">DRAFT</status_change>
                  <modified comment="Changed the CPE reference" date="2008-04-04T11:17:00.108-04:00">
                     <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
                  </modified>
                  <status_change date="2008-04-21T04:00:20.428-04:00">INTERIM</status_change>
                  <status_change date="2008-05-12T04:00:14.497-04:00">ACCEPTED</status_change>
                  <modified comment="Replaced negation of test for x64 with a case insensitive test for x86 and changed the tests for SP1, Vista, and windows to be case insensitive" date="2009-12-02T16:05:00.749-04:00">
                     <contributor organization="National Institute of Standards and Technology">Tim Harrison</contributor>
                  </modified>
                  <status_change date="2009-12-02T16:05:00.749-04:00">INTERIM</status_change>
                  <modified comment="Added anchors and spaces to regular expression" date="2009-12-04T14:55:00.401-05:00">
                     <contributor organization="National Institute of Standards and Technology">Tim Harrison</contributor>
                  </modified>
                  <modified comment="Updating regex to include parenthesis" date="2009-12-08T17:31:00.669-05:00">
                     <contributor organization="National Institute of Standards and Technology">Tim Harrison</contributor>
                  </modified>
                  <status_change date="2010-01-04T04:01:34.223-05:00">ACCEPTED</status_change>
                  <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
                     <contributor organization="Telos">Sudhir Gandhe</contributor>
                  </modified>
                  <status_change date="2011-04-25T14:45:45.918-04:00">INTERIM</status_change>
                  <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
                     <contributor organization="G2, Inc.">Shane Shaffer</contributor>
                  </modified>
               </dates>
               <status>INTERIM</status>
            </oval_repository>
         </metadata>
         <criteria>
            <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/>
            <criterion comment="Windows Vista is installed" test_ref="oval:org.mitre.oval:tst:7914"/>
            <criterion comment="a version of Windows for the x86 architecture is installed" test_ref="oval:org.mitre.oval:tst:3823"/>
            <criterion comment="Win2K/XP/2003/Vista service pack 1 is installed" test_ref="oval:org.mitre.oval:tst:2843"/>
         </criteria>
      </definition>
      <definition id="oval:org.mitre.oval:def:5254" version="6" class="inventory">
         <metadata>
            <title>Microsoft Windows Vista x64 Edition Service Pack 1 is installed</title>
            <affected family="windows">
               <platform>Microsoft Windows Vista</platform>
            </affected>
            <reference source="CPE" ref_id="cpe:/o:microsoft:windows_vista::sp1:x64"/>
            <description>The operating system installed on the system is Microsoft Windows Vista x64 Edition Service Pack 1</description>
            <oval_repository>
               <dates>
                  <submitted date="2008-03-26T10:44:02">
                     <contributor organization="Secure Elements, Inc.">Sudhir Gandhe</contributor>
                  </submitted>
                  <status_change date="2008-03-26T16:27:29.700-04:00">DRAFT</status_change>
                  <modified comment="Changed the CPE reference" date="2008-04-04T11:17:00.236-04:00">
                     <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
                  </modified>
                  <status_change date="2008-04-21T04:00:21.267-04:00">INTERIM</status_change>
                  <status_change date="2008-05-12T04:00:14.836-04:00">ACCEPTED</status_change>
                  <modified comment="Changed registry check for amd64 to be a case insensitive equals" date="2009-09-04T10:48:00.140-05:00">
                     <contributor organization="Hewlett-Packard">Todd Dolinsky</contributor>
                  </modified>
                  <status_change date="2009-09-07T04:00:25.662-04:00">INTERIM</status_change>
                  <status_change date="2009-09-28T04:00:03.631-04:00">ACCEPTED</status_change>
                  <modified comment="Changed registry check for amd64 to be case insensitive equals" date="2009-11-19T18:33:00.593-05:00">
                     <contributor organization="Hewlett-Packard">Todd Dolinsky</contributor>
                  </modified>
                  <status_change date="2009-11-19T18:35:10.408-05:00">INTERIM</status_change>
                  <modified comment="Changed the tests for SP1, Vista, and windows to be case insensitive" date="2009-12-02T16:05:00.749-04:00">
                     <contributor organization="National Institute of Standards and Technology">Tim Harrison</contributor>
                  </modified>
                  <modified comment="Added anchors and spaces to regular expression" date="2009-12-04T14:55:00.401-05:00">
                     <contributor organization="National Institute of Standards and Technology">Tim Harrison</contributor>
                  </modified>
                  <modified comment="Updating regex to include parenthesis" date="2009-12-08T17:31:00.669-05:00">
                     <contributor organization="National Institute of Standards and Technology">Tim Harrison</contributor>
                  </modified>
                  <status_change date="2010-01-04T04:01:34.743-05:00">ACCEPTED</status_change>
                  <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
                     <contributor organization="Telos">Sudhir Gandhe</contributor>
                  </modified>
                  <status_change date="2011-04-25T14:44:07.861-04:00">INTERIM</status_change>
                  <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
                     <contributor organization="G2, Inc.">Shane Shaffer</contributor>
                  </modified>
               </dates>
               <status>INTERIM</status>
            </oval_repository>
         </metadata>
         <criteria>
            <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/>
            <criterion comment="Windows Vista is installed" test_ref="oval:org.mitre.oval:tst:7914"/>
            <criterion comment="a version of Windows for the x64 architecture is installed" test_ref="oval:org.mitre.oval:tst:3653"/>
            <criterion comment="Win2K/XP/2003/Vista service pack 1 is installed" test_ref="oval:org.mitre.oval:tst:2843"/>
         </criteria>
      </definition>
      <definition id="oval:org.mitre.oval:def:5356" version="6" class="inventory">
         <metadata>
            <title>Microsoft Windows Server 2008 (64-bit) is installed</title>
            <affected family="windows">
               <platform>Microsoft Windows Server 2008</platform>
            </affected>
            <reference source="CPE" ref_id="cpe:/o:microsoft:windows_server_2008:::x64"/>
            <description>The operating system installed on the system is Microsoft Windows Server 2008 (64-bit)</description>
            <oval_repository>
               <dates>
                  <submitted date="2008-03-26T10:44:02">
                     <contributor organization="Secure Elements, Inc.">Sudhir Gandhe</contributor>
                  </submitted>
                  <status_change date="2008-03-26T16:27:25.493-04:00">DRAFT</status_change>
                  <modified comment="Changed the CPE reference" date="2008-04-04T11:17:00.340-04:00">
                     <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
                  </modified>
                  <status_change date="2008-04-21T04:00:21.761-04:00">INTERIM</status_change>
                  <status_change date="2008-05-12T04:00:15.160-04:00">ACCEPTED</status_change>
                  <modified comment="Changed registry check for amd64 to be case insensitive equals" date="2009-11-19T18:33:00.593-05:00">
                     <contributor organization="Hewlett-Packard">Todd Dolinsky</contributor>
                  </modified>
                  <status_change date="2009-11-19T18:35:09.355-05:00">INTERIM</status_change>
                  <modified comment="Added a negated test for 2008 R2 and changed the test for windows to be case insensitive" date="2009-12-02T16:05:00.749-04:00">
                     <contributor organization="National Institute of Standards and Technology">Tim Harrison</contributor>
                  </modified>
                  <status_change date="2009-12-02T16:05:00.749-04:00">INTERIM</status_change>
                  <modified comment="Added anchors and spaces to regular expression" date="2009-12-04T14:54:00.233-05:00">
                     <contributor organization="National Institute of Standards and Technology">Tim Harrison</contributor>
                  </modified>
                  <modified comment="Added anchors and spaces to regular expression" date="2009-12-04T14:56:00.439-05:00">
                     <contributor organization="National Institute of Standards and Technology">Tim Harrison</contributor>
                  </modified>
                  <modified comment="Updating regex to include parenthesis" date="2009-12-08T17:32:00.144-05:00">
                     <contributor organization="National Institute of Standards and Technology">Tim Harrison</contributor>
                  </modified>
                  <status_change date="2010-01-04T04:01:35.383-05:00">ACCEPTED</status_change>
                  <modified comment="Removed the SP1 component in the CPE reference" date="2010-01-08T15:44:00.632-05:00">
                     <contributor organization="DTCC">J. Daniel Brown</contributor>
                  </modified>
                  <status_change date="2010-01-08T15:44:32.646-05:00">INTERIM</status_change>
                  <status_change date="2010-01-25T04:00:02.861-05:00">ACCEPTED</status_change>
                  <modified comment="EDITED oval:org.mitre.oval:def:5356 - Corrected the CPE names for Windows Server 2008" date="2010-12-21T10:57:00.617-05:00">
                     <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
                  </modified>
                  <status_change date="2010-12-21T11:00:20.063-05:00">INTERIM</status_change>
                  <status_change date="2011-02-07T04:00:12.352-05:00">ACCEPTED</status_change>
               </dates>
               <status>ACCEPTED</status>
            </oval_repository>
         </metadata>
         <criteria>
            <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/>
            <criterion comment="Windows Server 2008 is installed" test_ref="oval:org.mitre.oval:tst:7697"/>
            <criterion comment="a version of Windows for the x64 architecture is installed" test_ref="oval:org.mitre.oval:tst:3653"/>
            <criterion negate="true" comment="Windows Server 2008 R2 is installed" test_ref="oval:org.mitre.oval:tst:10317"/>
         </criteria>
      </definition>
      <definition id="oval:org.mitre.oval:def:5377" version="1" class="inventory">
         <metadata>
            <title>Microsoft IIS 7.0 is installed</title>
            <affected family="windows">
               <platform>Microsoft Windows Vista</platform>
            </affected>
            <reference source="CPE" ref_id="cpe:/a:microsoft:iis:7.0"/>
            <description>The application Microsoft IIS 7.0 is installed.</description>
            <oval_repository>
               <dates>
                  <submitted date="2008-02-14T10:00:19">
                     <contributor organization="Secure Elements, Inc.">Jeff Ito</contributor>
                  </submitted>
                  <status_change date="2008-02-14T14:55:51.694-05:00">DRAFT</status_change>
                  <status_change date="2008-03-03T04:00:13.826-05:00">INTERIM</status_change>
                  <status_change date="2008-03-24T04:00:43.767-04:00">ACCEPTED</status_change>
               </dates>
               <status>ACCEPTED</status>
            </oval_repository>
         </metadata>
         <criteria>
            <criterion comment="IIS Major Version equals 7" test_ref="oval:org.mitre.oval:tst:7848"/>
            <criterion comment="IIS Minor Version equals 0" test_ref="oval:org.mitre.oval:tst:164"/>
         </criteria>
      </definition>
      <definition id="oval:org.mitre.oval:def:5594" version="6" class="inventory">
         <metadata>
            <title>Microsoft Windows Vista x64 Edition Service Pack 2 is installed</title>
            <affected family="windows">
               <platform>Microsoft Windows Vista</platform>
            </affected>
            <reference source="CPE" ref_id="cpe:/o:microsoft:windows_vista::sp2:x64"/>
            <description>The operating system installed on the system is Microsoft Windows Vista x64 Edition Service Pack 2</description>
            <oval_repository>
               <dates>
                  <submitted date="2009-05-04T16:00:00">
                     <contributor organization="Gideon Technologies, Inc.">Dragos Prisaca</contributor>
                  </submitted>
                  <modified comment="Updated comment to include Vista and Server 2008" date="2009-05-07T10:32:00.713-04:00">
                     <contributor organization="Gideon Technologies, Inc.">Dragos Prisaca</contributor>
                  </modified>
                  <status_change date="2009-05-07T11:17:43.459-04:00">DRAFT</status_change>
                  <status_change date="2009-05-25T04:01:41.151-04:00">INTERIM</status_change>
                  <status_change date="2009-06-22T04:00:22.934-04:00">ACCEPTED</status_change>
                  <modified comment="Changed registry check for amd64 to be a case insensitive equals" date="2009-09-04T10:48:00.140-05:00">
                     <contributor organization="Hewlett-Packard">Todd Dolinsky</contributor>
                  </modified>
                  <status_change date="2009-09-07T04:00:26.214-04:00">INTERIM</status_change>
                  <status_change date="2009-09-28T04:00:05.829-04:00">ACCEPTED</status_change>
                  <modified comment="Changed registry check for amd64 to be case insensitive equals" date="2009-11-19T18:33:00.593-05:00">
                     <contributor organization="Hewlett-Packard">Todd Dolinsky</contributor>
                  </modified>
                  <status_change date="2009-11-19T18:35:08.959-05:00">INTERIM</status_change>
                  <modified comment=" Changed the tests for SP2, Vista, and windows to be case insensitive" date="2009-12-02T16:05:00.749-04:00">
                     <contributor organization="National Institute of Standards and Technology">Tim Harrison</contributor>
                  </modified>
                  <modified comment="Added anchors and spaces to regular expression" date="2009-12-04T14:55:00.401-05:00">
                     <contributor organization="National Institute of Standards and Technology">Tim Harrison</contributor>
                  </modified>
                  <modified comment="Updating regex to include parenthesis" date="2009-12-08T17:31:00.669-05:00">
                     <contributor organization="National Institute of Standards and Technology">Tim Harrison</contributor>
                  </modified>
                  <status_change date="2010-01-04T04:01:35.796-05:00">ACCEPTED</status_change>
                  <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
                     <contributor organization="Telos">Sudhir Gandhe</contributor>
                  </modified>
                  <status_change date="2011-04-25T14:44:50.876-04:00">INTERIM</status_change>
                  <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
                     <contributor organization="G2, Inc.">Shane Shaffer</contributor>
                  </modified>
               </dates>
               <status>INTERIM</status>
            </oval_repository>
         </metadata>
         <criteria>
            <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/>
            <criterion comment="Windows Vista is installed" test_ref="oval:org.mitre.oval:tst:7914"/>
            <criterion comment="a version of Windows for the x64 architecture is installed" test_ref="oval:org.mitre.oval:tst:3653"/>
            <criterion comment="Win2K/XP/2003/Vista/2008 service pack 2 is installed" test_ref="oval:org.mitre.oval:tst:3019"/>
         </criteria>
      </definition>
      <definition id="oval:org.mitre.oval:def:5631" version="5" class="inventory">
         <metadata>
            <title>Microsoft Windows XP (x86) SP3 is installed</title>
            <affected family="windows">
               <platform>Microsoft Windows XP</platform>
            </affected>
            <reference source="CPE" ref_id="cpe:/o:microsoft:windows_xp::sp3:x86"/>
            <description>A version of Microsoft Windows XP (x86) Service Pack 3 is installed.</description>
            <oval_repository>
               <dates>
                  <submitted date="2008-06-10T14:50:00">
                     <contributor organization="Secure Elements, Inc.">Sudhir Gandhe</contributor>
                  </submitted>
                  <status_change date="2008-06-12T13:58:47.155-04:00">DRAFT</status_change>
                  <status_change date="2008-06-30T04:00:18.370-04:00">INTERIM</status_change>
                  <status_change date="2008-07-21T04:00:18.901-04:00">ACCEPTED</status_change>
                  <modified comment="Changed the tests for x86, SP3, and windows to be case insensitive and replaced the test for Windows 5.1 with a new test for Windows XP" date="2009-12-02T16:05:00.749-04:00">
                     <contributor organization="National Institute of Standards and Technology">Tim Harrison</contributor>
                  </modified>
                  <status_change date="2009-12-02T16:05:00.749-04:00">INTERIM</status_change>
                  <modified comment="Added anchors and spaces to regular expression" date="2009-12-04T14:56:00.359-05:00">
                     <contributor organization="National Institute of Standards and Technology">Tim Harrison</contributor>
                  </modified>
                  <modified comment="Updating regex to include parenthesis" date="2009-12-08T17:32:00.792-05:00">
                     <contributor organization="National Institute of Standards and Technology">Tim Harrison</contributor>
                  </modified>
                  <status_change date="2010-01-04T04:01:36.319-05:00">ACCEPTED</status_change>
                  <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
                     <contributor organization="Telos">Sudhir Gandhe</contributor>
                  </modified>
                  <status_change date="2011-04-25T14:44:36.981-04:00">INTERIM</status_change>
                  <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
                     <contributor organization="G2, Inc.">Shane Shaffer</contributor>
                  </modified>
               </dates>
               <status>INTERIM</status>
            </oval_repository>
         </metadata>
         <criteria operator="AND">
            <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/>
            <criterion comment="Windows XP is installed" test_ref="oval:org.mitre.oval:tst:11179"/>
            <criterion comment="a version of Windows for the x86 architecture is installed" test_ref="oval:org.mitre.oval:tst:3823"/>
            <criterion comment="Win2K/XP/2003 service pack 3 is installed" test_ref="oval:org.mitre.oval:tst:7814"/>
         </criteria>
      </definition>
      <definition id="oval:org.mitre.oval:def:5653" version="8" class="inventory">
         <metadata>
            <title>Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed</title>
            <affected family="windows">
               <platform>Microsoft Windows Server 2008</platform>
            </affected>
            <reference source="CPE" ref_id="cpe:/o:microsoft:windows_server_2008::sp2:x86"/>
            <description>The operating system installed on the system is Microsoft Windows Server 2008 (32-bit) Service Pack 2</description>
            <oval_repository>
               <dates>
                  <submitted date="2009-05-04T16:00:00">
                     <contributor organization="Gideon Technologies, Inc.">Dragos Prisaca</contributor>
                  </submitted>
                  <status_change date="2009-05-07T11:17:37.121-04:00">DRAFT</status_change>
                  <status_change date="2009-05-25T04:01:42.700-04:00">INTERIM</status_change>
                  <status_change date="2009-06-22T04:00:24.249-04:00">ACCEPTED</status_change>
                  <modified comment="Changed registry check for amd64 to be a case insensitive equals" date="2009-09-04T10:48:00.140-05:00">
                     <contributor organization="Hewlett-Packard">Todd Dolinsky</contributor>
                  </modified>
                  <status_change date="2009-09-07T04:00:26.467-04:00">INTERIM</status_change>
                  <status_change date="2009-09-28T04:00:07.133-04:00">ACCEPTED</status_change>
                  <modified comment="Replaced negation of test for x64 with a case insensitive test for x86, added a negated test for 2008 R2 and changed the tests for SP2 and windows to be case insensitive" date="2009-12-02T16:05:00.749-04:00">
                     <contributor organization="National Institute of Standards and Technology">Tim Harrison</contributor>
                  </modified>
                  <status_change date="2009-12-02T16:05:00.749-04:00">INTERIM</status_change>
                  <modified comment="Added anchors and spaces to regular expression" date="2009-12-04T14:54:00.233-05:00">
                     <contributor organization="National Institute of Standards and Technology">Tim Harrison</contributor>
                  </modified>
                  <modified comment="Added anchors and spaces to regular expression" date="2009-12-04T14:56:00.439-05:00">
                     <contributor organization="National Institute of Standards and Technology">Tim Harrison</contributor>
                  </modified>
                  <modified comment="Updating regex to include parenthesis" date="2009-12-08T17:32:00.144-05:00">
                     <contributor organization="National Institute of Standards and Technology">Tim Harrison</contributor>
                  </modified>
