<?xml version="1.0" encoding="UTF-8"?>
<oval_definitions xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5"
    xmlns:oval="http://oval.mitre.org/XMLSchema/oval-common-5"
    xmlns:oval-def="http://oval.mitre.org/XMLSchema/oval-definitions-5"
    xmlns:ind-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent"
    xmlns:win-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"
    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-common-5 http://oval.mitre.org/language/download/schema/version5.3/ovaldefinition/complete/oval-common-schema.xsd
    http://oval.mitre.org/XMLSchema/oval-definitions-5 http://oval.mitre.org/language/download/schema/version5.3/ovaldefinition/complete/oval-definitions-schema.xsd
    http://oval.mitre.org/XMLSchema/oval-definitions-5#windows http://oval.mitre.org/language/download/schema/version5.3/ovaldefinition/complete/windows-definitions-schema.xsd
    http://oval.mitre.org/XMLSchema/oval-definitions-5#independent http://oval.mitre.org/language/download/schema/version5.3/ovaldefinition/complete/independent-definitions-schema.xsd">
    <generator>
        <oval:product_name>National Institute of Standards and Technology</oval:product_name>
        <oval:schema_version>5.3</oval:schema_version>
        <oval:timestamp>2009-11-20T14:13:35.000-05:00</oval:timestamp>
    </generator>
    <!-- ==================================================================================================== -->
    <!-- ==========================================  DEFINITIONS  =========================================== -->
    <!-- ==================================================================================================== -->
    <definitions>
        <definition id="oval:gov.nist.fdcc.patch:def:400" version="2" class="patch">
            <metadata>
                <title>MS08-030: Vulnerability in Bluetooth Stack Could Allow Remote Code Execution (951376)</title>
                <affected family="windows">
                    <platform>Microsoft Windows XP</platform>
                    <platform>Microsoft Windows Vista</platform>
                </affected>
                <reference source="CVE" ref_id="CVE-2008-1453" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1453"/>
                <reference source="Microsoft" ref_id="MS08-030" ref_url="http://www.microsoft.com/technet/security/bulletin/MS08-030.mspx"/>
                <reference source="Microsoft" ref_id="KB951376" ref_url="http://support.microsoft.com/kb/951376"/>
                <reference source="OVAL" ref_id="oval:org.mitre.oval:def:4730" ref_url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:4730"/>
                <description>Microsoft has released MS08-030 to address security issues in Internet Explorer as documented by CVE-2008-1453.</description>
            </metadata>
            <criteria operator="AND">
                <criterion comment="Bthport.sys does exist" test_ref="oval:org.mitre.oval:tst:7805"/>
                <criteria operator="OR">
                    <criteria operator="AND" comment="Windows XP (32-bit) SP2">
                        <extend_definition comment="Microsoft Windows XP (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115276"/>
                        <criterion comment="the version of Bthport.sys is less than 5.1.2600.3351" test_ref="oval:org.mitre.oval:tst:7093"/>
                    </criteria>
                    <criteria operator="AND" comment="Windows XP (64-bit) SP2">
                        <extend_definition comment="Microsoft Windows XP (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115277"/>
                        <criterion comment="the version of Bthport.sys is less than 5.2.3790.4274" test_ref="oval:gov.nist.fdcc.patch:tst:115281"/>
                    </criteria>
                    <criteria operator="AND" comment="Windows XP Service Pack 3">
                        <extend_definition comment="Microsoft Windows XP (32-bit) SP3 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115278"/>
                        <criterion comment="the version of Bthport.sys is less than 5.1.2600.5580" test_ref="oval:org.mitre.oval:tst:8009"/>
                    </criteria>
                    <criteria operator="AND" comment="Windows Vista Service Pack 1">
                        <criteria operator="OR">
                            <extend_definition comment="Microsoft Windows Vista (32-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                            <extend_definition comment="Microsoft Windows Vista (64-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                        </criteria>
                        <criterion comment="the version of Bthport.sys is less than 6.0.6001.18064" test_ref="oval:org.mitre.oval:tst:7491"/>
                    </criteria>
                </criteria>
            </criteria>
        </definition>
        <definition id="oval:gov.nist.fdcc.patch:def:402" version="1" class="patch">
            <metadata>
                <title>MS08-032: Cumulative Security Update of ActiveX Kill Bits (950760)</title>
                <affected family="windows">
                    <platform>Microsoft Windows XP</platform>
                    <platform>Microsoft Windows Vista</platform>
                </affected>
                <reference source="Microsoft" ref_id="MS08-032" ref_url="http://www.microsoft.com/technet/security/bulletin/MS08-032.mspx"/>
                <reference source="Microsoft" ref_id="KB950760" ref_url="http://support.microsoft.com/kb/950760"/>
                <reference source="CVE" ref_id="CVE-2007-0675" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0675"/>
                <reference source="OVAL" ref_id="oval:org.mitre.oval:def:5489" ref_url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:5489"/>
                <description>Microsoft has released MS08-032 to address security issues in Internet Explorer as documented by CVE-2007-0675.</description>
            </metadata>
            <criteria operator="AND">
                <criteria operator="OR">
                    <extend_definition comment="Microsoft Windows XP (32-bit or 64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115274"/>
                    <extend_definition comment="Microsoft Windows XP (32-bit) SP3 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115278"/>
                    <extend_definition comment="Microsoft Windows Vista (32-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                    <extend_definition comment="Microsoft Windows Vista (64-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                    <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                </criteria>
                <criteria operator="OR">
                    <criterion comment="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{40F23EB7-B397-4285-8F3C-AACE4FA40309}!Compatibility Flags does not exist" test_ref="oval:org.mitre.oval:tst:7937"/>
                    <criterion comment="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{40F23EB7-B397-4285-8F3C-AACE4FA40309}!Compatibility Flags is not equal to 0x00000400" test_ref="oval:org.mitre.oval:tst:7734"/>