                  <status_change date="2010-01-04T04:01:38.208-05:00">ACCEPTED</status_change>
                  <modified comment="EDITED oval:org.mitre.oval:def:5653 - Corrected the CPE names for Windows Server 2008" date="2010-12-21T10:57:00.617-05:00">
                     <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
                  </modified>
                  <status_change date="2010-12-21T11:00:21.376-05:00">INTERIM</status_change>
                  <status_change date="2011-02-07T04:00:12.818-05:00">ACCEPTED</status_change>
                  <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
                     <contributor organization="Telos">Sudhir Gandhe</contributor>
                  </modified>
                  <status_change date="2011-04-25T14:45:40.947-04:00">INTERIM</status_change>
                  <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
                     <contributor organization="G2, Inc.">Shane Shaffer</contributor>
                  </modified>
               </dates>
               <status>INTERIM</status>
            </oval_repository>
         </metadata>
         <criteria>
            <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/>
            <criterion comment="Windows Server 2008 is installed" test_ref="oval:org.mitre.oval:tst:7697"/>
            <criterion comment="a version of Windows for the x86 architecture is installed" test_ref="oval:org.mitre.oval:tst:3823"/>
            <criterion comment="Win2K/XP/2003/Vista/2008 service pack 2 is installed" test_ref="oval:org.mitre.oval:tst:3019"/>
            <criterion negate="true" comment="Windows Server 2008 R2 is installed" test_ref="oval:org.mitre.oval:tst:10317"/>
         </criteria>
      </definition>
      <definition id="oval:org.mitre.oval:def:5667" version="6" class="inventory">
         <metadata>
            <title>Microsoft Windows Server 2008 (ia-64) is installed</title>
            <affected family="windows">
               <platform>Microsoft Windows Server 2008</platform>
            </affected>
            <reference source="CPE" ref_id="cpe:/o:microsoft:windows_server_2008:::itanium"/>
            <description>The operating system installed on the system is Microsoft Windows Server 2008 Itanium Edition</description>
            <oval_repository>
               <dates>
                  <submitted date="2008-07-08T14:18:00">
                     <contributor organization="Secure Elements, Inc.">Jeff Ito</contributor>
                  </submitted>
                  <status_change date="2008-07-11T10:55:58.360-04:00">DRAFT</status_change>
                  <status_change date="2008-07-28T04:00:20.824-04:00">INTERIM</status_change>
                  <status_change date="2008-08-18T04:00:47.533-04:00">ACCEPTED</status_change>
                  <modified comment="Added a negated test for 2008 R2 and changed the tests for ia-64 and windows to be case insensitive" date="2009-12-02T16:05:00.749-04:00">
                     <contributor organization="National Institute of Standards and Technology">Tim Harrison</contributor>
                  </modified>
                  <status_change date="2009-12-02T16:05:00.749-04:00">INTERIM</status_change>
                  <modified comment="Added anchors and spaces to regular expression" date="2009-12-04T14:54:00.233-05:00">
                     <contributor organization="National Institute of Standards and Technology">Tim Harrison</contributor>
                  </modified>
                  <modified comment="Added anchors and spaces to regular expression" date="2009-12-04T14:56:00.439-05:00">
                     <contributor organization="National Institute of Standards and Technology">Tim Harrison</contributor>
                  </modified>
                  <modified comment="Updating regex to include parenthesis" date="2009-12-08T17:32:00.144-05:00">
                     <contributor organization="National Institute of Standards and Technology">Tim Harrison</contributor>
                  </modified>
                  <status_change date="2010-01-04T04:01:38.631-05:00">ACCEPTED</status_change>
                  <modified comment="Removed the SP1 component in the CPE reference" date="2010-01-08T15:43:00.851-05:00">
                     <contributor organization="DTCC">J. Daniel Brown</contributor>
                  </modified>
                  <status_change date="2010-01-08T15:44:06.864-05:00">INTERIM</status_change>
                  <status_change date="2010-01-25T04:00:06.763-05:00">ACCEPTED</status_change>
                  <modified comment="EDITED oval:org.mitre.oval:def:5667 - Corrected the CPE names for Windows Server 2008" date="2010-12-21T10:57:00.617-05:00">
                     <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
                  </modified>
                  <status_change date="2010-12-21T11:00:21.141-05:00">INTERIM</status_change>
                  <status_change date="2011-02-07T04:00:13.308-05:00">ACCEPTED</status_change>
               </dates>
               <status>ACCEPTED</status>
            </oval_repository>
         </metadata>
         <criteria>
            <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/>
            <criterion comment="Windows Server 2008 is installed" test_ref="oval:org.mitre.oval:tst:7697"/>
            <criterion comment="a version of Windows for the ia64 architecture is installed" test_ref="oval:org.mitre.oval:tst:2747"/>
            <criterion negate="true" comment="Windows Server 2008 R2 is installed" test_ref="oval:org.mitre.oval:tst:10317"/>
         </criteria>
      </definition>
      <definition id="oval:org.mitre.oval:def:5950" version="3" class="inventory">
         <metadata>
            <title>Microsoft Windows 7 x64 Edition is installed</title>
            <affected family="windows">
               <platform>Microsoft Windows 7</platform>
            </affected>
            <reference source="CPE" ref_id="cpe:/o:microsoft:windows_7:::x64"/>
            <description>The operating system installed on the system is Microsoft Windows 7 x64 Edition</description>
            <oval_repository>
               <dates>
                  <submitted date="2009-09-08T11:27:37.975-04:00">
                     <contributor organization="Hewlett-Packard">Pai Peng</contributor>
                  </submitted>
                  <status_change date="2009-09-08T20:49:38.713-04:00">DRAFT</status_change>
                  <status_change date="2009-09-28T04:00:13.304-04:00">INTERIM</status_change>
                  <status_change date="2009-10-26T04:00:04.351-04:00">ACCEPTED</status_change>
                  <modified comment="Changed registry check for amd64 to be case insensitive equals" date="2009-11-19T18:33:00.593-05:00">
                     <contributor organization="Hewlett-Packard">Todd Dolinsky</contributor>
                  </modified>
                  <status_change date="2009-11-19T18:35:09.654-05:00">INTERIM</status_change>
                  <modified comment="Changed the tests for Windows 7 and windows to be case insensitive" date="2009-12-02T16:05:00.749-04:00">
                     <contributor organization="National Institute of Standards and Technology">Tim Harrison</contributor>
                  </modified>
                  <modified comment="Added anchors and spaces to regular expression" date="2009-12-04T14:55:00.171-05:00">
                     <contributor organization="National Institute of Standards and Technology">Tim Harrison</contributor>
                  </modified>
                  <modified comment="Updating regex to include parenthesis" date="2009-12-08T17:32:00.647-05:00">
                     <contributor organization="National Institute of Standards and Technology">Tim Harrison</contributor>
                  </modified>
                  <status_change date="2010-01-04T04:01:41.003-05:00">ACCEPTED</status_change>
               </dates>
               <status>ACCEPTED</status>
            </oval_repository>
         </metadata>
         <criteria>
            <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/>
            <criterion comment="Windows 7 is installed" test_ref="oval:org.mitre.oval:tst:10792"/>
            <criterion comment="a version of Windows for the x64 architecture is installed" test_ref="oval:org.mitre.oval:tst:3653"/>
         </criteria>
      </definition>
      <definition id="oval:org.mitre.oval:def:5954" version="4" class="inventory">
         <metadata>
            <title>Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed</title>
            <affected family="windows">
               <platform>Microsoft Windows Server 2008</platform>
            </affected>
            <reference source="CPE" ref_id="cpe:/o:microsoft:windows_server_2008::r2:itanium"/>
            <description>The operating system installed on the system is Microsoft Windows Server 2008 R2 Itanium Edition</description>
            <oval_repository>
               <dates>
                  <submitted date="2009-10-13T13:00:00">
                     <contributor organization="Gideon Technologies, Inc.">Dragos Prisaca</contributor>
                  </submitted>
                  <status_change date="2009-10-22T17:36:49.462-04:00">DRAFT</status_change>
                  <status_change date="2009-11-09T04:00:29.206-05:00">INTERIM</status_change>
                  <status_change date="2009-11-30T04:00:15.509-05:00">ACCEPTED</status_change>
                  <modified comment="Changed the tests for 2008 R2, ia64, and windows to be case insensitive" date="2009-12-02T16:05:00.749-04:00">
                     <contributor organization="National Institute of Standards and Technology">Tim Harrison</contributor>
                  </modified>
                  <status_change date="2009-12-02T16:05:00.749-04:00">INTERIM</status_change>
                  <modified comment="Added anchors and spaces to regular expression" date="2009-12-04T14:56:00.439-05:00">
                     <contributor organization="National Institute of Standards and Technology">Tim Harrison</contributor>
                  </modified>
                  <modified comment="Updating regex to include parenthesis" date="2009-12-08T17:32:00.144-05:00">
                     <contributor organization="National Institute of Standards and Technology">Tim Harrison</contributor>
                  </modified>
                  <status_change date="2010-01-04T04:01:41.428-05:00">ACCEPTED</status_change>
                  <modified comment="EDITED oval:org.mitre.oval:def:5954 - Corrected the CPE names for Windows Server 2008" date="2010-12-21T10:57:00.617-05:00">
                     <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
                  </modified>
                  <status_change date="2010-12-21T11:00:20.491-05:00">INTERIM</status_change>
                  <status_change date="2011-02-07T04:00:13.727-05:00">ACCEPTED</status_change>
               </dates>
               <status>ACCEPTED</status>
            </oval_repository>
         </metadata>
         <criteria>
            <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/>
            <criterion comment="Windows Server 2008 R2 is installed" test_ref="oval:org.mitre.oval:tst:10317"/>
            <criterion comment="a version of Windows for the ia64 architecture is installed" test_ref="oval:org.mitre.oval:tst:2747"/>
         </criteria>
      </definition>
      <definition id="oval:org.mitre.oval:def:6124" version="6" class="inventory">
         <metadata>
            <title>Microsoft Windows Vista (32-bit) Service Pack 2 is installed</title>
            <affected family="windows">
               <platform>Microsoft Windows Vista</platform>
            </affected>
            <reference source="CPE" ref_id="cpe:/o:microsoft:windows_vista::sp2:x86"/>
            <description>The operating system installed on the system is Microsoft Windows Vista (32-bit) Service Pack 2</description>
            <oval_repository>
               <dates>
                  <submitted date="2009-05-04T16:00:00">
                     <contributor organization="Gideon Technologies, Inc.">Dragos Prisaca</contributor>
                  </submitted>
                  <modified comment="Updated comment to include Vista and Server 2008" date="2009-05-07T10:32:00.713-04:00">
                     <contributor organization="Gideon Technologies, Inc.">Dragos Prisaca</contributor>
                  </modified>
                  <status_change date="2009-05-07T11:17:28.873-04:00">DRAFT</status_change>
                  <status_change date="2009-05-25T04:02:00.040-04:00">INTERIM</status_change>
                  <status_change date="2009-06-22T04:00:28.642-04:00">ACCEPTED</status_change>
                  <modified comment="Changed registry check for amd64 to be a case insensitive equals" date="2009-09-04T10:48:00.140-05:00">
                     <contributor organization="Hewlett-Packard">Todd Dolinsky</contributor>
                  </modified>
                  <status_change date="2009-09-07T04:00:27.692-04:00">INTERIM</status_change>
                  <status_change date="2009-09-28T04:00:15.275-04:00">ACCEPTED</status_change>
                  <modified comment="Replaced negation of test for x64 with a case insensitive test for x86 and changed the tests for SP2, Vista, and windows to be case insensitive" date="2009-12-02T16:05:00.749-04:00">
                     <contributor organization="National Institute of Standards and Technology">Tim Harrison</contributor>
                  </modified>
                  <status_change date="2009-12-02T16:05:00.749-04:00">INTERIM</status_change>
                  <modified comment="Added anchors and spaces to regular expression" date="2009-12-04T14:55:00.401-05:00">
                     <contributor organization="National Institute of Standards and Technology">Tim Harrison</contributor>
                  </modified>
                  <modified comment="Updating regex to include parenthesis" date="2009-12-08T17:31:00.669-05:00">
                     <contributor organization="National Institute of Standards and Technology">Tim Harrison</contributor>
                  </modified>
                  <status_change date="2010-01-04T04:01:42.790-05:00">ACCEPTED</status_change>
                  <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
                     <contributor organization="Telos">Sudhir Gandhe</contributor>
                  </modified>
                  <status_change date="2011-04-25T14:44:31.595-04:00">INTERIM</status_change>
                  <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
                     <contributor organization="G2, Inc.">Shane Shaffer</contributor>
                  </modified>
               </dates>
               <status>INTERIM</status>
            </oval_repository>
         </metadata>
         <criteria>
            <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/>
            <criterion comment="Windows Vista is installed" test_ref="oval:org.mitre.oval:tst:7914"/>
            <criterion comment="a version of Windows for the x86 architecture is installed" test_ref="oval:org.mitre.oval:tst:3823"/>
            <criterion comment="Win2K/XP/2003/Vista/2008 service pack 2 is installed" test_ref="oval:org.mitre.oval:tst:3019"/>
         </criteria>
      </definition>
      <definition id="oval:org.mitre.oval:def:6150" version="7" class="inventory">
         <metadata>
            <title>Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed</title>
            <affected family="windows">
               <platform>Microsoft Windows Server 2008</platform>
            </affected>
            <reference source="CPE" ref_id="cpe:/o:microsoft:windows_server_2008::sp2:itanium"/>
            <description>The operating system installed on the system is Microsoft Windows Server 2008 Itanium Edition Service Pack 2</description>
            <oval_repository>
               <dates>
                  <submitted date="2009-05-04T16:00:00">
                     <contributor organization="Gideon Technologies, Inc.">Dragos Prisaca</contributor>
                  </submitted>
                  <modified comment="Updated comment to include Vista and Server 2008" date="2009-05-07T10:32:00.713-04:00">
                     <contributor organization="Gideon Technologies, Inc.">Dragos Prisaca</contributor>
                  </modified>
                  <status_change date="2009-05-07T11:17:27.535-04:00">DRAFT</status_change>
                  <status_change date="2009-05-25T04:02:02.357-04:00">INTERIM</status_change>
                  <status_change date="2009-06-22T04:00:30.433-04:00">ACCEPTED</status_change>
                  <modified comment="Changed the tests for ia64, SP2, and windows to be case insensitive" date="2009-12-02T16:05:00.749-04:00">
                     <contributor organization="National Institute of Standards and Technology">Tim Harrison</contributor>
                  </modified>
                  <status_change date="2009-12-02T16:05:00.749-04:00">INTERIM</status_change>
                  <modified comment="Added anchors and spaces to regular expression" date="2009-12-04T14:54:00.233-05:00">
                     <contributor organization="National Institute of Standards and Technology">Tim Harrison</contributor>
                  </modified>
                  <status_change date="2009-12-21T04:00:47.950-05:00">ACCEPTED</status_change>
                  <modified comment="EDITED oval:org.mitre.oval:def:6150 - Corrected the CPE names for Windows Server 2008" date="2010-12-21T10:57:00.617-05:00">
                     <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
                  </modified>
                  <status_change date="2010-12-21T11:00:20.359-05:00">INTERIM</status_change>
                  <status_change date="2011-02-07T04:00:14.142-05:00">ACCEPTED</status_change>
                  <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
                     <contributor organization="Telos">Sudhir Gandhe</contributor>
                  </modified>
                  <status_change date="2011-04-25T14:43:51.991-04:00">INTERIM</status_change>
                  <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
                     <contributor organization="G2, Inc.">Shane Shaffer</contributor>
                  </modified>
               </dates>
               <status>INTERIM</status>
            </oval_repository>
         </metadata>
         <criteria>
            <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/>
            <criterion comment="Windows Server 2008 is installed" test_ref="oval:org.mitre.oval:tst:7697"/>
            <criterion comment="a version of Windows for the ia64 architecture is installed" test_ref="oval:org.mitre.oval:tst:2747"/>
            <criterion comment="Win2K/XP/2003/Vista/2008 service pack 2 is installed" test_ref="oval:org.mitre.oval:tst:3019"/>
         </criteria>
      </definition>
      <definition id="oval:org.mitre.oval:def:6158" version="5" class="inventory">
         <metadata>
            <title>Microsoft .NET Framework 2.0 Service Pack 2 is installed</title>
            <affected family="windows">
               <platform>Microsoft Windows 2000</platform>
               <platform>Microsoft Windows XP</platform>
               <platform>Microsoft Windows Server 2003</platform>
               <platform>Microsoft Windows Vista</platform>
               <product>Microsoft .NET Framework</product>
            </affected>
            <reference source="CPE" ref_id="cpe:/a:microsoft:.net_framework:2.0:sp2"/>
            <description>Microsoft .NET Framework 2.0 Service Pack 2 is installed</description>
            <oval_repository>
               <dates>
                  <submitted date="2009-10-13T13:00:00">
                     <contributor organization="Gideon Technologies, Inc.">Dragos Prisaca</contributor>
                  </submitted>
                  <status_change date="2009-10-22T17:36:54.998-04:00">DRAFT</status_change>
                  <status_change date="2009-11-09T04:00:38.208-05:00">INTERIM</status_change>
                  <status_change date="2009-11-30T04:00:23.181-05:00">ACCEPTED</status_change>
                  <modified comment="EDITED oval:org.mitre.oval:tst:10028 - Created OVAL vulnerability definition for MS10-070" date="2011-02-28T09:25:00.601-05:00">
                     <contributor organization="Symantec Corporation">Josh Turpin</contributor>
                  </modified>
                  <status_change date="2011-02-28T09:32:44.470-05:00">INTERIM</status_change>
                  <status_change date="2011-03-21T04:00:14.972-04:00">ACCEPTED</status_change>
                  <modified comment="EDITED oval:org.mitre.oval:tst:10028 - New Definitions for April 2011 Patch Tuesday" date="2011-04-18T00:17:00.032-04:00">
                     <contributor organization="Symantec Corporation">Josh Turpin</contributor>
                  </modified>
                  <status_change date="2011-04-18T00:18:31.230-04:00">INTERIM</status_change>
                  <status_change date="2011-05-09T04:01:38.435-04:00">ACCEPTED</status_change>
               </dates>
               <status>ACCEPTED</status>
            </oval_repository>
         </metadata>
         <criteria operator="AND">
            <criterion comment="The version of Mscorlib.dll is greater than or equal to 2.0.50727.3053" test_ref="oval:org.mitre.oval:tst:10028"/>
         </criteria>
      </definition>
      <definition id="oval:org.mitre.oval:def:6165" version="3" class="inventory">
         <metadata>
            <title>Microsoft Windows 7 (32-bit) is installed</title>
            <affected family="windows">
               <platform>Microsoft Windows 7</platform>
            </affected>
            <reference source="CPE" ref_id="cpe:/o:microsoft:windows_7:::x86"/>
            <description>The operating system installed on the system is Microsoft Windows 7 (32-bit)</description>
            <oval_repository>
               <dates>
                  <submitted date="2009-09-08T11:27:37.975-04:00">
                     <contributor organization="Hewlett-Packard">Pai Peng</contributor>
                  </submitted>
                  <status_change date="2009-09-08T20:49:38.394-04:00">DRAFT</status_change>
                  <status_change date="2009-09-28T04:00:16.403-04:00">INTERIM</status_change>
                  <status_change date="2009-10-19T04:00:10.283-04:00">ACCEPTED</status_change>
                  <modified comment="Replaced negation of test for x64 with a case insensitive test for x86 and changed the tests for Windows 7 and windows to be case insensitive" date="2009-12-02T16:05:00.749-04:00">
                     <contributor organization="National Institute of Standards and Technology">Tim Harrison</contributor>
                  </modified>
                  <status_change date="2009-12-02T16:05:00.749-04:00">INTERIM</status_change>
                  <modified comment="Added anchors and spaces to regular expression" date="2009-12-04T14:55:00.171-05:00">
                     <contributor organization="National Institute of Standards and Technology">Tim Harrison</contributor>
                  </modified>
                  <modified comment="Updating regex to include parenthesis" date="2009-12-08T17:32:00.647-05:00">
                     <contributor organization="National Institute of Standards and Technology">Tim Harrison</contributor>
                  </modified>
                  <status_change date="2010-01-04T04:01:43.679-05:00">ACCEPTED</status_change>
               </dates>
               <status>ACCEPTED</status>
            </oval_repository>
         </metadata>
         <criteria>
            <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/>
            <criterion comment="Windows 7 is installed" test_ref="oval:org.mitre.oval:tst:10792"/>
            <criterion comment="a version of Windows for the x86 architecture is installed" test_ref="oval:org.mitre.oval:tst:3823"/>
         </criteria>
      </definition>
      <definition id="oval:org.mitre.oval:def:6210" version="2" class="inventory">
         <metadata>
            <title>Microsoft Internet Explorer 8 is installed</title>
            <affected family="windows">
               <platform>Microsoft Windows XP</platform>
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows Server 2003</platform>
               <platform>Microsoft Windows Server 2008</platform>
               <platform>Microsoft Windows 7</platform>
            </affected>
            <reference source="CPE" ref_id="cpe:/a:microsoft:ie:8"/>
            <description>A version of Microsoft Internet Explorer 8 is installed.</description>
            <oval_repository>
               <dates>
                  <submitted date="2009-03-23T10:00:00">
                     <contributor organization="Gideon Technologies, Inc.">Dragos Prisaca</contributor>
                  </submitted>
                  <status_change date="2009-03-23T10:43:47.804-04:00">DRAFT</status_change>
                  <status_change date="2009-04-13T04:00:28.239-04:00">INTERIM</status_change>
                  <status_change date="2009-05-04T04:00:36.679-04:00">ACCEPTED</status_change>
                  <modified comment="Added additional affected platfroms" date="2009-09-24T11:17:00.434-04:00">
                     <contributor organization="Gideon Technologies, Inc.">Dragos Prisaca</contributor>
                  </modified>
                  <status_change date="2009-09-28T04:00:32.351-04:00">INTERIM</status_change>
                  <status_change date="2009-10-26T04:00:04.951-04:00">ACCEPTED</status_change>
               </dates>
               <status>ACCEPTED</status>
            </oval_repository>
         </metadata>
         <criteria>
            <criterion comment="Internet Explorer 8 is installed" test_ref="oval:org.mitre.oval:tst:9082"/>
         </criteria>
      </definition>
      <definition id="oval:org.mitre.oval:def:6216" version="8" class="inventory">
         <metadata>
            <title>Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed</title>
            <affected family="windows">
               <platform>Microsoft Windows Server 2008</platform>
            </affected>
            <reference source="CPE" ref_id="cpe:/o:microsoft:windows_server_2008::sp2:x64"/>
            <description>The operating system installed on the system is Microsoft Windows Server 2008 x64 Edition Service Pack 2</description>
            <oval_repository>
               <dates>
                  <submitted date="2009-05-04T16:00:00">
                     <contributor organization="Gideon Technologies, Inc.">Dragos Prisaca</contributor>
                  </submitted>
                  <status_change date="2009-05-07T11:17:37.293-04:00">DRAFT</status_change>
                  <status_change date="2009-05-25T04:02:07.677-04:00">INTERIM</status_change>
                  <status_change date="2009-06-22T04:00:31.225-04:00">ACCEPTED</status_change>
                  <modified comment="Changed registry check for amd64 to be a case insensitive equals" date="2009-09-04T10:48:00.140-05:00">
                     <contributor organization="Hewlett-Packard">Todd Dolinsky</contributor>
                  </modified>
                  <status_change date="2009-09-07T04:00:28.404-04:00">INTERIM</status_change>
                  <status_change date="2009-09-28T04:00:16.986-04:00">ACCEPTED</status_change>
                  <modified comment="Changed registry check for amd64 to be case insensitive equals" date="2009-11-19T18:33:00.593-05:00">
                     <contributor organization="Hewlett-Packard">Todd Dolinsky</contributor>
                  </modified>
                  <status_change date="2009-11-19T18:35:08.857-05:00">INTERIM</status_change>
                  <modified comment="Changed the tests for SP2 and windows to be case insensitive" date="2009-12-02T16:05:00.749-04:00">
                     <contributor organization="National Institute of Standards and Technology">Tim Harrison</contributor>
                  </modified>
                  <modified comment="Added anchors and spaces to regular expression" date="2009-12-04T14:54:00.233-05:00">
                     <contributor organization="National Institute of Standards and Technology">Tim Harrison</contributor>
                  </modified>
                  <status_change date="2009-12-21T04:00:49.331-05:00">ACCEPTED</status_change>
                  <modified comment="EDITED oval:org.mitre.oval:def:6216 - Corrected the CPE names for Windows Server 2008" date="2010-12-21T10:57:00.617-05:00">
                     <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
                  </modified>
                  <status_change date="2010-12-21T11:00:20.808-05:00">INTERIM</status_change>
                  <status_change date="2011-02-07T04:00:14.501-05:00">ACCEPTED</status_change>
                  <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
                     <contributor organization="Telos">Sudhir Gandhe</contributor>
                  </modified>
                  <status_change date="2011-04-25T14:44:24.321-04:00">INTERIM</status_change>
                  <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
                     <contributor organization="G2, Inc.">Shane Shaffer</contributor>
                  </modified>
               </dates>
               <status>INTERIM</status>
            </oval_repository>
         </metadata>
         <criteria>
            <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/>
            <criterion comment="Windows Server 2008 is installed" test_ref="oval:org.mitre.oval:tst:7697"/>
            <criterion comment="a version of Windows for the x64 architecture is installed" test_ref="oval:org.mitre.oval:tst:3653"/>
            <criterion comment="Win2K/XP/2003/Vista/2008 service pack 2 is installed" test_ref="oval:org.mitre.oval:tst:3019"/>
         </criteria>
      </definition>
      <definition id="oval:org.mitre.oval:def:6428" version="5" class="inventory">
         <metadata>
            <title>Microsoft .NET Framework 2.0 Service Pack 1 is installed</title>
            <affected family="windows">
               <platform>Microsoft Windows 2000</platform>
               <platform>Microsoft Windows XP</platform>
               <platform>Microsoft Windows Server 2003</platform>
               <platform>Microsoft Windows Vista</platform>
               <product>Microsoft .NET Framework</product>
            </affected>
            <reference source="CPE" ref_id="cpe:/a:microsoft:.net_framework:2.0:sp1"/>
            <description>Microsoft .NET Framework 2.0 Service Pack 1 is installed</description>
            <oval_repository>
               <dates>
                  <submitted date="2009-10-13T13:00:00">
                     <contributor organization="Gideon Technologies, Inc.">Dragos Prisaca</contributor>
                  </submitted>
                  <status_change date="2009-10-22T17:36:54.776-04:00">DRAFT</status_change>
                  <status_change date="2009-11-09T04:00:58.304-05:00">INTERIM</status_change>
                  <status_change date="2009-11-30T04:00:42.417-05:00">ACCEPTED</status_change>
                  <modified comment="EDITED oval:org.mitre.oval:tst:10609 - Created OVAL vulnerability definition for MS10-070" date="2011-02-28T09:25:00.601-05:00">
                     <contributor organization="Symantec Corporation">Josh Turpin</contributor>
                  </modified>
                  <status_change date="2011-02-28T09:32:47.656-05:00">INTERIM</status_change>
                  <status_change date="2011-03-21T04:00:15.336-04:00">ACCEPTED</status_change>
                  <modified comment="EDITED oval:org.mitre.oval:tst:10609 - Corrected object references for def:6428" date="2011-04-19T14:59:00.168-04:00">
                     <contributor organization="Symantec Corporation">Josh Turpin</contributor>
                  </modified>
                  <status_change date="2011-04-19T15:00:56.735-04:00">INTERIM</status_change>
                  <status_change date="2011-05-09T04:01:39.281-04:00">ACCEPTED</status_change>
               </dates>
               <status>ACCEPTED</status>
            </oval_repository>
         </metadata>
         <criteria operator="AND">
            <criterion comment="The version of Mscorlib.dll is greater than or equal to 2.0.50727.1433" test_ref="oval:org.mitre.oval:tst:10609"/>
            <criterion comment="The version of Mscorlib.dll is less than 2.0.50727.3053" test_ref="oval:org.mitre.oval:tst:10967"/>
         </criteria>
      </definition>
      <definition id="oval:org.mitre.oval:def:6438" version="3" class="inventory">
         <metadata>
            <title>Microsoft Windows Server 2008 R2 x64 Edition is installed</title>
            <affected family="windows">
               <platform>Microsoft Windows Server 2008</platform>
            </affected>
            <reference source="CPE" ref_id="cpe:/o:microsoft:windows_server_2008::r2:x64"/>
            <description>The operating system installed on the system is Microsoft Windows Server 2008 R2 x64 Edition</description>
            <oval_repository>
               <dates>
                  <submitted date="2009-10-13T13:00:00">
                     <contributor organization="Gideon Technologies, Inc.">Dragos Prisaca</contributor>
                  </submitted>
                  <status_change date="2009-10-22T17:36:49.340-04:00">DRAFT</status_change>
                  <status_change date="2009-11-09T04:00:59.900-05:00">INTERIM</status_change>
                  <modified comment="Changed registry check for amd64 to be case insensitive equals" date="2009-11-19T18:33:00.593-05:00">
                     <contributor organization="Hewlett-Packard">Todd Dolinsky</contributor>
                  </modified>
                  <modified comment="Changed the test for 2008 R2 and windows to be case insensitive" date="2009-12-02T16:05:00.749-04:00">
                     <contributor organization="National Institute of Standards and Technology">Tim Harrison</contributor>
                  </modified>
                  <status_change date="2009-12-02T16:05:00.749-04:00">INTERIM</status_change>
                  <modified comment="Added anchors and spaces to regular expression" date="2009-12-04T14:56:00.439-05:00">
                     <contributor organization="National Institute of Standards and Technology">Tim Harrison</contributor>
                  </modified>
                  <modified comment="Updating regex to include parenthesis" date="2009-12-08T17:32:00.144-05:00">
                     <contributor organization="National Institute of Standards and Technology">Tim Harrison</contributor>
                  </modified>
                  <status_change date="2010-01-04T04:01:47.909-05:00">ACCEPTED</status_change>
                  <modified comment="EDITED oval:org.mitre.oval:def:6438 - Corrected the CPE names for Windows Server 2008" date="2010-12-21T10:57:00.617-05:00">
                     <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
                  </modified>
                  <status_change date="2010-12-21T11:00:19.788-05:00">INTERIM</status_change>
                  <status_change date="2011-02-07T04:00:14.887-05:00">ACCEPTED</status_change>
               </dates>
               <status>ACCEPTED</status>
            </oval_repository>
         </metadata>
         <criteria>
            <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/>
            <criterion comment="Windows Server 2008 R2 is installed" test_ref="oval:org.mitre.oval:tst:10317"/>
            <criterion comment="a version of Windows for the x64 architecture is installed" test_ref="oval:org.mitre.oval:tst:3653"/>
         </criteria>
      </definition>
      <definition id="oval:org.mitre.oval:def:6856" version="3" class="inventory">
         <metadata>
            <title>Microsoft IIS 7.5 is installed</title>
            <affected family="windows">
               <platform>Microsoft Windows 7</platform>
               <platform>Microsoft Windows Server 2008</platform>
            </affected>
            <reference source="CPE" ref_id="cpe:/a:microsoft:iis:7.5"/>
            <description>The application Microsoft IIS 7.5 is installed.</description>
            <oval_repository>
               <dates>
                  <submitted date="2010-06-08T13:00:00">
                     <contributor organization="Symantec, Inc.">Dragos Prisaca</contributor>
                  </submitted>
                  <status_change date="2010-06-14T11:33:06.928-04:00">DRAFT</status_change>
                  <status_change date="2010-06-29T11:48:59.545-04:00">INTERIM</status_change>
                  <status_change date="2010-07-19T04:00:15.305-04:00">ACCEPTED</status_change>
               </dates>
               <status>ACCEPTED</status>
            </oval_repository>
         </metadata>
         <criteria>
            <criterion comment="IIS Major Version equals 7" test_ref="oval:org.mitre.oval:tst:7848"/>
            <criterion comment="IIS Minor Version equals 5" test_ref="oval:org.mitre.oval:tst:27660"/>
         </criteria>
      </definition>
      <definition id="oval:org.mitre.oval:def:11590" version="2" class="inventory">
         <metadata>
            <title>Microsoft Windows Server 2008 R2 x64 Edition Service Pack 1 Release Candidate is installed</title>
            <affected family="windows">
               <platform>Microsoft Windows Server 2008</platform>
            </affected>
            <reference source="CPE" ref_id="cpe:/o:microsoft:windows_server_2008:r2:sp1_rc:x64"/>
            <description>The operating system installed on the system is Microsoft Windows Server 2008 R2 x64 Service Pack 1 Release Candidate</description>
            <oval_repository>
               <dates>
                  <submitted date="2011-02-11T14:00:00">
                     <contributor organization="Symantec Corporation">Josh Turpin</contributor>
                  </submitted>
                  <status_change date="2011-02-11T15:40:40.333-05:00">DRAFT</status_change>
                  <status_change date="2011-02-28T04:00:02.996-05:00">INTERIM</status_change>
               </dates>
               <status>INTERIM</status>
            </oval_repository>
         </metadata>
         <criteria>
            <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/>
            <criterion comment="Windows Server 2008 R2 is installed" test_ref="oval:org.mitre.oval:tst:10317"/>
            <criterion comment="a version of Windows for the x64 architecture is installed" test_ref="oval:org.mitre.oval:tst:3653"/>
            <criterion comment="Service Pack 1 Release Candidate is installed" test_ref="oval:org.mitre.oval:tst:42453"/>
         </criteria>
      </definition>
      <definition id="oval:org.mitre.oval:def:11985" version="3" class="inventory">
         <metadata>
            <title>Microsoft Internet Explorer 9 is installed</title>
            <affected family="windows">
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows Server 2008</platform>
               <platform>Microsoft Windows 7</platform>
            </affected>
            <reference source="CPE" ref_id="cpe:/a:microsoft:ie:9"/>
            <description>A version of Microsoft Internet Explorer 9 is installed.</description>
            <oval_repository>
               <dates>
                  <submitted date="2011-03-15T15:15:00">
                     <contributor organization="G2, Inc.">Shane Shaffer</contributor>
                  </submitted>
                  <status_change date="2011-03-16T11:15:52.347-04:00">DRAFT</status_change>
                  <status_change date="2011-04-04T04:00:07.004-04:00">INTERIM</status_change>
                  <status_change date="2011-04-25T04:00:07.313-04:00">ACCEPTED</status_change>
               </dates>
               <status>ACCEPTED</status>
            </oval_repository>
         </metadata>
         <criteria>
            <criterion comment="Internet Explorer 9 is installed" test_ref="oval:org.mitre.oval:tst:42359"/>
         </criteria>
      </definition>
      <definition id="oval:org.mitre.oval:def:12159" version="3" class="inventory">
         <metadata>
            <title>Microsoft Windows Server 2008 R2 Itanium-Based Edition Service Pack 1 Release Candidate is installed</title>
            <affected family="windows">
               <platform>Microsoft Windows Server 2008</platform>
            </affected>
            <reference source="CPE" ref_id="cpe:/o:microsoft:windows_server_2008:r2:sp1_rc:itanium"/>
            <description>The operating system installed on the system is Microsoft Windows Server 2008 R2 Itanium Edition Service Pack 1 Release Candidate</description>
            <oval_repository>
               <dates>
                  <submitted date="2011-03-08T14:00:00">
                     <contributor organization="Symantec Corporation">Josh Turpin</contributor>
                  </submitted>
                  <status_change date="2011-03-08T13:52:13.749-05:00">DRAFT</status_change>
                  <status_change date="2011-03-28T04:00:05.916-04:00">INTERIM</status_change>
                  <status_change date="2011-04-18T04:00:10.218-04:00">ACCEPTED</status_change>
               </dates>
               <status>ACCEPTED</status>
            </oval_repository>
         </metadata>
         <criteria>
            <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/>
            <criterion comment="Windows Server 2008 R2 is installed" test_ref="oval:org.mitre.oval:tst:10317"/>
            <criterion comment="a version of Windows for the ia64 architecture is installed" test_ref="oval:org.mitre.oval:tst:2747"/>
            <criterion comment="Service Pack 1 Release Candidate is installed" test_ref="oval:org.mitre.oval:tst:42453"/>
         </criteria>
      </definition>
      <definition id="oval:org.mitre.oval:def:12292" version="5" class="inventory">
         <metadata>
            <title>Microsoft Windows 7 (32-bit) Service Pack 1 is installed</title>
            <affected family="windows">
               <platform>Microsoft Windows 7</platform>
            </affected>
            <reference source="CPE" ref_id="cpe:/o:microsoft:windows_7::sp1:x86"/>
            <description>The operating system installed on the system is Microsoft Windows 7 (32-bit) Service Pack 1</description>
            <oval_repository>
               <dates>
                  <submitted date="2011-02-23T11:42:00">
                     <contributor organization="G2, Inc.">Shane Shaffer</contributor>
                  </submitted>
                  <status_change date="2011-02-28T09:34:48.696-05:00">DRAFT</status_change>
                  <status_change date="2011-03-21T04:00:07.252-04:00">INTERIM</status_change>
                  <modified comment="EDITED oval:org.mitre.oval:ste:12087 - Modified pattern match for ste:12087." date="2011-03-29T13:23:00.865-04:00">
                     <contributor organization="SecPod Technologies">Chandan S</contributor>
                  </modified>
                  <status_change date="2011-04-18T04:00:16.014-04:00">ACCEPTED</status_change>
                  <modified comment="EDITED oval:org.mitre.oval:ste:12087 - Updated comment for ste:12087" date="2011-05-04T09:09:00.463-04:00">
                     <contributor organization="Secure Elements, Inc.">Dragos Prisaca</contributor>
                  </modified>
                  <status_change date="2011-05-04T09:14:35.212-04:00">INTERIM</status_change>
               </dates>
               <status>INTERIM</status>
            </oval_repository>
         </metadata>
         <criteria>
            <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/>
            <criterion comment="Windows 7 is installed" test_ref="oval:org.mitre.oval:tst:10792"/>
            <criterion comment="a version of Windows for the x86 architecture is installed" test_ref="oval:org.mitre.oval:tst:3823"/>
            <criterion comment="Service Pack 1 is installed" test_ref="oval:org.mitre.oval:tst:41933"/>
         </criteria>
      </definition>
      <definition id="oval:org.mitre.oval:def:12295" version="2" class="inventory">
         <metadata>
            <title>Microsoft Windows 7 (32-bit) Service Pack 1 Release Candidate is installed</title>
            <affected family="windows">
               <platform>Microsoft Windows 7</platform>
            </affected>
            <reference source="CPE" ref_id="cpe:/o:microsoft:windows_7::sp1_rc:x86"/>
            <description>The operating system installed on the system is Microsoft Windows 7 (32-bit) Service Pack 1 Release Candidate</description>
            <oval_repository>
               <dates>
                  <submitted date="2011-02-10T14:00:00">
                     <contributor organization="Symantec Corporation">Dragos Prisaca</contributor>