                </criteria>
            </criteria>
        </definition>
        <definition id="oval:gov.nist.fdcc.patch:def:403" version="1" class="patch">
            <metadata>
                <title>MS08-033: Vulnerabilities in DirectX Could Allow Remote Code Execution (951698)</title>
                <affected family="windows">
                    <platform>Microsoft Windows XP</platform>
                    <platform>Microsoft Windows Vista</platform>
                    <product>Directx</product>
                </affected>
                <reference source="Microsoft" ref_id="MS08-033" ref_url="http://www.microsoft.com/technet/security/bulletin/MS08-033.mspx"/>
                <reference source="Microsoft" ref_id="KB951698" ref_url="http://support.microsoft.com/kb/951698"/>
                <reference source="CVE" ref_id="CVE-2008-0011" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0011"/>
                <reference source="CVE" ref_id="CVE-2008-1444" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1444"/>
                <reference source="OVAL" ref_id="oval:org.mitre.oval:def:5236" ref_url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:5236"/>
                <description>Microsoft has released MS08-033 to address security issues in Internet Explorer as documented by CVE-2008-0011 and CVE-2008-1444.</description>
            </metadata>
            <criteria operator="OR">
                <criteria operator="AND" comment="DirectX 9.0 on Win XP SP2">
                    <extend_definition comment="Microsoft Windows XP (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115276"/>
                    <criterion comment="DirectX 9.0c Installed" test_ref="oval:org.mitre.oval:tst:6736"/>
                    <criterion comment="the version of Quartz.dll is less than 6.5.2600.3367" test_ref="oval:org.mitre.oval:tst:7926"/>
                </criteria>
                <criteria operator="AND" comment="DirectX 9.0 on Win XP SP3">
                    <extend_definition comment="Microsoft Windows XP (32-bit) SP3 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115278"/>
                    <criterion comment="DirectX 9.0c Installed" test_ref="oval:org.mitre.oval:tst:6736"/>
                    <criterion comment="the version of Quartz.dll is less than 6.5.2600.5596" test_ref="oval:org.mitre.oval:tst:7725"/>
                </criteria>
                <criteria operator="AND" comment="DirectX 9.0 on Win XP SP2 64bit">
                    <extend_definition comment="Microsoft Windows XP SP2 (64-bit) is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115277"/>
                    <criterion comment="DirectX 9.0c Installed" test_ref="oval:org.mitre.oval:tst:6736"/>
                    <criterion comment="the version of Quartz.dll is less than 6.5.3790.4283" test_ref="oval:org.mitre.oval:tst:8024"/>
                </criteria>
                <criteria operator="AND" comment="DirectX 10.0 on Vista SP1">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                    </criteria>
                    <criterion comment="the version of Quartz.dll is less than 6.6.6001.18063" test_ref="oval:org.mitre.oval:tst:8092"/>
                </criteria>
            </criteria>
        </definition>
        <definition id="oval:gov.nist.fdcc.patch:def:405" version="1" class="patch">
            <metadata>
                <title>MS08-036: Vulnerabilities in Pragmatic General Multicast (PGM) Could Allow Denial of Service (950762)</title>
                <affected family="windows">
                    <platform>Microsoft Windows XP</platform>
                    <platform>Microsoft Windows Vista</platform>
                </affected>
                <reference source="CVE" ref_id="CVE-2008-1440" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1440"/>
                <reference source="CVE" ref_id="CVE-2008-1441" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1441"/>
                <reference source="Microsoft" ref_id="MS08-036" ref_url="http://www.microsoft.com/technet/security/bulletin/MS08-036.mspx"/>
                <reference source="Microsoft" ref_id="KB950762" ref_url="http://support.microsoft.com/kb/950762"/>
                <reference source="OVAL" ref_id="oval:org.mitre.oval:def:5473" ref_url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:5473"/>
                <reference source="OVAL" ref_id="oval:org.mitre.oval:def:5604" ref_url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:5604"/>
                <description>Microsoft has released MS08-036 to address security issues in Internet Explorer as documented by CVE-2008-1440 and CVE-2008-1441.</description>
            </metadata>
            <criteria operator="OR">
                <criteria operator="AND">
                    <extend_definition comment="Microsoft Windows XP (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115276"/>
                    <criterion comment="The version of Rmcast.sys is less than 5.1.2600.3369." test_ref="oval:org.mitre.oval:tst:8091"/>
                </criteria>
                <criteria operator="AND">
                    <extend_definition comment="Microsoft Windows XP (32-bit) SP3 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115278"/>
                    <criterion comment="The version of Rmcast.sys is less than 5.1.2600.5598." test_ref="oval:org.mitre.oval:tst:7565"/>
                </criteria>
                <criteria operator="AND">
                    <extend_definition comment="Microsoft Windows XP (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115277"/>
                    <criterion comment="The version of Rmcast.sys is less than 5.2.3790.4290." test_ref="oval:org.mitre.oval:tst:7634"/>
                </criteria>
                <criteria operator="AND">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                    </criteria>
                    <criterion comment="The version of Rmcast.sys is greater than or equal to 6.0.6001.18000." test_ref="oval:gov.nist.fdcc.patch:tst:115266"/>
                    <criterion comment="The version of Rmcast.sys is less than 6.0.6001.18069." test_ref="oval:gov.nist.fdcc.patch:tst:115267"/>
                </criteria>
                <criteria operator="AND">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                    </criteria>
                    <criterion comment="The version of Rmcast.sys is greater than or equal to 6.0.6001.22000." test_ref="oval:gov.nist.fdcc.patch:tst:115268"/>
                    <criterion comment="The version of Rmcast.sys is less than 6.0.6001.22176." test_ref="oval:gov.nist.fdcc.patch:tst:115269"/>
                </criteria>
            </criteria>
        </definition>
        <definition id="oval:gov.nist.fdcc.patch:def:11442" version="1" class="patch">
            <metadata>
                <title>MS08-047: Vulnerability in IPsec Policy Processing Could Allow Information Disclosure (953733)</title>
                <affected family="windows">
                    <platform>Microsoft Windows Vista</platform>
                    <platform>Microsoft Windows Server 2008</platform>
                </affected>