                  </submitted>
                  <status_change date="2011-02-11T15:40:39.682-05:00">DRAFT</status_change>
                  <status_change date="2011-02-28T04:00:09.647-05:00">INTERIM</status_change>
               </dates>
               <status>INTERIM</status>
            </oval_repository>
         </metadata>
         <criteria>
            <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/>
            <criterion comment="Windows 7 is installed" test_ref="oval:org.mitre.oval:tst:10792"/>
            <criterion comment="a version of Windows for the x86 architecture is installed" test_ref="oval:org.mitre.oval:tst:3823"/>
            <criterion comment="Service Pack 1 Release Candidate is installed" test_ref="oval:org.mitre.oval:tst:42453"/>
         </criteria>
      </definition>
      <definition id="oval:org.mitre.oval:def:12435" version="2" class="inventory">
         <metadata>
            <title>Microsoft Windows 7 x64 Service Pack 1 Release Candidate is installed</title>
            <affected family="windows">
               <platform>Microsoft Windows 7</platform>
            </affected>
            <reference source="CPE" ref_id="cpe:/o:microsoft:windows_7::sp1_rc:x64"/>
            <description>The operating system installed on the system is Microsoft Windows 7 x64 Service Pack 1 Release Candidate</description>
            <oval_repository>
               <dates>
                  <submitted date="2011-02-10T14:00:00">
                     <contributor organization="Symantec Corporation">Dragos Prisaca</contributor>
                  </submitted>
                  <status_change date="2011-02-11T15:40:40.063-05:00">DRAFT</status_change>
                  <status_change date="2011-02-28T04:00:14.170-05:00">INTERIM</status_change>
               </dates>
               <status>INTERIM</status>
            </oval_repository>
         </metadata>
         <criteria>
            <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/>
            <criterion comment="Windows 7 is installed" test_ref="oval:org.mitre.oval:tst:10792"/>
            <criterion comment="a version of Windows for the x64 architecture is installed" test_ref="oval:org.mitre.oval:tst:3653"/>
            <criterion comment="Service Pack 1 Release Candidate is installed" test_ref="oval:org.mitre.oval:tst:42453"/>
         </criteria>
      </definition>
      <definition id="oval:org.mitre.oval:def:12567" version="5" class="inventory">
         <metadata>
            <title>Microsoft Windows Server 2008 R2 x64 Service Pack 1 is installed</title>
            <affected family="windows">
               <platform>Microsoft Windows Server 2008</platform>
            </affected>
            <reference source="CPE" ref_id="cpe:/o:microsoft:windows_server_2008:r2:sp1:x64"/>
            <description>The operating system installed on the system is Microsoft Windows Server 2008 R2 x64 Service Pack 1</description>
            <oval_repository>
               <dates>
                  <submitted date="2011-03-08T14:00:00">
                     <contributor organization="Symantec Corporation">Josh Turpin</contributor>
                  </submitted>
                  <status_change date="2011-03-08T13:52:14.186-05:00">DRAFT</status_change>
                  <status_change date="2011-03-28T04:00:09.125-04:00">INTERIM</status_change>
                  <modified comment="EDITED oval:org.mitre.oval:ste:12087 - Modified pattern match for ste:12087." date="2011-03-29T13:23:00.865-04:00">
                     <contributor organization="SecPod Technologies">Chandan S</contributor>
                  </modified>
                  <status_change date="2011-04-18T04:00:28.076-04:00">ACCEPTED</status_change>
                  <modified comment="EDITED oval:org.mitre.oval:ste:12087 - Updated comment for ste:12087" date="2011-05-04T09:09:00.463-04:00">
                     <contributor organization="Secure Elements, Inc.">Dragos Prisaca</contributor>
                  </modified>
                  <status_change date="2011-05-04T09:14:36.142-04:00">INTERIM</status_change>
               </dates>
               <status>INTERIM</status>
            </oval_repository>
         </metadata>
         <criteria>
            <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/>
            <criterion comment="Windows Server 2008 R2 is installed" test_ref="oval:org.mitre.oval:tst:10317"/>
            <criterion comment="a version of Windows for the x64 architecture is installed" test_ref="oval:org.mitre.oval:tst:3653"/>
            <criterion comment="Service Pack 1 is installed" test_ref="oval:org.mitre.oval:tst:41933"/>
         </criteria>
      </definition>
      <definition id="oval:org.mitre.oval:def:12583" version="5" class="inventory">
         <metadata>
            <title>Microsoft Windows Server 2008 R2 Itanium-Based Edition Service Pack 1 is installed</title>
            <affected family="windows">
               <platform>Microsoft Windows Server 2008</platform>
            </affected>
            <reference source="CPE" ref_id="cpe:/o:microsoft:windows_server_2008:r2:sp1:itanium"/>
            <description>The operating system installed on the system is Microsoft Windows Server 2008 R2 Itanium Edition Service Pack 1</description>
            <oval_repository>
               <dates>
                  <submitted date="2011-03-08T14:00:00">
                     <contributor organization="Symantec Corporation">Josh Turpin</contributor>
                  </submitted>
                  <status_change date="2011-03-08T13:52:14.351-05:00">DRAFT</status_change>
                  <status_change date="2011-03-28T04:00:09.481-04:00">INTERIM</status_change>
                  <modified comment="EDITED oval:org.mitre.oval:ste:12087 - Modified pattern match for ste:12087." date="2011-03-29T13:23:00.865-04:00">
                     <contributor organization="SecPod Technologies">Chandan S</contributor>
                  </modified>
                  <status_change date="2011-04-18T04:00:29.145-04:00">ACCEPTED</status_change>
                  <modified comment="EDITED oval:org.mitre.oval:ste:12087 - Updated comment for ste:12087" date="2011-05-04T09:09:00.463-04:00">
                     <contributor organization="Secure Elements, Inc.">Dragos Prisaca</contributor>
                  </modified>
                  <status_change date="2011-05-04T09:14:35.800-04:00">INTERIM</status_change>
               </dates>
               <status>INTERIM</status>
            </oval_repository>
         </metadata>
         <criteria>
            <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/>
            <criterion comment="Windows Server 2008 R2 is installed" test_ref="oval:org.mitre.oval:tst:10317"/>
            <criterion comment="a version of Windows for the ia64 architecture is installed" test_ref="oval:org.mitre.oval:tst:2747"/>
            <criterion comment="Service Pack 1 is installed" test_ref="oval:org.mitre.oval:tst:41933"/>
         </criteria>
      </definition>
      <definition id="oval:org.mitre.oval:def:12627" version="5" class="inventory">
         <metadata>
            <title>Microsoft Windows 7 x64 Service Pack 1 is installed</title>
            <affected family="windows">
               <platform>Microsoft Windows 7</platform>
            </affected>
            <reference source="CPE" ref_id="cpe:/o:microsoft:windows_7::sp1:x64"/>
            <description>The operating system installed on the system is Microsoft Windows 7 x64 Service Pack 1</description>
            <oval_repository>
               <dates>
                  <submitted date="2011-02-23T11:42:00">
                     <contributor organization="G2, Inc.">Shane Shaffer</contributor>
                  </submitted>
                  <status_change date="2011-02-28T09:34:48.913-05:00">DRAFT</status_change>
                  <status_change date="2011-03-21T04:00:13.798-04:00">INTERIM</status_change>
                  <modified comment="EDITED oval:org.mitre.oval:ste:12087 - Modified pattern match for ste:12087." date="2011-03-29T13:23:00.865-04:00">
                     <contributor organization="SecPod Technologies">Chandan S</contributor>
                  </modified>
                  <status_change date="2011-04-18T04:00:32.009-04:00">ACCEPTED</status_change>
                  <modified comment="EDITED oval:org.mitre.oval:ste:12087 - Updated comment for ste:12087" date="2011-05-04T09:09:00.463-04:00">
                     <contributor organization="Secure Elements, Inc.">Dragos Prisaca</contributor>
                  </modified>
                  <status_change date="2011-05-04T09:14:35.542-04:00">INTERIM</status_change>
               </dates>
               <status>INTERIM</status>
            </oval_repository>
         </metadata>
         <criteria>
            <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/>
            <criterion comment="Windows 7 is installed" test_ref="oval:org.mitre.oval:tst:10792"/>
            <criterion comment="a version of Windows for the x64 architecture is installed" test_ref="oval:org.mitre.oval:tst:3653"/>
            <criterion comment="Service Pack 1 is installed" test_ref="oval:org.mitre.oval:tst:41933"/>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.oval:def:115301" version="1" class="inventory">
         <metadata>
            <title>Microsoft Windows Server 2008 R2 (Gold/RTM) Itanium-Based Edition is installed</title>
            <affected family="windows">
               <platform>Microsoft Windows Server 2008</platform>
            </affected>
            <reference source="CPE" ref_id="cpe:/o:microsoft:windows_server_2008:rtm:r2:itanium"/>
            <description>The operating system installed on the system is Microsoft Windows Server 2008 R2 (Gold/RTM) Itanium Edition</description>
         </metadata>
         <criteria>
            <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/>
            <criterion comment="Windows Server 2008 R2 is installed" test_ref="oval:org.mitre.oval:tst:10317"/>
            <criterion comment="a version of Windows for the ia64 architecture is installed" test_ref="oval:org.mitre.oval:tst:2747"/>
            <criterion comment="Gold/RTM is installed" test_ref="oval:gov.nist.oval:tst:1153001"/>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.oval:def:115302" version="1" class="inventory">
         <metadata>
            <title>Microsoft Windows 7 (Gold/RTM) (32-bit) is installed</title>
            <affected family="windows">
               <platform>Microsoft Windows 7</platform>
            </affected>
            <reference ref_id="cpe:/o:microsoft:windows_7:rtm::x86" source="CPE"/>
            <description>The operating system installed on the system is Microsoft Windows 7 (Gold/RTM) (32-bit)</description>
         </metadata>
         <criteria>
            <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/>
            <criterion comment="Windows 7 is installed" test_ref="oval:org.mitre.oval:tst:10792"/>
            <criterion comment="a version of Windows for the x86 architecture is installed" test_ref="oval:org.mitre.oval:tst:3823"/>
            <criterion comment="Gold/RTM is installed" test_ref="oval:gov.nist.oval:tst:1153001"/>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.oval:def:115303" version="1" class="inventory">
         <metadata>
            <title>Microsoft Windows Server 2008 R2 (Gold/RTM) x64 Edition is installed</title>
            <affected family="windows">
               <platform>Microsoft Windows Server 2008</platform>
            </affected>
            <reference source="CPE" ref_id="cpe:/o:microsoft:windows_server_2008:rtm:r2:x64"/>
            <description>The operating system installed on the system is Microsoft Windows Server 2008 R2 (Gold/RTM) x64 Edition</description>
         </metadata>
         <criteria>
            <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/>
            <criterion comment="Windows Server 2008 R2 is installed" test_ref="oval:org.mitre.oval:tst:10317"/>
            <criterion comment="a version of Windows for the x64 architecture is installed" test_ref="oval:org.mitre.oval:tst:3653"/>
            <criterion comment="Gold/RTM is installed" test_ref="oval:gov.nist.oval:tst:1153001"/>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11582" version="1" class="inventory">
         <metadata>
            <title>Microsoft .NET Framework 3.5 (Gold) is installed</title>
            <affected family="windows">
               <platform>Microsoft Windows XP</platform>
               <platform>Microsoft Windows Server 2003</platform>
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows Server 2008</platform>
               <product>.NET Framework</product>
            </affected>
            <description>Microsoft .NET Framework 3.5 (Gold) is installed</description>
         </metadata>
         <criteria operator="AND">
            <criterion comment="System.Net.dll version is greater than or equal to 3.5.21022.8" test_ref="oval:gov.nist.fdcc.patch:tst:115803"/>
            <criterion comment="System.Net.dll version is less than 3.5.30729.1" test_ref="oval:gov.nist.fdcc.patch:tst:115804"/>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:11583" version="3" class="inventory">
         <metadata>
            <title>Microsoft .NET Framework 3.5 Service Pack 1, or later, is installed</title>
            <affected family="windows">
               <platform>Microsoft Windows XP</platform>
               <platform>Microsoft Windows Server 2003</platform>
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows Server 2008</platform>
               <product>.NET Framework</product>
            </affected>
            <description>Microsoft .NET Framework 3.5 Service Pack 1, or later, is installed</description>
         </metadata>
         <criteria operator="AND">
            <criterion comment="System.Net.dll version is greater than or equal to 3.5.30729.1" test_ref="oval:gov.nist.fdcc.patch:tst:115805"/>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:115279" version="2" class="inventory">
         <metadata>
            <title>Printers Virtual Directory for Microsoft IIS is installed</title>
            <affected family="windows">
               <platform>Microsoft Windows XP</platform>
            </affected>
            <description>The component Printers Virtual Directory for Microsoft IIS is installed.</description>
         </metadata>
         <criteria>
            <criterion comment="Printers Virtual Directory registry entry equals 1" test_ref="oval:gov.nist.fdcc.patch:tst:115302"/>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:115285" version="2" class="inventory">
         <metadata>
            <title>Microsoft .NET Framework 1.1 Service Pack 1, or later, is Installed</title>
            <affected family="windows">
               <platform>Microsoft Windows XP</platform>
               <platform>Microsoft Windows Vista</platform>
               <product>.NET Framework</product>
            </affected>
            <description>Microsoft .NET Framework 1.1 SP1 is Installed</description>
         </metadata>
         <criteria operator="AND">
            <criterion comment="Mscorlib.dll version is greater than or equal to 1.1.4322.2032" test_ref="oval:org.mitre.oval:tst:4041"/>
            <!--<criterion comment="Mscorlib.dll version is less than 1.1.4322.x" test_ref="oval:gov.nist.fdcc.patch:tst:"/>-->
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:115291" version="2" class="inventory">
         <metadata>
            <title>Microsoft Windows Movie Maker 2.1 is installed</title>
            <affected family="windows">
               <product>Microsoft Windows Movie Maker 2.1</product>
            </affected>
            <reference source="CPE" ref_id="cpe:/a:microsoft:windows_movie_maker:2.1"/>
            <description>Microsoft Windows Movie Maker 2.1 is installed</description>
         </metadata>
         <criteria operator="OR">
            <criteria operator="AND">
               <criterion comment="Moviemk.exe version greater than or equal to 2.1.0.0" test_ref="oval:gov.nist.fdcc.patch:tst:1152911"/>
               <criterion comment="Moviemk.exe version less than 2.2.0.0" test_ref="oval:gov.nist.fdcc.patch:tst:1152912"/>
            </criteria>
            <criteria operator="AND">
               <criterion comment="Wmoviemk.exe version greater than or equal to 2.1.0.0" test_ref="oval:gov.nist.fdcc.patch:tst:1152913"/>
               <criterion comment="Wmoviemk.exe version less than 2.2.0.0" test_ref="oval:gov.nist.fdcc.patch:tst:1152914"/>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:115292" version="2" class="inventory">
         <metadata>
            <title>Microsoft Windows Movie Maker 2.6 is installed</title>
            <affected family="windows">
               <product>Microsoft Windows Movie Maker 2.6</product>
            </affected>
            <reference source="CPE" ref_id="cpe:/a:microsoft:windows_movie_maker:2.6"/>
            <description>Microsoft Windows Movie Maker 2.6 is installed</description>
         </metadata>
         <criteria operator="OR">
            <criteria operator="AND">
               <criterion comment="Moviemk.exe version greater than or equal to 2.6.0.0" test_ref="oval:gov.nist.fdcc.patch:tst:1152915"/>
               <criterion comment="Moviemk.exe version less than 2.7.0.0" test_ref="oval:gov.nist.fdcc.patch:tst:1152916"/>
            </criteria>
            <criteria operator="AND">
               <criterion comment="Wmoviemk.exe version greater than or equal to 2.6.0.0" test_ref="oval:gov.nist.fdcc.patch:tst:1152917"/>
               <criterion comment="Wmoviemk.exe version less than 2.7.0.0" test_ref="oval:gov.nist.fdcc.patch:tst:1152918"/>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:115293" version="2" class="inventory">
         <metadata>
            <title>Microsoft Windows Live Movie Maker 6.0 is installed</title>
            <affected family="windows">
               <product>Microsoft Windows Live Movie Maker 6.0</product>
            </affected>
            <reference source="CPE" ref_id="cpe:/a:microsoft:windows_live_movie_maker:6.0"/>
            <description>Microsoft Windows Live Movie Maker 6.0 is installed</description>
         </metadata>
         <criteria operator="OR">
            <criteria operator="AND">
               <criterion comment="Moviemk.exe version greater than or equal to 6.0.0.0" test_ref="oval:gov.nist.fdcc.patch:tst:1152919"/>
               <criterion comment="Moviemk.exe version less than 6.1.0.0" test_ref="oval:gov.nist.fdcc.patch:tst:11529110"/>
            </criteria>
            <criteria operator="AND">
               <criterion comment="Wmoviemk.exe version greater than or equal to 6.0.0.0" test_ref="oval:gov.nist.fdcc.patch:tst:11529111"/>
               <criterion comment="Wmoviemk.exe version less than 6.1.0.0" test_ref="oval:gov.nist.fdcc.patch:tst:11529112"/>
            </criteria>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:115294" version="1" class="inventory">
         <metadata>
            <title>The Internet Printing Client is installed</title>
            <affected family="windows">
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows Server 2008</platform>
            </affected>
            <description>The Internet Printing Client is installed.</description>
         </metadata>
         <criteria>
            <criterion comment="The Internet Printing Client registry entry equals 1" test_ref="oval:gov.nist.fdcc.patch:tst:4600003"/>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:115295" version="1" class="inventory">
         <metadata>
            <title>Microsoft .NET Framework 4.0, or later, is installed</title>
            <affected family="windows">
               <platform>Microsoft Windows XP</platform>
               <platform>Microsoft Windows Server 2003</platform>
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows Server 2008</platform>
               <product>.NET Framework</product>
            </affected>
            <description>Microsoft .NET Framework 4.0, or later, is installed</description>
         </metadata>
         <criteria operator="AND">
            <criterion comment="Mscorlib.dll version is greater than or equal to 4.0.30319.1" test_ref="oval:gov.nist.fdcc.patch:tst:1152950"/>
            <!--<criterion comment="Mscorlib.dll version is less than 4.0.x" test_ref="oval:gov.nist.fdcc.patch:tst:"/>-->
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:115298" version="1" class="inventory">
         <metadata>
            <title>Microsoft Internet Information Services (IIS) FTP Service 7.0 is installed</title>
            <affected family="windows">
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows Server 2008</platform>
            </affected>
            <reference source="CPE" ref_id="cpe:/a:microsoft:iis_ftp:7.0"/>
            <description>The Microsoft Internet Information Services (IIS) FTP Service 7.0 is installed.</description>
         </metadata>
         <criteria>
            <extend_definition comment="Microsoft IIS 7.0 is installed" definition_ref="oval:org.mitre.oval:def:5377"/>
            <criterion comment="HKLM/Software/Microsoft/InetStp/Components/FTPServer equals 1" test_ref="oval:gov.nist.fdcc.patch:tst:1152981"/>
         </criteria>
      </definition>
      <definition id="oval:gov.nist.fdcc.patch:def:115299" version="1" class="inventory">
         <metadata>
            <title>Microsoft Internet Information Services (IIS) FTP Service 7.5 is installed</title>
            <affected family="windows">
               <platform>Microsoft Windows Vista</platform>
               <platform>Microsoft Windows Server 2008</platform>
            </affected>
            <reference source="CPE" ref_id="cpe:/a:microsoft:iis_ftp:7.5"/>
            <description>The Microsoft Internet Information Services (IIS) FTP Service 7.5 is installed.</description>
         </metadata>
         <criteria>
            <criterion comment="HKLM/Software/Microsoft/IIS Extensions/Ftp Server/Install equals 1" test_ref="oval:gov.nist.fdcc.patch:tst:1152991"/>
            <criterion comment="HKLM/Software/Microsoft/IIS Extensions/Ftp Server/Version matches 7.5" test_ref="oval:gov.nist.fdcc.patch:tst:1152992"/>
         </criteria>
      </definition>
      <!-- ==================================================================================================== -->