                <reference source="CVE" ref_id="CVE-2008-2246" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2246"/>
                <reference source="Microsoft" ref_id="MS08-047" ref_url="http://www.microsoft.com/technet/security/bulletin/MS08-047.mspx"/>
                <reference source="Microsoft" ref_id="KB953733" ref_url="http://support.microsoft.com/kb/953733"/>
                <reference source="OVAL" ref_id="oval:org.mitre.oval:def:6060" ref_url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:6060"/>
                <description>Microsoft has released MS08-047 to address security issues in Windows Vista and Windows Server 2008 as documented by CVE-2008-2246.</description>
            </metadata>
            <criteria operator="OR">
                <criteria operator="AND">
                    <extend_definition comment="Microsoft Windows Vista (32-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                    <criterion comment="the version of Ipsecsvc.dll is less than 6.0.6001.18094" test_ref="oval:org.mitre.oval:tst:8911"/>
                </criteria>
                <criteria operator="AND">
                    <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                    <criterion comment="the version of Ipsecsvc.dll is less than 6.0.6001.18094" test_ref="oval:org.mitre.oval:tst:8911"/>
                </criteria>
            </criteria>
        </definition>
        <definition id="oval:gov.nist.fdcc.patch:def:11443" version="1" class="patch">
            <metadata>
                <title>MS08-048: Security Update for Outlook Express and Windows Mail (951066)</title>
                <affected family="windows">
                    <platform>Microsoft Windows XP</platform>
                    <platform>Microsoft Windows Vista</platform>
                    <platform>Microsoft Windows Server 2008</platform>
                    <product>Microsoft Outlook Express</product>
                    <product>Microsoft Mail</product>
                </affected>
                <reference source="CVE" ref_id="CVE-2008-1448" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1448"/>
                <reference source="Microsoft" ref_id="MS08-048" ref_url="http://www.microsoft.com/technet/security/bulletin/MS08-048.mspx"/>
                <reference source="Microsoft" ref_id="KB951066" ref_url="http://support.microsoft.com/kb/951066"/>
                <reference source="OVAL" ref_id="oval:org.mitre.oval:def:5886" ref_url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:5886"/>
                <description>Microsoft has released MS08-048 to address security issues in Windows XP and Windows Vista, Windows Server 2003, and Windows Server 2008 as documented by CVE-2008-1448.</description>
            </metadata>
            <criteria operator="OR">
                <criteria operator="AND" comment="Outlook Express 6 on Win XP SP2">
                    <extend_definition comment="Microsoft Windows XP (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115276"/>
                    <extend_definition comment="Microsoft Outlook Express 6 for Windows XP/2003 is installed" definition_ref="oval:org.mitre.oval:def:208"/>
                    <criterion comment="the version of inetcomm.dll is less than 6.0.2900.3350" test_ref="oval:org.mitre.oval:tst:8951"/>
                </criteria>
                <criteria operator="AND" comment="Outlook Express 6 on Win XP SP3">
                    <extend_definition comment="Microsoft Windows XP (32-bit) SP3 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115278"/>
                    <extend_definition comment="Microsoft Outlook Express 6 for Windows XP/2003 is installed" definition_ref="oval:org.mitre.oval:def:208"/>
                    <criterion comment="the version of inetcomm.dll is less than 6.0.2900.5579" test_ref="oval:org.mitre.oval:tst:8248"/>
                </criteria>
                <criteria operator="AND" comment="Outlook Express 6 on Win XP SP2 (64-bit)">
                    <extend_definition comment="Microsoft Windows XP SP2 (64-bit) is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115277"/>
                    <extend_definition comment="Microsoft Outlook Express 6 for Windows XP/2003 is installed" definition_ref="oval:org.mitre.oval:def:208"/>
                    <criterion comment="the version of inetcomm.dll is less than 6.0.3790.4325" test_ref="oval:org.mitre.oval:tst:9185"/>
                </criteria>
                <criteria operator="AND">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
                    </criteria>
                    <extend_definition comment="Microsoft Windows Mail is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115234"/>
                    <criterion comment="the version of inetcomm.dll is less than 6.0.6001.18049" test_ref="oval:org.mitre.oval:tst:9051"/>
                </criteria>
            </criteria>
        </definition>
        <definition id="oval:gov.nist.fdcc.patch:def:11444" version="1" class="patch">
            <metadata>
                <title>MS08-049: Vulnerabilities in Event System Could Allow Remote Code Execution (950974)</title>
                <affected family="windows">
                    <platform>Microsoft Windows XP</platform>
                    <platform>Microsoft Windows Vista</platform>
                    <platform>Microsoft Windows Server 2008</platform>
                </affected>
                <reference source="CVE" ref_id="CVE-2008-1456" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1456"/>
                <reference source="CVE" ref_id="CVE-2008-1457" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1457"/>
                <reference source="Microsoft" ref_id="MS08-049" ref_url="http://www.microsoft.com/technet/security/bulletin/MS08-049.mspx"/>
                <reference source="Microsoft" ref_id="KB950974" ref_url="http://support.microsoft.com/kb/950974"/>
                <reference source="OVAL" ref_id="oval:org.mitre.oval:def:5630" ref_url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:5630"/>
                <reference source="OVAL" ref_id="oval:org.mitre.oval:def:6095" ref_url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:6095"/>
                <description>Microsoft has released MS08-049 to address security issues in Windows 2000, Windows XP, Windows Server 2003, Windows Vista, and Windows Server 2008 as documented by CVE-2008-1456 and CVE-2008-1457.</description>
            </metadata>
            <criteria operator="OR">
                <criteria operator="AND">
                    <extend_definition comment="Microsoft Windows XP (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115276"/>
                    <criterion comment="the version of es.dll is less than 2001.12.4414.320" test_ref="oval:org.mitre.oval:tst:9013"/>
                </criteria>
                <criteria operator="AND">
                    <extend_definition comment="Microsoft Windows XP (32-bit) SP3 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115278"/>
                    <criterion comment="the version of es.dll is less than 2001.12.4414.706" test_ref="oval:org.mitre.oval:tst:9019"/>
                </criteria>
                <criteria operator="AND">
                    <extend_definition comment="Microsoft Windows XP (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115277"/>
                    <criterion comment="the version of es.dll is less than 2001.12.4720.4282" test_ref="oval:org.mitre.oval:tst:8200"/>
                </criteria>
                <criteria operator="AND">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                    </criteria>
                    <criterion comment="the version of es.dll is less than 2001.12.6931.18057" test_ref="oval:org.mitre.oval:tst:8968"/>
                </criteria>
            </criteria>
        </definition>
        <definition id="oval:gov.nist.fdcc.patch:def:11447" version="1" class="patch">
            <metadata>
                <title>MS08-054: Vulnerability in Windows Media Player Could Allow Remote Code Execution (954154)</title>
                <affected family="windows">
                    <platform>Microsoft Windows XP</platform>
                    <platform>Microsoft Windows Vista</platform>
                    <platform>Microsoft Windows Server 2008</platform>
                    <product>Microsoft Media Player</product>
                </affected>
                <reference source="CVE" ref_id="CVE-2008-2253" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2253"/>
                <reference source="Microsoft" ref_id="MS08-054" ref_url="http://www.microsoft.com/technet/security/bulletin/MS08-054.mspx"/>
                <reference source="Microsoft" ref_id="KB954154" ref_url="http://support.microsoft.com/kb/954154"/>
                <reference source="OVAL" ref_id="oval:org.mitre.oval:def:5615" ref_url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:5615"/>
                <description>Microsoft has released MS08-054 to address security issues in Windows Media Player 11 as documented by CVE-2008-2253.</description>
            </metadata>
            <criteria operator="OR">
                <criteria operator="AND">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows XP (32-bit or 64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115274"/>
                        <extend_definition comment="Microsoft Windows XP (32-bit) SP3 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115278"/>
                    </criteria>
                    <extend_definition comment="Windows Media Player v11.0 is installed." definition_ref="oval:org.mitre.oval:def:2126"/>
                    <criterion comment="Wmpeffects.dll version is less than 11.0.5721.5252" test_ref="oval:org.mitre.oval:tst:9036"/>
                </criteria>
                <criteria operator="AND">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                    </criteria>
                    <extend_definition comment="Windows Media Player v11.0 is installed." definition_ref="oval:org.mitre.oval:def:2126"/>
                    <criterion comment="Wmpeffects.dll version is less than 11.0.6001.7002" test_ref="oval:org.mitre.oval:tst:8662"/>
                </criteria>
            </criteria>
        </definition>
        <definition id="oval:gov.nist.fdcc.patch:def:11449" version="1" class="patch">
            <metadata>
                <title>MS08-053: Vulnerability in Windows Media Encoder 9 Could Allow Remote Code Execution (954156)</title>
                <affected family="windows">
                    <platform>Microsoft Windows XP</platform>
                    <platform>Microsoft Windows Vista</platform>
                    <platform>Microsoft Windows Server 2008</platform>
                    <product>Microsoft Media Encoder</product>
                </affected>
                <reference source="CVE" ref_id="CVE-2008-3008" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3008"/>
                <reference source="Microsoft" ref_id="MS08-053" ref_url="http://www.microsoft.com/technet/security/bulletin/MS08-053.mspx"/>
                <reference source="Microsoft" ref_id="KB954156" ref_url="http://support.microsoft.com/kb/954156"/>
                <reference source="OVAL" ref_id="oval:org.mitre.oval:def:6018" ref_url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:6018"/>
                <description>Microsoft has released MS08-053 to address security issues in Microsoft Windows 2000, Windows XP, and Windows Vista, Windows Server 2003 and Windows Server 2008 as documented by CVE-2008-3008.</description>
            </metadata>
            <criteria operator="OR">
                <criteria operator="AND">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows XP (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115276"/>
                        <extend_definition comment="Microsoft Windows XP (32-bit) SP3 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115278"/>
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                    </criteria>
                    <criterion comment="Wmex.dll version is greater than or equal to  9.0.0.0" test_ref="oval:org.mitre.oval:tst:8780"/>
                    <criterion comment="Wmex.dll version is less than to  10.0.0.0" test_ref="oval:org.mitre.oval:tst:8858"/>
                    <criterion comment="Wmex.dll version is less than 9.0.0.3359" test_ref="oval:org.mitre.oval:tst:8469"/>
                </criteria>
                <criteria operator="AND">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows XP (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115277"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                    </criteria>
                    <criterion comment="Wmex.dll version is greater than or equal to  10.0.0.0" test_ref="oval:org.mitre.oval:tst:8587"/>
                    <criterion comment="Wmex.dll version is less than to  10.0.0.0" test_ref="oval:org.mitre.oval:tst:8887"/>
                    <criterion comment="Wmex.dll version is less than 10.0.0.3817" test_ref="oval:org.mitre.oval:tst:9030"/>
                </criteria>
            </criteria>
        </definition>
        <definition id="oval:gov.nist.fdcc.patch:def:11501" version="1" class="patch">
            <metadata>
                <title>MS08-061: Vulnerabilities in Windows Kernel Could Allow Elevation of Privilege (954211)</title>
                <affected family="windows">
                    <platform>Microsoft Windows XP</platform>
                    <platform>Microsoft Windows Vista</platform>
                    <platform>Microsoft Windows Server 2008</platform>
                </affected>
                <reference source="CVE" ref_id="CVE-2008-2250 " ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2250"/>
                <reference source="CVE" ref_id="CVE-2008-2251 " ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2251"/>
                <reference source="CVE" ref_id="CVE-2008-2252 " ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2252"/>
                <reference source="Microsoft" ref_id="MS08-061" ref_url="http://www.microsoft.com/technet/security/Bulletin/MS08-061.mspx"/>
                <reference source="Microsoft" ref_id="KB954211" ref_url="http://support.microsoft.com/kb/954211"/>