      <!-- ======================================= EXTENDED DEFINITIONS =======================================-->
      <!-- ==================================================================================================== -->
   </definitions>
   <!-- ==================================================================================================== -->
   <!-- ============================================== TESTS =============================================== -->
   <!-- ==================================================================================================== -->
   <tests>
      <family_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:org.mitre.oval:tst:99" version="1" comment="the installed operating system is part of the Microsoft Windows family" check_existence="at_least_one_exists" check="only one">
         <object object_ref="oval:org.mitre.oval:obj:99"/>
         <state state_ref="oval:org.mitre.oval:ste:99"/>
      </family_test>
      <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:164" version="1" comment="IIS Minor Version equals 0" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:938"/>
         <state state_ref="oval:org.mitre.oval:ste:165"/>
      </registry_test>
      <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:178" version="1" comment="Internet Explorer 7 is installed" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:247"/>
         <state state_ref="oval:org.mitre.oval:ste:115"/>
      </registry_test>
      <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:725" version="1" check="at least one" comment="Microsoft Data Access Components 2.8 (SP1) is installed" check_existence="at_least_one_exists">
         <object object_ref="oval:org.mitre.oval:obj:359"/>
         <state state_ref="oval:org.mitre.oval:ste:651"/>
      </registry_test>
      <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:786" version="2" check_existence="at_least_one_exists" comment="Windows Media Player 9 is installed" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:593"/>
         <state state_ref="oval:org.mitre.oval:ste:705"/>
      </registry_test>
      <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:833" version="2" comment="Windows Media Player 10 is installed" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:630"/>
         <state state_ref="oval:org.mitre.oval:ste:746"/>
      </registry_test>
      <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:1633" version="3" comment="Microsoft Outlook Express 6 for Windows XP/2003 is installed" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:566"/>
         <state state_ref="oval:org.mitre.oval:ste:1485"/>
      </registry_test>
      <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:2333" version="2" comment="Internet Explorer 6 (any patch level) is installed" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:247"/>
         <state state_ref="oval:org.mitre.oval:ste:2185"/>
      </registry_test>
      <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:2747" version="2" comment="a version of Windows for the ia64 architecture is installed" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:1576"/>
         <state state_ref="oval:org.mitre.oval:ste:2568"/>
      </registry_test>
      <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:2838" version="1" comment="Windows XP is installed" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:419"/>
         <state state_ref="oval:org.mitre.oval:ste:2657"/>
      </registry_test>
      <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:2843" version="4" comment="Win2K/XP/2003/Vista service pack 1 is installed" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:717"/>
         <state state_ref="oval:org.mitre.oval:ste:2662"/>
      </registry_test>
      <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:3019" version="3" comment="in2K/XP/2003/Vista/2008 service pack 2 is installed" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:717"/>
         <state state_ref="oval:org.mitre.oval:ste:2827"/>
      </registry_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:3168" version="1" comment="Mscorlib.dll version is greater than or equal to 1.0.3705.6018" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:org.mitre.oval:obj:2694"/>
         <state state_ref="oval:org.mitre.oval:ste:3283"/>
      </file_test>
      <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:3203" version="1" comment="PlayerVersion is greater than 11.0.0.0" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:2581"/>
         <state state_ref="oval:org.mitre.oval:ste:3577"/>
      </registry_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:3378" version="3" comment="System.web.dll version is less than 2.0.50727.832" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:org.mitre.oval:obj:4"/>
         <state state_ref="oval:org.mitre.oval:ste:3944"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:3422" version="3" comment="Vgx.dll version is less than 6.0.3790.4106" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:308"/>
         <state state_ref="oval:org.mitre.oval:ste:3490"/>
      </file_test>
      <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:3506" version="4" comment="Windows Mail version 6.0" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:1809"/>
         <state state_ref="oval:org.mitre.oval:ste:3814"/>
      </registry_test>
      <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:3653" version="3" comment="a version of Windows for the x64 architecture is installed" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:1576"/>
         <state state_ref="oval:org.mitre.oval:ste:3180"/>
      </registry_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:3761" version="1" comment="Mscorlib.dll version is greater than or equal to 2.0.50727.42" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:org.mitre.oval:obj:2009"/>
         <state state_ref="oval:org.mitre.oval:ste:3202"/>
      </file_test>
      <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:3823" version="2" comment="a version of Windows for the x86 architecture is installed" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:1576"/>
         <state state_ref="oval:org.mitre.oval:ste:3649"/>
      </registry_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:3856" version="3" comment="Vgx.dll version is less than 6.0.2900.3164" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:308"/>
         <state state_ref="oval:org.mitre.oval:ste:3185"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:4041" version="1" comment="Mscorlib.dll version is greater than or equal to 1.1.4322.2032" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:org.mitre.oval:obj:1855"/>
         <state state_ref="oval:org.mitre.oval:ste:3147"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:4154" version="2" comment="System.web.dll version is less than 1.0.3705.6060" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:org.mitre.oval:obj:263"/>
         <state state_ref="oval:org.mitre.oval:ste:3360"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:4182" version="3" comment="Vgx.dll version is less than 7.0.6000.20628" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:308"/>
         <state state_ref="oval:org.mitre.oval:ste:3412"/>
      </file_test>
      <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:4192" version="1" comment="PlayerVersion is less than 12.0.0.0" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:2581"/>
         <state state_ref="oval:org.mitre.oval:ste:3702"/>
      </registry_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:7093" version="1" comment="Bthport.sys version is less than 5.1.2600.3351" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:org.mitre.oval:obj:5807"/>
         <state state_ref="oval:org.mitre.oval:ste:3064"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:7491" version="2" comment="Bthport.sys version is less than 6.0.6001.18064" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:org.mitre.oval:obj:5807"/>
         <state state_ref="oval:org.mitre.oval:ste:3472"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:7492" version="1" comment="Bthport.sys version is greater than or equal to 6.0.6001.18000" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:org.mitre.oval:obj:5807"/>
         <state state_ref="oval:org.mitre.oval:ste:4557"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:7493" version="1" comment="Bthport.sys version is greater than or equal to 6.0.6001.22000" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:org.mitre.oval:obj:5807"/>
         <state state_ref="oval:org.mitre.oval:ste:4709"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:7494" version="1" comment="Bthport.sys version is less than 6.0.6001.22168" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:org.mitre.oval:obj:5807"/>
         <state state_ref="oval:org.mitre.oval:ste:3473"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:7565" version="1" comment="Rmcast.sys version is less than 5.1.2600.5598." check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:org.mitre.oval:obj:41"/>
         <state state_ref="oval:org.mitre.oval:ste:3613"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:7634" version="1" comment="Rmcast.sys version is less than 5.2.3790.4290." check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:org.mitre.oval:obj:41"/>
         <state state_ref="oval:org.mitre.oval:ste:2994"/>
      </file_test>
      <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:7697" version="2" comment="Windows Server 2008 is installed" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:5590"/>
         <state state_ref="oval:org.mitre.oval:ste:3207"/>
      </registry_test>
      <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:7734" version="1" comment="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{40F23EB7-B397-4285-8F3C-AACE4FA40309}!Compatibility Flags is not equal to 0x00000400" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:5016"/>
         <state state_ref="oval:org.mitre.oval:ste:3992"/>
      </registry_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:7805" version="1" comment="Bthport.sys does exist" check_existence="none_exist" check="all">
         <object object_ref="oval:org.mitre.oval:obj:5807"/>
      </file_test>
      <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:7814" version="4" comment="Win2K/XP/2003 service pack 3 is installed" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:717"/>
         <state state_ref="oval:org.mitre.oval:ste:3794"/>
      </registry_test>
      <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:7848" version="1" comment="IIS Major Version equals 7" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:1754"/>
         <state state_ref="oval:org.mitre.oval:ste:2979"/>
      </registry_test>
      <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:7914" version="4" comment="Windows Vista is installed" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:5590"/>
         <state state_ref="oval:org.mitre.oval:ste:3828"/>
      </registry_test>
      <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:7937" version="1" comment="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{40F23EB7-B397-4285-8F3C-AACE4FA40309}!Compatibility Flags does not exist" check_existence="none_exist" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:5016"/>
      </registry_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:8009" version="1" comment="Bthport.sys version is less than 5.1.2600.5580" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:org.mitre.oval:obj:5807"/>
         <state state_ref="oval:org.mitre.oval:ste:3991"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:8091" version="1" comment="Rmcast.sys version is less than 5.1.2600.3369." check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:org.mitre.oval:obj:41"/>
         <state state_ref="oval:org.mitre.oval:ste:3114"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:8200" version="1" comment="Es.dll version is less than 2001.12.4720.4282" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:org.mitre.oval:obj:6432"/>
         <state state_ref="oval:org.mitre.oval:ste:4318"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:8612" version="1" comment="Win32k.sys version is less than 5.1.2600.3446" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:org.mitre.oval:obj:570"/>
         <state state_ref="oval:org.mitre.oval:ste:4286"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:8662" version="1" comment="Wmpeffects.dll version is less than 11.0.6001.7002" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:org.mitre.oval:obj:6244"/>
         <state state_ref="oval:org.mitre.oval:ste:4325"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:8857" version="1" comment="Win32spl.dll version is less than 5.2.3790.4371" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:6595"/>
         <state state_ref="oval:org.mitre.oval:ste:4397"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:8911" version="1" comment="Ipsecsvc.dll version is less than 6.0.6001.18094" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:5597"/>
         <state state_ref="oval:org.mitre.oval:ste:4307"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:8928" version="1" comment="Win32k.sys version is less than 6.0.6001.18141" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:org.mitre.oval:obj:570"/>
         <state state_ref="oval:org.mitre.oval:ste:4443"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:8968" version="1" comment="Es.dll version is less than 2001.12.6931.18057" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:org.mitre.oval:obj:6432"/>
         <state state_ref="oval:org.mitre.oval:ste:4368"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:9011" version="1" comment="Win32spl.dll version is less than 6.0.6001.18119" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:6595"/>
         <state state_ref="oval:org.mitre.oval:ste:4104"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:9013" version="1" comment="Es.dll version is less than 2001.12.4414.320" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:org.mitre.oval:obj:6432"/>
         <state state_ref="oval:org.mitre.oval:ste:4129"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:9019" version="1" comment="Es.dll version is less than 2001.12.4414.706" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:org.mitre.oval:obj:6432"/>
         <state state_ref="oval:org.mitre.oval:ste:3371"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:9036" version="1" comment="Wmpeffects.dll version is less than 11.0.5721.5252" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:org.mitre.oval:obj:6244"/>
         <state state_ref="oval:org.mitre.oval:ste:4176"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:9058" version="1" comment="Netapi32.dll version is less than 5.2.3790.4392" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:160"/>
         <state state_ref="oval:org.mitre.oval:ste:4375"/>
      </file_test>
      <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:9082" version="1" comment="Internet Explorer 8 is installed" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:247"/>
         <state state_ref="oval:org.mitre.oval:ste:4421"/>
      </registry_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:9090" version="1" comment="Netapi32.dll version is less than 6.0.6001.22288" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:160"/>
         <state state_ref="oval:org.mitre.oval:ste:4418"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:9112" version="1" comment="Win32k.sys version is less than 5.2.3790.4375" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:org.mitre.oval:obj:570"/>
         <state state_ref="oval:org.mitre.oval:ste:4340"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:9140" version="1" comment="Netapi32.dll version is less than 6.0.6001.18157" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:160"/>
         <state state_ref="oval:org.mitre.oval:ste:4117"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:9266" version="1" comment="Netapi32.dll version is less than 5.1.2600.5694" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:160"/>
         <state state_ref="oval:org.mitre.oval:ste:4450"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:9281" version="1" comment="Win32spl.dll version is less than 5.1.2600.3435" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:6595"/>
         <state state_ref="oval:org.mitre.oval:ste:4186"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:9293" version="1" comment="Win32k.sys version is less than 5.1.2600.5676" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:org.mitre.oval:obj:570"/>
         <state state_ref="oval:org.mitre.oval:ste:4331"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:9314" version="1" comment="Netapi32.dll version is less than 5.1.2600.3462" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:160"/>
         <state state_ref="oval:org.mitre.oval:ste:4200"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:9352" version="1" comment="Win32spl.dll version is less than 5.1.2600.5664" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:6595"/>
         <state state_ref="oval:org.mitre.oval:ste:4312"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:9510" version="1" comment="Gdi32.dll version is less than 6.0.6001.18159" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:org.mitre.oval:obj:279"/>
         <state state_ref="oval:org.mitre.oval:ste:4482"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:9535" version="1" comment="Mrxsmb10.sys version is greater than or equal to 6.0.6001.22000" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:6575"/>
         <state state_ref="oval:org.mitre.oval:ste:4525"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:9758" version="1" comment="Wmp.dll version is less than 10.0.0.4074" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:592"/>
         <state state_ref="oval:org.mitre.oval:ste:5384"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:9769" version="1" comment="Wmp.dll version is less than 11.0.5721.5268" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:592"/>
         <state state_ref="oval:org.mitre.oval:ste:5244"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:10001" version="1" comment="Mswebdvd.dll version is less than 6.5.2600.5857" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:org.mitre.oval:obj:7106"/>
         <state state_ref="oval:org.mitre.oval:ste:5240"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:10003" version="1" comment="Wmp.dll version is less than 11.0.6002.18065" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:592"/>
         <state state_ref="oval:org.mitre.oval:ste:5276"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:10010" version="1" comment="Wmp.dll version is less than 9.0.0.4507" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:592"/>
         <state state_ref="oval:org.mitre.oval:ste:5269"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:10028" version="3" comment="The version of Mscorlib.dll is greater than or equal to 2.0.50727.3053" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:org.mitre.oval:obj:2009"/>
         <state state_ref="oval:org.mitre.oval:ste:5121"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:10183" version="1" comment="Wmp.dll version is less than 9.0.0.3271" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:592"/>
         <state state_ref="oval:org.mitre.oval:ste:5202"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:10251" version="1" comment="Spwmp.dll version is greater than or equal to 6.0.6001.22000" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:6937"/>
         <state state_ref="oval:org.mitre.oval:ste:4709"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:10291" version="1" comment="Wwmp.dll version is less than 10.0.0.4006" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:559"/>
         <state state_ref="oval:org.mitre.oval:ste:4958"/>
      </file_test>
      <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:10317" version="4" comment="Windows Server 2008 R2 is installed" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:5590"/>
         <state state_ref="oval:org.mitre.oval:ste:5506"/>
      </registry_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:10473" version="1" comment="Spwmp.dll version is greater than or equal 6.0.6001.18000" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:6937"/>
         <state state_ref="oval:org.mitre.oval:ste:4557"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:10482" version="1" comment="Dhtmled.ocx version is less than 6.1.0.9247" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:org.mitre.oval:obj:377"/>
         <state state_ref="oval:org.mitre.oval:ste:4967"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:10523" version="1" comment="Wmp.dll version is less than 11.0.6001.7007" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:592"/>
         <state state_ref="oval:org.mitre.oval:ste:5058"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:10563" version="1" comment="Atl.dll version is less than 3.5.2284.2" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:115770"/>
         <state state_ref="oval:org.mitre.oval:ste:4971"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:10609" version="3" comment="The version of Mscorlib.dll is greater than or equal to 2.0.50727.1433" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:org.mitre.oval:obj:2009"/>
         <state state_ref="oval:org.mitre.oval:ste:5499"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:10619" version="1" comment="Tcpip.sys version is greater than or equal 6.0.6002.22000" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:588"/>
         <state state_ref="oval:org.mitre.oval:ste:4321"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:10624" version="1" comment="Spwmp.dll version is greater than or equal 6.0.6002.22000" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:6937"/>
         <state state_ref="oval:org.mitre.oval:ste:4321"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:10648" version="1" comment="Spwmp.dll version is greater than or equal 6.0.6002.18000" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:6937"/>
         <state state_ref="oval:org.mitre.oval:ste:4510"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:10694" version="1" comment="Mswebdvd.dll version is less than 6.5.3790.4564" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:org.mitre.oval:obj:7106"/>
         <state state_ref="oval:org.mitre.oval:ste:5076"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:10699" version="1" comment="Wmp.dll version is less than 11.0.6002.22172" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:592"/>
         <state state_ref="oval:org.mitre.oval:ste:5290"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:10759" version="1" comment="Wmp.dll version is less than 11.0.6001.7114" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:592"/>
         <state state_ref="oval:org.mitre.oval:ste:4811"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:10763" version="1" comment="Mswebdvd.dll version is less than 6.5.2600.3610" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:org.mitre.oval:obj:7106"/>
         <state state_ref="oval:org.mitre.oval:ste:4422"/>
      </file_test>
      <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:10792" version="4" comment="Windows 7 is installed" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:5590"/>
         <state state_ref="oval:org.mitre.oval:ste:5027"/>
      </registry_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:10907" version="1" comment="ntdsai.dll is greater than or equal 6.0.6001.22000" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:5687"/>
         <state state_ref="oval:org.mitre.oval:ste:4525"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:10967" version="3" comment="The version of Mscorlib.dll is less than 2.0.50727.3053" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:org.mitre.oval:obj:2009"/>
         <state state_ref="oval:org.mitre.oval:ste:5454"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:10980" version="1" comment="ntdsai.dll is greater than or equal 6.0.6002.22000" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:5687"/>
         <state state_ref="oval:org.mitre.oval:ste:4321"/>
      </file_test>
      <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:11179" version="3" comment="Windows XP is installed" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:5590"/>
         <state state_ref="oval:org.mitre.oval:ste:5477"/>
      </registry_test>
      <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:11318" version="1" comment="Windows Mail version 6.1" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:1809"/>
         <state state_ref="oval:org.mitre.oval:ste:6132"/>
      </registry_test>
      <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:27660" version="1" comment="IIS Minor Version equals 5" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:938"/>
         <state state_ref="oval:org.mitre.oval:ste:7119"/>
      </registry_test>
      <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:41933" version="3" comment="Service Pack 1 is installed" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:15897"/>
         <state state_ref="oval:org.mitre.oval:ste:12087"/>
      </registry_test>
      <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:42359" version="1" comment="Internet Explorer 9 is installed" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:247"/>
         <state state_ref="oval:org.mitre.oval:ste:12091"/>
      </registry_test>
      <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:42453" version="1" comment="Service Pack 1 Release Candidate is installed" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:15897"/>
         <state state_ref="oval:org.mitre.oval:ste:12309"/>
      </registry_test>
      <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.oval:tst:1153001" version="3" comment="Gold/RTM is installed" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:15897"/>
         <state state_ref="oval:gov.nist.oval:ste:1153001"/>
      </registry_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:2291" version="1" check="at least one" comment="Wmvcore.dll version is greater than or equal to 9.0.0.3300" check_existence="at_least_one_exists">
         <object object_ref="oval:org.mitre.oval:obj:52"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:2291"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:2293" version="1" check="at least one" comment="Wmvcore.dll version is greater than or equal to 10.0.0.4000" check_existence="at_least_one_exists">
         <object object_ref="oval:org.mitre.oval:obj:52"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:2293"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:2295" version="1" check="at least one" comment="Wmvcore.dll version is greater than or equal to 10.0.0.4300" check_existence="at_least_one_exists">
         <object object_ref="oval:org.mitre.oval:obj:52"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:2295"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115201" version="2" comment="Gdi32.dll version is less than 5.1.2600.3466" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:279"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:115201"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115202" version="2" comment="Gdi32.dll version is less than 5.1.2600.5698" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:279"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:115202"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115203" version="2" comment="Gdi32.dll version is less than 5.2.3790.4396" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:279"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:115203"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115221" version="1" comment="Explorer.exe version is less than 6.0.6001.18164" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:115221"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:115221"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115222" version="1" comment="Explorer.exe version is less than 6.0.6001.22298" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:115221"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:115222"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115231" version="1" comment="Wmnetmgr.dll version is less than 9.0.0.3268" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:115234"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:115235"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115232" version="1" comment="Wmnetmgr.dll version is less than 10.0.0.3703" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:115234"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:115236"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115233" version="1" comment="Wmnetmgr.dll version is less than 11.0.5721.5251" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:115234"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:115237"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115234" version="1" comment="Wmnetmgr.dll version is less than 11.0.6001.7001" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:115234"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:115238"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115259" version="1" comment="Mshtml.dll version is greater than or equal to 7.0.6001.22000" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:222"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:115259"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115260" version="2" comment="Explorer.exe version is greater than or equal to 6.0.6001.18000" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:115221"/>
         <state state_ref="oval:org.mitre.oval:ste:4401"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115261" version="2" comment="Explorer.exe version is greater than or equal to 6.0.6001.22000" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:115221"/>
         <state state_ref="oval:org.mitre.oval:ste:4525"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115266" version="2" comment="Rmcast.sys version is greater than or equal to 6.0.6001.18000." check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:org.mitre.oval:obj:41"/>
         <state state_ref="oval:org.mitre.oval:ste:4401"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115267" version="1" comment="Rmcast.sys version is less than 6.0.6001.18069." check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:org.mitre.oval:obj:41"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:115261"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115268" version="2" comment="Rmcast.sys version is greater than or equal to 6.0.6001.22000." check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:org.mitre.oval:obj:41"/>
         <state state_ref="oval:org.mitre.oval:ste:4525"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115269" version="1" comment="Rmcast.sys version is less than 6.0.6001.22176." check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:org.mitre.oval:obj:41"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:115262"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115281" version="1" comment="Bthport.sys version is less than 5.2.3790.4274" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:org.mitre.oval:obj:5807"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:115281"/>
      </file_test>
      <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115302" version="2" comment="Printers Virtual Directory for IIS registry entry equals 1" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:115261"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:4600001"/>
      </registry_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115304" version="1" comment="Mshtml.dll version is greater than or equal to 7.0.6000.20000" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:222"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:115284"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115306" version="2" comment="Netapi32.dll version is greater than or equal to  6.0.6001.18000" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:160"/>
         <state state_ref="oval:org.mitre.oval:ste:4401"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115307" version="2" comment="Netapi32.dll version is greater than or equal to  6.0.6001.22000" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:160"/>
         <state state_ref="oval:org.mitre.oval:ste:4525"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115308" version="2" comment="Gdi32.dll version is greater than or equal to 6.0.6001.18000" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:279"/>
         <state state_ref="oval:org.mitre.oval:ste:4401"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115309" version="2" comment="Gdi32.dll version is greater than or equal to 6.0.6001.22000" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:279"/>
         <state state_ref="oval:org.mitre.oval:ste:4525"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115310" version="1" comment="Gdi32.dll version is less than 6.0.6001.22291" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:279"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:115286"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115320" version="2" comment="Msdtcprx.dll version is less than 2001.12.4414.320" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:115265"/>
         <state state_ref="oval:org.mitre.oval:ste:4129"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115321" version="1" comment="Ntoskrnl.exe version is less than 5.1.2600.3520" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:org.mitre.oval:obj:335"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:115300"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115322" version="2" comment="Msdtcprx.dll version is less than 2001.12.4414.706" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:115265"/>
         <state state_ref="oval:org.mitre.oval:ste:3371"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115323" version="1" comment="Ntoskrnl.exe version is less than 5.1.2600.5755" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:org.mitre.oval:obj:335"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:115302"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115324" version="1" comment="Msdtcprx.dll version is less than 2001.12.4720.4340" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:115265"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:115303"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115325" version="1" comment="Ntoskrnl.exe version is less than 5.2.3790.4478" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:org.mitre.oval:obj:335"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:115304"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115326" version="1" comment="Msdtcprx.dll version is greater than or equal to 2001.12.6931.18000" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:115265"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:115293"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115327" version="2" comment="Ntoskrnl.exe version is greater than or equal to 6.0.6001.18000" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:org.mitre.oval:obj:335"/>
         <state state_ref="oval:org.mitre.oval:ste:4401"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115328" version="1" comment="Msdtcprx.dll version is less than 2001.12.6931.18085" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:115265"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:115297"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115329" version="1" comment="Ntoskrnl.exe version is less than 6.0.6001.18226" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:org.mitre.oval:obj:335"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:115295"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115330" version="1" comment="Msdtcprx.dll version is greater than or equal to 2001.12.6931.22000" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:115265"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:115294"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115331" version="2" comment="Ntoskrnl.exe version is greater than or equal to 6.0.6001.22000" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:org.mitre.oval:obj:335"/>
         <state state_ref="oval:org.mitre.oval:ste:4525"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115332" version="1" comment="Msdtcprx.dll version is less than 2001.12.6931.22197" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:115265"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:115298"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115333" version="1" comment="Ntoskrnl.exe version is less than 6.0.6001.22389" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:org.mitre.oval:obj:335"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:115296"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115334" version="1" comment="Winhttp.dll version is less than 5.1.2600.3494" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:115266"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:115305"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115335" version="1" comment="Winhttp.dll version is less than 5.1.2600.5727" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:115266"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:115306"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115336" version="1" comment="Winhttp.dll version is less than 5.2.3790.4427" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:115266"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:115307"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115337" version="2" comment="Winhttp.dll version is greater than or equal to 6.0.6001.18000" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:115266"/>
         <state state_ref="oval:org.mitre.oval:ste:4401"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115338" version="1" comment="Winhttp.dll version is less than 6.0.6001.18178" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:115266"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:115308"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115339" version="2" comment="Winhttp.dll version is greater than or equal to 6.0.6001.22000" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:115266"/>
         <state state_ref="oval:org.mitre.oval:ste:4525"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115340" version="1" comment="Winhttp.dll version is less than 6.0.6001.22323" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:115266"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:115309"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115476" version="2" comment="Win32k.sys version is greater than or equal to 6.0.6001.18000" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:115471"/>
         <state state_ref="oval:org.mitre.oval:ste:4401"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115477" version="2" comment="Win32k.sys version is greater than or equal to 6.0.6001.22000" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:115471"/>
         <state state_ref="oval:org.mitre.oval:ste:4525"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115481" version="1" comment="Schannel.sys version is less than 5.1.2600.3487" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:115481"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:115481"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115482" version="1" comment="Schannel.sys version is less than 5.1.2600.5721" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:115481"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:115482"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115483" version="1" comment="Schannel.sys version is less than 5.2.3790.4458" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:115481"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:115483"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115484" version="1" comment="Schannel.sys version is less than 6.0.6001.18175" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:115481"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:115484"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115485" version="1" comment="Schannel.sys version is less than 6.0.6001.22320" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:115481"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:115485"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115541" version="1" comment="Kernel32.dll version is less than 5.1.2600.3541" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:org.mitre.oval:obj:1549"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:115541"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115542" version="1" comment="Kernel32.dll version is less than 5.1.2600.5781" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:org.mitre.oval:obj:1549"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:115542"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115543" version="1" comment="Kernel32.dll version is less than 5.2.3790.4480" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:org.mitre.oval:obj:1549"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:115543"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115544" version="2" comment="Kernel32.dll version is greater than or equal to 6.0.6001.18000" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:org.mitre.oval:obj:1549"/>
         <state state_ref="oval:org.mitre.oval:ste:4401"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115545" version="1" comment="Kernel32.dll version is less than 6.0.6001.18215" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:org.mitre.oval:obj:1549"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:115545"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115546" version="2" comment="Kernel32.dll version is greater than or equal to 6.0.6001.22000" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:org.mitre.oval:obj:1549"/>
         <state state_ref="oval:org.mitre.oval:ste:4525"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115547" version="1" comment="Kernel32.dll version is less than 6.0.6001.22376" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:org.mitre.oval:obj:1549"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:115547"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115577" version="2" comment="Schannel.dll version is greater than or equal to 6.0.6001.18000" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:115481"/>
         <state state_ref="oval:org.mitre.oval:ste:4401"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115578" version="2" comment="Schannel.dll version is greater than or equal to 6.0.6001.22000" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:115481"/>
         <state state_ref="oval:org.mitre.oval:ste:4525"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115593" version="1" comment="Rpcrt4.dll version is less than 5.1.2600.3555" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:org.mitre.oval:obj:2619"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:115593"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115596" version="2" comment="Rpcrt4.dll version is greater than or equal to 6.0.6001.18000" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:2619"/>
         <state state_ref="oval:org.mitre.oval:ste:4401"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115597" version="1" comment="Rpcrt4.dll version is less than 6.0.6001.18247" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:org.mitre.oval:obj:2619"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:115597"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115598" version="2" comment="Rpcrt4.dll version is greater than or equal to 6.0.6001.22000" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:2619"/>
         <state state_ref="oval:org.mitre.oval:ste:4525"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115599" version="1" comment="Rpcrt4.dll version is less than 6.0.6001.22417" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:org.mitre.oval:obj:2619"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:115599"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115600" version="2" comment="Rpcrt4.dll version is greater than or equal to 6.0.6002.18000" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:2619"/>
         <state state_ref="oval:org.mitre.oval:ste:4510"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115601" version="1" comment="Rpcrt4.dll version is less than 6.0.6002.18024" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:org.mitre.oval:obj:2619"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:115601"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115602" version="2" comment="Rpcrt4.dll version is greater than or equal to 6.0.6002.22000" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:2619"/>