                <reference source="OVAL" ref_id="oval:org.mitre.oval:def:5902" ref_url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:5902"/>
                <reference source="OVAL" ref_id="oval:org.mitre.oval:def:6010" ref_url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:6010"/>
                <reference source="OVAL" ref_id="oval:org.mitre.oval:def:6045" ref_url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:6045"/>
                <description>Microsoft has released MS08-061 to address security issues in Windows 2000, Windows XP, Windows Server 2003, Windows Vista, and Windows Server 2008 as documented by CVE-2008-2250, CVE-2008-2251, and CVE-2008-2252.</description>
            </metadata>
            <criteria operator="OR">
                <criteria operator="AND">
                    <extend_definition comment="Microsoft Windows XP (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115276"/>
                    <criterion comment="Win32k.sys version is less than 5.1.2600.3446" test_ref="oval:org.mitre.oval:tst:8612"/>
                </criteria>
                <criteria operator="AND">
                    <extend_definition comment="Microsoft Windows XP (32-bit) SP3 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115278"/>
                    <criterion comment="Win32k.sys version is less than 5.1.2600.5676" test_ref="oval:org.mitre.oval:tst:9293"/>
                </criteria>
                <criteria operator="AND">
                    <extend_definition comment="Microsoft Windows XP (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115277"/>
                    <criterion comment="Win32k.sys version is less than 5.2.3790.4375" test_ref="oval:org.mitre.oval:tst:9112"/>
                </criteria>
                <criteria operator="AND">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
                    </criteria>
                    <criterion comment="Win32k.sys version is less than 6.0.6001.18141" test_ref="oval:org.mitre.oval:tst:8928"/>
                </criteria>
            </criteria>
        </definition>
        <definition id="oval:gov.nist.fdcc.patch:def:11502" version="2" class="patch">
            <metadata>
                <title>MS08-062: Vulnerability in Windows Internet Printing Service Could Allow Remote Code Execution (953155)</title>
                <affected family="windows">
                    <platform>Microsoft Windows XP</platform>
                    <platform>Microsoft Windows Vista</platform>
                    <platform>Microsoft Windows Server 2008</platform>
                </affected>
                <reference source="CVE" ref_id="CVE-2008-1446 " ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1446"/>
                <reference source="Microsoft" ref_id="MS08-062" ref_url="http://www.microsoft.com/technet/security/Bulletin/MS08-062.mspx"/>
                <reference source="Microsoft" ref_id="KB953155" ref_url="http://support.microsoft.com/kb/953155"/>
                <reference source="OVAL" ref_id="oval:org.mitre.oval:def:5764" ref_url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:5764"/>
                <description>Microsoft has released MS08-062 to address security issues in Windows 2000, Windows XP, Windows Server 2003, Windows Vista, and Windows Server 2008 as documented by CVE-2008-1446.</description>
            </metadata>
            <criteria operator="OR">
                <criteria operator="AND">
                    <extend_definition comment="Microsoft Windows XP (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115276"/>
                    <extend_definition comment="IIS is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115279"/>
                    <criterion comment="The iis optional component is installed" test_ref="oval:gov.nist.fdcc.patch:tst:4600001"/>
                    <criterion comment="Win32spl.dll version is less than 5.1.2600.3435" test_ref="oval:org.mitre.oval:tst:9281"/>
                </criteria>
                <criteria operator="AND">
                    <extend_definition comment="Microsoft Windows XP (32-bit) SP3 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115278"/>
                    <extend_definition comment="IIS is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115279"/>
                    <criterion comment="The iis optional component is installed" test_ref="oval:gov.nist.fdcc.patch:tst:4600001"/>
                    <criterion comment="Win32spl.dll version is less than 5.1.2600.5664" test_ref="oval:org.mitre.oval:tst:9352"/>
                </criteria>
                <criteria operator="AND">
                    <extend_definition comment="Microsoft Windows XP (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115277"/>
                    <extend_definition comment="IIS is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115279"/>
                    <criterion comment="Win32spl.dll version is less than 5.2.3790.4371" test_ref="oval:org.mitre.oval:tst:8857"/>
                </criteria>
                <criteria operator="AND">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
                    </criteria>
                    <extend_definition comment="IIS is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115279"/>
                    <criterion comment="Win32spl.dll version is less than 6.0.6001.18119" test_ref="oval:org.mitre.oval:tst:9011"/>
                </criteria>
            </criteria>
        </definition>
        <definition id="oval:gov.nist.fdcc.patch:def:11504" version="1" class="patch">
            <metadata>
                <title>MS08-058: Cumulative Security Update for Internet Explorer (956390)</title>
                <affected family="windows">
                    <platform>Microsoft Windows XP</platform>
                    <platform>Microsoft Windows Vista</platform>
                    <platform>Microsoft Windows Server 2008</platform>
                    <product>Internet Explorer</product>
                </affected>
                <reference source="CVE" ref_id="CVE-2008-2947 " ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2947"/>
                <reference source="CVE" ref_id="CVE-2008-3472 " ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3472"/>
                <reference source="CVE" ref_id="CVE-2008-3473 " ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3473"/>
                <reference source="CVE" ref_id="CVE-2008-3474 " ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3474"/>
                <reference source="CVE" ref_id="CVE-2008-3475 " ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3475"/>
                <reference source="CVE" ref_id="CVE-2008-3476 " ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3476"/>
                <reference source="Microsoft" ref_id="MS08-058" ref_url="http://www.microsoft.com/technet/security/Bulletin/MS08-058.mspx"/>
                <reference source="Microsoft" ref_id="KB956390" ref_url="http://support.microsoft.com/kb/956390"/>
                <reference source="OVAL" ref_id="oval:org.mitre.oval:def:5901" ref_url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:5901"/>
                <description>Microsoft has released MS08-059 to address security issues in Internet Explorer as documented by CVE-2008-2947, CVE-2008-3472, CVE-2008-3473, CVE-2008-3474, CVE-2008-3475, and CVE-2008-3476.</description>
            </metadata>
            <criteria operator="OR">
                <criteria operator="AND">
                    <extend_definition comment="Microsoft Windows XP (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115276"/>
                    <extend_definition comment="Microsoft Internet Explorer 6 is installed" definition_ref="oval:org.mitre.oval:def:563"/>
                    <criterion comment="Mshtml.dll version is less than 6.0.2900.3429" test_ref="oval:org.mitre.oval:tst:9320"/>
                </criteria>
                <criteria operator="AND">
                    <extend_definition comment="Microsoft Windows XP (32-bit) SP3 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115278"/>
                    <extend_definition comment="Microsoft Internet Explorer 6 is installed" definition_ref="oval:org.mitre.oval:def:563"/>
                    <criterion comment="Mshtml.dll version is less than 6.0.2900.5659" test_ref="oval:org.mitre.oval:tst:9099"/>
                </criteria>
                <criteria operator="AND">
                    <extend_definition comment="Microsoft Windows XP (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115277"/>
                    <extend_definition comment="Microsoft Internet Explorer 6 is installed" definition_ref="oval:org.mitre.oval:def:563"/>
                    <criterion comment="Mshtml.dll version is less than 6.0.3790.4357" test_ref="oval:org.mitre.oval:tst:8902"/>
                </criteria>
                <criteria operator="AND">
                    <extend_definition comment="Microsoft Windows XP SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115274"/>
                    <extend_definition comment="Microsoft Internet Explorer 7 is installed" definition_ref="oval:org.mitre.oval:def:627"/>
                    <criterion comment="Mshtml.dll version is less than 7.0.6000.16735" test_ref="oval:org.mitre.oval:tst:8577"/>
                </criteria>
                <criteria operator="AND">
                    <extend_definition comment="Microsoft Internet Explorer 7 is installed" definition_ref="oval:org.mitre.oval:def:627"/>
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                    </criteria>
                    <criteria operator="OR">
                        <criteria operator="AND">
                            <criterion comment="Mshtml.dll version is greater than or equal to 7.0.6001.18000" test_ref="oval:gov.nist.fdcc.patch:tst:115258"/>
                            <criterion comment="Mshtml.dll version is less than 7.0.6001.18148" test_ref="oval:gov.nist.fdcc.patch:tst:115311"/>
                        </criteria>
                        <criteria operator="AND">
                            <criterion comment="Mshtml.dll version is greater than or equal to 7.0.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:115259"/>
                            <criterion comment="Mshtml.dll version is less than 7.0.6001.22278" test_ref="oval:gov.nist.fdcc.patch:tst:115305"/>
                        </criteria>
                    </criteria>
                </criteria>
            </criteria>
        </definition>
        <definition id="oval:gov.nist.fdcc.patch:def:11507" version="1" class="patch">
            <metadata>
                <title>MS08-067: Vulnerability in Server Service Could Allow Remote Code Execution (958644)</title>
                <affected family="windows">
                    <platform>Microsoft Windows XP</platform>
                    <platform>Microsoft Windows Vista</platform>
                    <platform>Microsoft Windows Server 2008</platform>
                </affected>
                <reference source="CVE" ref_id="CVE-2008-4250" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4250"/>
                <reference source="Microsoft" ref_id="MS08-067" ref_url="http://www.microsoft.com/technet/security/bulletin/ms08-067.mspx"/>
                <reference source="Microsoft" ref_id="KB958644" ref_url="http://support.microsoft.com/kb/958644"/>
                <reference source="OVAL" ref_id="oval:org.mitre.oval:def:6093" ref_url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:6093"/>
                <description>Microsoft has released MS08-061 to address security issues in Windows 2000, Windows XP, Windows Server 2003, Windows Vista, and Windows Server 2008 as documented by CVE-2008-4250</description>
            </metadata>
            <criteria operator="OR">
                <criteria operator="AND">
                    <extend_definition comment="Microsoft Windows XP (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115276"/>
                    <criterion comment="Netapi32.dll version is less than 5.1.2600.3462" test_ref="oval:org.mitre.oval:tst:9314"/>
                </criteria>
                <criteria operator="AND">
                    <extend_definition comment="Microsoft Windows XP (32-bit) SP3 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115278"/>
                    <criterion comment="Netapi32.dll version is less than 5.1.2600.5694" test_ref="oval:org.mitre.oval:tst:9266"/>
                </criteria>
                <criteria operator="AND">
                    <extend_definition comment="Microsoft Windows XP (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115277"/>
                    <criterion comment="Netapi32.dll version is less than 5.2.3790.4392" test_ref="oval:org.mitre.oval:tst:9058"/>
                </criteria>
                <criteria operator="AND">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
                    </criteria>
                    <criteria operator="OR">
                        <criteria operator="AND">
                            <criterion comment="Netapi32.dll version is greater than or equal to 6.0.6001.18000" test_ref="oval:gov.nist.fdcc.patch:tst:115306"/>
                            <criterion comment="Netapi32.dll version is less than 6.0.6001.18157" test_ref="oval:org.mitre.oval:tst:9140"/>
                        </criteria>
                        <criteria operator="AND">
                            <criterion comment="Netapi32.dll version is greater than or equal to 6.0.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:115307"/>
                            <criterion comment="Netapi32.dll version is less than 6.0.6001.22288" test_ref="oval:org.mitre.oval:tst:9090"/>
                        </criteria>
                    </criteria>
                </criteria>
            </criteria>
        </definition>
        <definition id="oval:gov.nist.fdcc.patch:def:11510" version="1" class="patch">
            <metadata>
                <title>MS08-069: Vulnerabilities in Microsoft XML Core Services could allow remote code execution (955218)</title>
                <affected family="windows">
                    <platform>Microsoft Windows XP</platform>
                    <platform>Microsoft Windows Vista</platform>
                    <platform>Microsoft Windows Server 2008</platform>
                </affected>
                <reference source="CVE" ref_id="CVE-2008-4033" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4033"/>
                <reference source="Microsoft" ref_id="MS08-069" ref_url="http://www.microsoft.com/technet/security/bulletin/ms08-069.mspx"/>
                <reference source="Microsoft" ref_id="KB955218" ref_url="http://support.microsoft.com/kb/955218"/>
                <reference source="OVAL" ref_id="oval:org.mitre.oval:def:5847" ref_url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:5847"/>
                <description>Microsoft has released MS08-069 to address security issues in Windows 2000, Windows XP, Windows Server 2003, Windows Vista, and Windows Server 2008 as documented by CVE-2008-4033</description>
            </metadata>
            <criteria operator="AND">
                <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/>
                <criteria operator="OR">
                    <criteria operator="AND">
                        <extend_definition comment="Microsoft XML Core Services 3 is installed" definition_ref="oval:org.mitre.oval:def:415"/>
                        <criterion comment="msxml3.dll version is less than 8.100.1048.0" test_ref="oval:org.mitre.oval:tst:9071"/>
                    </criteria>
                    <criteria operator="AND">
                        <extend_definition comment="Microsoft XML Core Services 4 is installed" definition_ref="oval:org.mitre.oval:def:1002"/>
                        <criterion comment="msxml4.dll version is less than 4.20.9870.0" test_ref="oval:org.mitre.oval:tst:9539"/>
                    </criteria>
                    <criteria operator="AND">
                        <extend_definition comment="Microsoft XML Core Services 5 is installed" definition_ref="oval:org.mitre.oval:def:493"/>
                        <criterion comment="msxml5.dll version is less than 5.20.1087.0" test_ref="oval:org.mitre.oval:tst:9234"/>
                    </criteria>
                    <criteria operator="AND">
                        <extend_definition comment="Microsoft XML Core Services 6 is installed" definition_ref="oval:org.mitre.oval:def:454"/>
                        <criterion comment="msxml6.dll version is less than 6.20.1099.0" test_ref="oval:org.mitre.oval:tst:9530"/>
                    </criteria>
                </criteria>
            </criteria>
        </definition>
        <definition id="oval:gov.nist.fdcc.patch:def:11511" version="1" class="patch">
            <metadata>
                <title>MS08-068: Vulnerability in SMB could allow remote code execution (957097)</title>
                <affected family="windows">
                    <platform>Microsoft Windows XP</platform>
                    <platform>Microsoft Windows Vista</platform>
                    <platform>Microsoft Windows Server 2008</platform>
                </affected>
                <reference source="CVE" ref_id="CVE-2008-4037" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4037"/>
                <reference source="Microsoft" ref_id="MS08-068" ref_url="http://www.microsoft.com/technet/security/bulletin/ms08-068.mspx"/>
                <reference source="Microsoft" ref_id="KB957097" ref_url="http://support.microsoft.com/default.aspx/kb/957097"/>
                <reference source="OVAL" ref_id="oval:org.mitre.oval:def:6012" ref_url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:6012"/>
                <description>Microsoft has released MS08-068 to address security issues in Windows 2000, Windows XP, Windows Server 2003, Windows Vista, and Windows Server 2008 as documented by CVE-2008-4037</description>
            </metadata>
            <criteria operator="OR">
                <criteria operator="AND">
                    <extend_definition comment="Microsoft Windows XP (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115276"/>
                    <criterion comment="Mrxsmb.sys version is less than 5.1.2600.3467" test_ref="oval:org.mitre.oval:tst:8573"/>
                </criteria>
                <criteria operator="AND">
                    <extend_definition comment="Microsoft Windows XP (32-bit) SP3 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115278"/>
                    <criterion comment="Mrxsmb.sys version is less than 5.1.2600.5700" test_ref="oval:org.mitre.oval:tst:9308"/>
                </criteria>
                <criteria operator="AND">
                    <extend_definition comment="Microsoft Windows XP (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115277"/>
                    <criterion comment="Mrxsmb.sys version is less than 5.2.3790.4369" test_ref="oval:org.mitre.oval:tst:9476"/>
                </criteria>
                <criteria operator="AND">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
                    </criteria>
                    <criteria operator="OR">
                        <criteria operator="AND">
                            <criterion comment="Mrxsmb10.sys version is greater than or equal to 6.0.6001.18000" test_ref="oval:gov.nist.fdcc.patch:tst:115264"/>
                            <criterion comment="Mrxsmb10.sys version is less than 6.0.6001.18130" test_ref="oval:org.mitre.oval:tst:8808"/>
                        </criteria>
                        <criteria operator="AND">
                            <criterion comment="Mrxsmb10.sys version is greater than or equal to 6.0.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:115265"/>
                            <criterion comment="Mrxsmb10.sys version is less than 6.0.6001.22252" test_ref="oval:org.mitre.oval:tst:9477"/>
                        </criteria>
                    </criteria>
                </criteria>
            </criteria>
        </definition>
        <definition id="oval:gov.nist.fdcc.patch:def:11520" version="1" class="patch">
            <metadata>
                <title>MS08-071: Vulnerabilities in GDI Could Allow Remote Code Execution (956802)</title>
                <affected family="windows">
                    <platform>Microsoft Windows XP</platform>
                    <platform>Microsoft Windows Vista</platform>
                </affected>
                <reference source="CVE" ref_id="CVE-2008-2249" ref_url="http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2249"/>
                <reference source="CVE" ref_id="CVE-2008-3465" ref_url="http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3465"/>
                <reference source="Microsoft" ref_id="MS08-071" ref_url="http://www.microsoft.com/technet/security/Bulletin/ms08-071.mspx"/>
                <reference source="Microsoft" ref_id="KB956802" ref_url="http://support.microsoft.com/default.aspx/kb/956802"/>
                <reference source="OVAL" ref_id="oval:org.mitre.oval:def:5984" ref_url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:5984"/>
                <reference source="OVAL" ref_id="oval:org.mitre.oval:def:6062" ref_url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:6062"/>
                <description>Microsoft has released MS08-071to address security issues in Windows XP and Windows Vista, CVE-2008-2249 and CVE-2008-3465</description>