         <state state_ref="oval:org.mitre.oval:ste:4321"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115603" version="1" comment="Rpcrt4.dll version is less than 6.0.6002.22120" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:org.mitre.oval:obj:2619"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:115603"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115658" version="1" comment="Mshtml.dll version is greater than or equal to 7.0.6002.22000" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:222"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:115658"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115660" version="2" comment="Localspl.dll version is greater than or equal to 6.0.6002.22000" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:115661"/>
         <state state_ref="oval:org.mitre.oval:ste:4321"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115661" version="1" comment="Localspl.dll version is less than 5.1.2600.3569" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:115661"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:115661"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115662" version="1" comment="Localspl.dll version is less than 5.2.3790.4509" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:115661"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:115662"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115663" version="1" comment="Localspl.dll version is less than 5.1.2600.5809" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:115661"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:115663"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115664" version="2" comment="Localspl.dll version is less than 6.0.6001.22417" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:115661"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:115599"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115665" version="2" comment="Localspl.dll version is less than 6.0.6002.18024" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:115661"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:115601"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115666" version="2" comment="Localspl.dll version is less than 6.0.6002.22120" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:115661"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:115603"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115667" version="2" comment="Localspl.dll version is greater than or equal to 6.0.6001.18000" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:115661"/>
         <state state_ref="oval:org.mitre.oval:ste:4401"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115668" version="2" comment="Localspl.dll version is greater than or equal to 6.0.6001.22000" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:115661"/>
         <state state_ref="oval:org.mitre.oval:ste:4525"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115669" version="2" comment="Localspl.dll version is greater than or equal to 6.0.6002.18000" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:115661"/>
         <state state_ref="oval:org.mitre.oval:ste:4510"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115740" version="1" comment="Wkssvc.dll version is less than 5.1.2600.3584" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:org.mitre.oval:obj:115740"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:115740"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115741" version="1" comment="Wkssvc.dll version is less than 5.1.2600.5826" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:org.mitre.oval:obj:115740"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:115741"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115742" version="2" comment="Wkssvc.dll version is less than 5.2.3790.4530" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:org.mitre.oval:obj:115740"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:115711"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115743" version="2" comment="Wkssvc.dll version is greater than or equal to 6.0.6001.18000" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:115740"/>
         <state state_ref="oval:org.mitre.oval:ste:4401"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115744" version="1" comment="Wkssvc.dll version is less than 6.0.6001.18270" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:org.mitre.oval:obj:115740"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:115744"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115745" version="2" comment="Wkssvc.dll version is greater than or equal to 6.0.6001.22000" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:115740"/>
         <state state_ref="oval:org.mitre.oval:ste:4525"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115746" version="1" comment="Wkssvc.dll version is less than 6.0.6001.22447" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:org.mitre.oval:obj:115740"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:115746"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115747" version="2" comment="Wkssvc.dll version is greater than or equal to 6.0.6002.18000" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:115740"/>
         <state state_ref="oval:org.mitre.oval:ste:4510"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115748" version="1" comment="Wkssvc.dll version is less than 6.0.6002.18049" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:org.mitre.oval:obj:115740"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:115748"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115749" version="2" comment="Wkssvc.dll version is greater than or equal to 6.0.6002.22000" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:115740"/>
         <state state_ref="oval:org.mitre.oval:ste:4321"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115750" version="1" comment="Telnet.exe version is less than 5.1.2600.3587" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:org.mitre.oval:obj:115750"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:115750"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115751" version="1" comment="Telnet.exe version is less than 5.1.2600.5829" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:org.mitre.oval:obj:115750"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:115751"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115752" version="1" comment="Telnet.exe version is less than 5.2.3790.4528" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:org.mitre.oval:obj:115750"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:115752"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115753" version="2" comment="Telnet.exe version is greater than or equal to 6.0.6001.18000" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:115750"/>
         <state state_ref="oval:org.mitre.oval:ste:4401"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115754" version="2" comment="Telnet.exe version is less than 6.0.6001.18270" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:org.mitre.oval:obj:115750"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:115744"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115755" version="2" comment="Telnet.exe version is greater than or equal to 6.0.6001.22000" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:115750"/>
         <state state_ref="oval:org.mitre.oval:ste:4525"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115756" version="2" comment="Telnet.exe version is less than 6.0.6001.22447" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:org.mitre.oval:obj:115750"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:115746"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115757" version="2" comment="Telnet.exe version is greater than or equal to 6.0.6002.18000" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:115750"/>
         <state state_ref="oval:org.mitre.oval:ste:4510"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115758" version="2" comment="Telnet.exe version is less than 6.0.6002.18049" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:org.mitre.oval:obj:115750"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:115748"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115759" version="2" comment="Telnet.exe version is greater than or equal to 6.0.6002.22000" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:115750"/>
         <state state_ref="oval:org.mitre.oval:ste:4321"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115761" version="1" comment="Mstscax.dll version is less than 5.1.2600.3581" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:org.mitre.oval:obj:115760"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:115761"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115762" version="1" comment="2k3mstsc.dll version is less than 5.2.3790.4522" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:org.mitre.oval:obj:115761"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:115762"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115763" version="1" comment="2k3mstsc.dll version is less than 5.2.3790.4524" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:115761"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:115763"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115764" version="1" comment="Mstscax.dll version is greater than or equal to 6.0.6000.16000" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:org.mitre.oval:obj:115760"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:115764"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115765" version="1" comment="Mstscax.dll version is less than 6.0.6000.16865" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:115760"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:115765"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115766" version="1" comment="Mstscax.dll version is greater than or equal to 6.0.6000.21000" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:org.mitre.oval:obj:115760"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:115766"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115767" version="1" comment="Mstscax.dll version is less than 6.0.6000.21061" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:115760"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:115767"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115768" version="2" comment="Mstscax.dll version is greater than or equal to  6.0.6001.18000" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:org.mitre.oval:obj:115760"/>
         <state state_ref="oval:org.mitre.oval:ste:4401"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115769" version="1" comment="Mstscax.dll version is less than 6.0.6001.18266" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:115760"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:115769"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115803" version="1" comment="System.Net.dll version is greater than or equal to 3.5.21022.8" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:115801"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:115803"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115804" version="1" comment="System.Net.dll version is less than 3.5.30729.1" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:115801"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:115804"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115805" version="1" comment="System.Net.dll version is greater than or equal to 3.5.30729.1" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:115801"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:115805"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115851" version="1" comment="Jscript.dll version is greater than or equal to 5.6.0.0" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:115850"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:115851"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115853" version="2" comment="Jscript.dll version is greater than or equal to 5.7.0.0" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:115850"/>
         <state state_ref="oval:org.mitre.oval:ste:5286"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115855" version="2" comment="Jscript.dll version is greater than or equal to 5.8.0.0" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:115850"/>
         <state state_ref="oval:org.mitre.oval:ste:5166"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115857" version="1" comment="Jscript.dll version is greater than or equal to 5.7.0.18000" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:115850"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:115857"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115859" version="1" comment="Jscript.dll version is greater than or equal to 5.7.0.22000" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:115850"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:115859"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115881" version="2" comment="Netevent.dll version is greater than or equal to 6.0.6001.18000" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:115880"/>
         <state state_ref="oval:org.mitre.oval:ste:4401"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115882" version="1" comment="Netevent.dll version is less than 6.0.6001.18311" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:115880"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:115882"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115883" version="2" comment="Netevent.dll version is greater than or equal to 6.0.6001.22000" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:115880"/>
         <state state_ref="oval:org.mitre.oval:ste:4525"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115884" version="1" comment="Netevent.dll version is less than 6.0.6001.22497" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:115880"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:115884"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115885" version="2" comment="Netevent.dll version is greater than or equal to 6.0.6002.18000" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:115880"/>
         <state state_ref="oval:org.mitre.oval:ste:4510"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115886" version="1" comment="Netevent.dll version is less than 6.0.6002.18091" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:115880"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:115886"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115887" version="2" comment="Netevent.dll version is greater than or equal to 6.0.6002.22000" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:115880"/>
         <state state_ref="oval:org.mitre.oval:ste:4321"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115888" version="1" comment="Netevent.dll version is less than 6.0.6002.22200" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:115880"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:115888"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115890" version="2" comment="Wlanmsm.dll version is greater than or equal to 6.0.6001.18000" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:115890"/>
         <state state_ref="oval:org.mitre.oval:ste:4401"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115892" version="1" comment="Wlanmsm.dll version is less than 6.0.6001.18288" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:115890"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:115892"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115893" version="2" comment="Wlanmsm.dll version is greater than or equal to 6.0.6001.22000" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:115890"/>
         <state state_ref="oval:org.mitre.oval:ste:4525"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115894" version="1" comment="Wlanmsm.dll version is less than 6.0.6001.22468" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:115890"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:115894"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115895" version="2" comment="Wlanmsm.dll version is greater than or equal to 6.0.6002.18000" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:115890"/>
         <state state_ref="oval:org.mitre.oval:ste:4510"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115896" version="1" comment="Wlanmsm.dll version is less than 6.0.6002.18064" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:115890"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:115896"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115897" version="2" comment="Wlanmsm.dll version is greater than or equal to 6.0.6002.22000" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:115890"/>
         <state state_ref="oval:org.mitre.oval:ste:4321"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115898" version="1" comment="Wlanmsm.dll version is less than 6.0.6002.22170" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:115890"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:115898"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116003" version="2" comment="Srv2.sys version is greater than or equal to 6.0.6001.22000" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:116000"/>
         <state state_ref="oval:org.mitre.oval:ste:4525"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116007" version="2" comment="Srv2.sys version is greater than or equal to 6.0.6002.22000" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:116000"/>
         <state state_ref="oval:org.mitre.oval:ste:4321"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116010" version="1" comment="Wmspdmod.dll version is less than 9.0.0.3269" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:116010"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:116010"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116011" version="1" comment="Wmspdmod.dll version is less than 9.0.0.4505" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:116010"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:116011"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116012" version="1" comment="Wmspdmod.dll version is less than 10.0.0.3704" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:116010"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:116012"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116013" version="2" comment="Wmspdmod.dll version is greater than or equal to 10.0.0.4000" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:116010"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:2293"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116014" version="1" comment="Wmspdmod.dll version is less than 10.0.0.4070" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:116010"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:116014"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116015" version="2" comment="Wmspdmod.dll version is greater than or equal to 10.0.0.4300" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:116010"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:2295"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116016" version="1" comment="Wmspdmod.dll version is less than 10.0.0.4365" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:116010"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:116016"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116017" version="1" comment="Wmspdmod.dll version is less than 11.0.5721.5263" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:116010"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:116017"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116018" version="1" comment="Wmspdmod.dll version is less than 10.0.0.3819" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:116010"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:116018"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116020" version="1" comment="Ftpsvc2.dll version is less than 6.0.2600.3624" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:116020"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:116020"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116021" version="1" comment="Ftpsvc2.dll version is less than 6.0.2600.5875" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:116020"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:116021"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116022" version="1" comment="Ftpsvc2.dll version is less than 6.0.3790.4584" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:116020"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:116022"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116023" version="1" comment="Ftpsvc2.dll version is greater than or equal to 7.0.6001.18000" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:116020"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:115258"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116024" version="1" comment="Ftpsvc2.dll version is less than 7.0.6001.18327" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:116020"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:116024"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116025" version="1" comment="Ftpsvc2.dll version is greater than or equal to 7.0.6001.22000" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:116020"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:115259"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116026" version="1" comment="Ftpsvc2.dll version is less than 7.0.6001.22516" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:116020"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:116026"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116027" version="1" comment="Ftpsvc2.dll version is greater than or equal to 7.0.6002.18000" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:116020"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:115657"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116028" version="1" comment="Ftpsvc2.dll version is less than 7.0.6002.18107" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:116020"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:116028"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116029" version="1" comment="Ftpsvc2.dll version is greater than or equal to 7.0.6002.22000" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:116020"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:115658"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116200" version="2" comment="Wsdapi.dll version is greater than or equal to 6.0.6001.18000" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:116200"/>