            </metadata>
            <criteria operator="OR">
                <criteria operator="AND">
                    <extend_definition comment="Microsoft Windows XP (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115276"/>
                    <criterion comment="Gdi32.dll version is less than 5.1.2600.3466" test_ref="oval:gov.nist.fdcc.patch:tst:115201"/>
                </criteria>
                <criteria operator="AND">
                    <extend_definition comment="Microsoft Windows XP (32-bit) SP3 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115278"/>
                    <criterion comment="Gdi32.dll version is less than 5.1.2600.5698" test_ref="oval:gov.nist.fdcc.patch:tst:115202"/>
                </criteria>
                <criteria operator="AND">
                    <extend_definition comment="Microsoft Windows XP (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115277"/>
                    <criterion comment="Gdi32.dll version is less than 5.2.3790.4396" test_ref="oval:gov.nist.fdcc.patch:tst:115203"/>
                </criteria>
                <criteria operator="AND">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                    </criteria>
                    <criterion comment="Gdi32.dll version is greater than or equal to 6.0.6001.18000" test_ref="oval:gov.nist.fdcc.patch:tst:115308"/>
                    <criterion comment="gdi32.dll version is less than 6.0.6001.18159" test_ref="oval:org.mitre.oval:tst:9510"/>
                </criteria>
                <criteria operator="AND">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                    </criteria>
                    <criterion comment="Gdi32.dll version is greater than or equal to 6.0.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:115309"/>
                    <criterion comment="gdi32.dll version is less than 6.0.6001.22291" test_ref="oval:gov.nist.fdcc.patch:tst:115310"/>
                </criteria>
            </criteria>
        </definition>
        <definition id="oval:gov.nist.fdcc.patch:def:11522" version="1" class="patch">
            <metadata>
                <title>MS08-075: Vulnerabilities in Windows Search Could Allow Remote Code Execution (959349)</title>
                <affected family="windows">
                    <platform>Microsoft Windows Vista</platform>
                </affected>
                <reference source="CVE" ref_id="CVE-2008-4268" ref_url="http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4268"/>
                <reference source="CVE" ref_id="CVE-2008-4269" ref_url="http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4269"/>
                <reference source="Microsoft" ref_id="MS08-075" ref_url="http://www.microsoft.com/technet/security/Bulletin/ms08-075.mspx"/>
                <reference source="Microsoft" ref_id="KB959349" ref_url="http://support.microsoft.com/default.aspx/kb/959349"/>
                <reference source="OVAL" ref_id="oval:org.mitre.oval:def:6110" ref_url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:6110"/>
                <reference source="OVAL" ref_id="oval:org.mitre.oval:def:5853" ref_url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:5853"/>
                <description>Microsoft has released MS08-075 to address security issues in Windows Vista as documented by CVE-2008-4268 and CVE-2008-4269</description>
            </metadata>
            <criteria operator="OR">
                <criteria operator="AND" comment="GDR">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                    </criteria>
                    <criterion comment="Explorer.exe version is greater than or equal to 6.0.6001.18000" test_ref="oval:gov.nist.fdcc.patch:tst:115260"/>
                    <criterion comment="Explorer.exe version is less than 6.0.6001.18164" test_ref="oval:gov.nist.fdcc.patch:tst:115221"/>
                </criteria>
                <criteria operator="AND" comment="LDR">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                    </criteria>
                    <criterion comment="Explorer.exe version is greater than or equal to 6.0.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:115261"/>
                    <criterion comment="Explorer.exe version is less than 6.0.6001.22298" test_ref="oval:gov.nist.fdcc.patch:tst:115222"/>
                </criteria>
            </criteria>
        </definition>
        <definition id="oval:gov.nist.fdcc.patch:def:11523" version="1" class="patch">
            <metadata>
                <title>MS08-076: Vulnerabilities in Windows Media Components Could Allow Remote Code Execution (959807)</title>
                <affected family="windows">
                    <platform>Microsoft Windows XP</platform>
                    <platform>Microsoft Windows Vista</platform>
                </affected>
                <reference source="CVE" ref_id="CVE-2008-3009" ref_url="http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3009"/>
                <reference source="CVE" ref_id="CVE-2008-3010" ref_url="http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3010"/>
                <reference source="Microsoft" ref_id="MS08-076" ref_url="http://www.microsoft.com/technet/security/Bulletin/ms08-076.mspx"/>
                <reference source="Microsoft" ref_id="KB959807" ref_url="http://support.microsoft.com/default.aspx/kb/959807"/>
                <reference source="OVAL" ref_id="oval:org.mitre.oval:def:5942" ref_url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:5942"/>
                <reference source="OVAL" ref_id="oval:org.mitre.oval:def:5689" ref_url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:5689"/>
                <description>Microsoft has released MS08-076 to address security issues in Windows XP and Windows Vista as documented by CVE-2008-3009 and CVE-2008-3010</description>
            </metadata>
            <criteria operator="OR">
                <criteria operator="AND">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows XP (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115276"/>
                        <extend_definition comment="Microsoft Windows XP (32-bit) SP3 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115278"/>
                    </criteria>
                    <criteria operator="OR">
                        <criteria operator="AND">
                            <extend_definition comment="Windows Media Player v9.0 is installed." definition_ref="oval:gov.nist.fdcc.patch:def:115231"/>
                            <criterion comment="Wmvcore.dll version is less than 9.0.0.3268" test_ref="oval:gov.nist.fdcc.patch:tst:115231"/>
                        </criteria>
                        <criteria operator="AND">
                            <extend_definition comment="Windows Media Player v10.0 is installed." definition_ref="oval:gov.nist.fdcc.patch:def:115232"/>
                            <criterion comment="Wmvcore.dll version is less than 10.0.0.3703" test_ref="oval:gov.nist.fdcc.patch:tst:115232"/>
                        </criteria>
                        <criteria operator="AND">
                