         <state state_ref="oval:org.mitre.oval:ste:4401"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116201" version="1" comment="Wsdapi.dll version is less than 6.0.6001.18306" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:116200"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:116201"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116202" version="2" comment="Wsdapi.dll version is greater than or equal to 6.0.6001.22000" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:116200"/>
         <state state_ref="oval:org.mitre.oval:ste:4525"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116203" version="1" comment="Wsdapi.dll version is less than 6.0.6001.22491" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:116200"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:116203"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116204" version="2" comment="Wsdapi.dll version is greater than or equal to 6.0.6002.18000" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:116200"/>
         <state state_ref="oval:org.mitre.oval:ste:4510"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116205" version="1" comment="Wsdapi.dll version is less than 6.0.6002.18085" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:116200"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:116205"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116206" version="2" comment="Wsdapi.dll version is greater than or equal to 6.0.6002.22000" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:116200"/>
         <state state_ref="oval:org.mitre.oval:ste:4321"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116207" version="1" comment="Wsdapi.dll version is less than 6.0.6002.22194" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:116200"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:116207"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116217" version="3" comment="Win32k.sys version is greater than or equal to 6.0.6002.18000" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:115471"/>
         <state state_ref="oval:org.mitre.oval:ste:4510"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116219" version="3" comment="Win32k.sys version is greater than or equal to 6.0.6002.22000" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:115471"/>
         <state state_ref="oval:org.mitre.oval:ste:4321"/>
      </file_test>
      <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116229" version="1" comment="An Adam Instance has been created" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:116222"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:116229"/>
      </registry_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116320" version="2" comment="Rastls.dll version is less than 5.1.2600.3632" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:116320"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:116300"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116321" version="2" comment="Rastls.dll version is less than 5.1.2600.5886" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:116320"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:116301"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116322" version="2" comment="Rastls.dll version is less than 5.2.3790.4600" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:116320"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:116302"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116323" version="2" comment="Rastls.dll version is greater than or equal to 6.0.6001.18000" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:116320"/>
         <state state_ref="oval:org.mitre.oval:ste:4401"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116324" version="1" comment="Rastls.dll version is less than 6.0.6001.18336" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:116320"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:116324"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116325" version="2" comment="Rastls.dll version is greater than or equal to 6.0.6001.22000" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:116320"/>
         <state state_ref="oval:org.mitre.oval:ste:4525"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116326" version="1" comment="Rastls.dll version is less than 6.0.6001.22536" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:116320"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:116326"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116327" version="2" comment="Rastls.dll version is greater than or equal to 6.0.6002.18000" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:116320"/>
         <state state_ref="oval:org.mitre.oval:ste:4510"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116328" version="1" comment="Rastls.dll version is less than 6.0.6002.18116" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:116320"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:116328"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116329" version="2" comment="Rastls.dll version is greater than or equal to 6.0.6002.22000" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:116320"/>
         <state state_ref="oval:org.mitre.oval:ste:4321"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116400" version="2" comment="Fontsub.dll version is less than 5.1.2600.3634" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:org.mitre.oval:obj:668"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:116400"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116401" version="2" comment="Fontsub.dll version is less than 5.1.2600.5888" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:org.mitre.oval:obj:668"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:116401"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116402" version="2" comment="Fontsub.dll version is less than 5.2.3790.4603" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:org.mitre.oval:obj:668"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:116402"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116403" version="2" comment="Fontsub.dll version is greater than or equal to 6.0.6001.18000" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:668"/>
         <state state_ref="oval:org.mitre.oval:ste:4401"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116404" version="2" comment="Fontsub.dll version is less than 6.0.6001.18344" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:org.mitre.oval:obj:668"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:116404"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116405" version="3" comment="Fontsub.dll version is greater than or equal to 6.0.6001.22000" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:668"/>
         <state state_ref="oval:org.mitre.oval:ste:4525"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116406" version="2" comment="Fontsub.dll version is less than 6.0.6001.22544" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:org.mitre.oval:obj:668"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:116406"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116407" version="3" comment="Fontsub.dll version is greater than or equal to 6.0.6002.18000" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:668"/>
         <state state_ref="oval:org.mitre.oval:ste:4510"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116408" version="2" comment="Fontsub.dll version is less than 6.0.6002.18124" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:org.mitre.oval:obj:668"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:116408"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116409" version="3" comment="Fontsub.dll version is greater than or equal to 6.0.6002.22000" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:668"/>
         <state state_ref="oval:org.mitre.oval:ste:4321"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116500" version="2" comment="Quartz.dll version is less than 6.5.2600.3649" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:org.mitre.oval:obj:704"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:116500"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116501" version="2" comment="Quartz.dll version is less than 6.5.2600.5908" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:org.mitre.oval:obj:704"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:116501"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116502" version="2" comment="Quartz.dll version is less than 6.5.3790.4625" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:org.mitre.oval:obj:704"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:116502"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116503" version="2" comment="Quartz.dll version is greater than or equal to 6.6.6001.18000" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:704"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:116503"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116504" version="2" comment="Quartz.dll version is less than 6.6.6001.18389" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:org.mitre.oval:obj:704"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:116504"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116505" version="2" comment="Quartz.dll version is greater than or equal to 6.6.6001.22000" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:704"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:116505"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116506" version="2" comment="Quartz.dll version is less than 6.6.6001.22590" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:org.mitre.oval:obj:704"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:116506"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116507" version="2" comment="Quartz.dll version is greater than or equal to 6.6.6002.18000" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:704"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:116507"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116508" version="2" comment="Quartz.dll version is less than 6.6.6002.18158" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:org.mitre.oval:obj:704"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:116508"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116509" version="2" comment="Quartz.dll version is greater than or equal to 6.6.6002.22000" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:704"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:116509"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116534" version="3" comment="Moviemk.exe version is greater than or equal to 6.0.6001.22000" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:116530"/>
         <state state_ref="oval:org.mitre.oval:ste:4525"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116538" version="3" comment="Moviemk.exe version is greater than or equal to 6.0.6002.22000" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:116530"/>
         <state state_ref="oval:org.mitre.oval:ste:4321"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116551" version="1" comment="Wintrust.dll version is less than 5.131.2600.3661" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:999"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:116551"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116552" version="1" comment="Cabview.dll version is less than 6.0.2900.3663" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:116551"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:116552"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116553" version="1" comment="Wintrust.dll version is less than 5.131.2600.5922" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:999"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:116553"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116554" version="1" comment="Cabview.dll version is less than 6.0.2900.5927" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:116551"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:116554"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116555" version="1" comment="Wintrust.dll version is less than 5.131.3790.4642" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:999"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:116555"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116556" version="1" comment="Cabview.dll version is less than 6.0.3790.4649" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:116551"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:116556"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116557" version="2" comment="Wintrust.dll version is greater than or equal 6.0.6001.18000" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:999"/>
         <state state_ref="oval:org.mitre.oval:ste:4401"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116558" version="1" comment="Wintrust.dll version is less than 6.0.6001.18387" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:999"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:116558"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116559" version="2" comment="Cabview.dll version is greater than or equal 6.0.6001.18000" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:116551"/>
         <state state_ref="oval:org.mitre.oval:ste:4401"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116700" version="2" comment="Win32k.sys version is less than 5.1.2600.3706" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:115471"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:116700"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116701" version="2" comment="Win32k.sys version is less than 5.1.2600.5976" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:115471"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:116701"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116702" version="2" comment="Win32k.sys version is less than 5.2.3790.4702" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:115471"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:116702"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116704" version="2" comment="Win32k.sys version is less than 6.0.6001.18468" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:115471"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:116704"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116706" version="2" comment="Win32k.sys version is less than 6.0.6001.22682" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:115471"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:116706"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116708" version="2" comment="Win32k.sys version is less than 6.0.6002.18253" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:115471"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:116708"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116750" version="1" comment="Authsspi.dll version is less than 7.0.6001.18462" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:116750"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:116750"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116751" version="3" comment="Authsspi.dll version is greater than or equal to 7.0.6001.22638" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:116750"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:116761"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116752" version="1" comment="Authsspi.dll version is less than 7.0.6001.22675" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:116750"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:116752"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116753" version="3" comment="Authsspi.dll version is greater than or equal to 7.0.6002.18210" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:116750"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:116762"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116754" version="1" comment="Authsspi.dll version is less than 7.0.6002.18247" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:116750"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:116754"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116755" version="3" comment="Authsspi.dll version is greater than or equal to 7.0.6002.22343" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:116750"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:116763"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116756" version="1" comment="Authsspi.dll version is less than 7.0.6002.22388" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:116750"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:116756"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116757" version="1" comment="Authsspi.dll version is less than 7.5.7600.16576" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:116750"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:116757"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116758" version="1" comment="Authsspi.dll version is greater than or equal to 7.5.7600.20000" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:116750"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:116758"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116759" version="1" comment="Authsspi.dll version is less than 7.5.7600.20694" check_existence="at_least_one_exists" check="all">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:116750"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:116759"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116760" version="1" comment="Authsspi.dll version is greater than or equal to 7.0.6001.18428" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:116750"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:116760"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116806" version="1" comment="Ntoskrnl.exe version is greater than or equal to 6.1.7600.20000" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:1159200"/>
         <state state_ref="oval:org.mitre.oval:ste:5319"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116828" version="1" comment="Schannel.dll version is greater than or equal to 6.0.6002.22000" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:115481"/>
         <state state_ref="oval:org.mitre.oval:ste:4321"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116830" version="1" comment="Wmoviemk.exe version is less than 2.1.4028.0" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:116530"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:116830"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116831" version="1" comment="Wmoviemk.exe version is less than 2.1.40310" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:116530"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:116831"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116832" version="1" comment="Wmoviemk.exe version is less than 6.0.6001.18494" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:116530"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:116832"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116834" version="1" comment="Wmoviemk.exe version is less than 6.0.6001.22714" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:116530"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:116834"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116835" version="1" comment="Moviemk.exe version is greater than or equal to 6.0.6002.18000" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:116530"/>
         <state state_ref="oval:org.mitre.oval:ste:4510"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116836" version="1" comment="Wmoviemk.exe version is less than 6.0.6002.18273" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:116530"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:116836"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116838" version="1" comment="Wmoviemk.exe version is less than 6.0.6002.22426" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:gov.nist.fdcc.patch:obj:116530"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:116838"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116840" version="1" comment="Msxml3.dll version is less than 8.100.1052.0" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:3"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:116840"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116841" version="1" comment="Msxml3.dll version is less than 8.100.4002.0" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:3"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:116841"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116842" version="1" comment="Msxml3.dll version is less than 8.100.5003.0" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:3"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:116842"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116843" version="1" comment="Msxml3.dll version is less than 8.110.7600.16605" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:3"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:116843"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116844" version="1" comment="Msxml3.dll version is greater than or equal to 8.110.7600.20000" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:3"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:116844"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116845" version="1" comment="Msxml3.dll version is less than 8.110.7600.20728" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:3"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:116845"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116920" version="1" comment="Spoolsv.exe version is less than 5.1.2600.6024" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:223"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:116920"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116921" version="1" comment="Spoolsv.exe version is less than 5.2.3790.4759" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj:223"/>
         <state state_ref="oval:gov.nist.fdcc.patch:ste:116921"/>
      </file_test>
      <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:116923" version="1" comment="Spoolsv.exe version is less than 6.0.6001.18511" check_existence="at_least_one_exists" check="at least one">
         <object object_ref="oval:org.mitre.oval:obj: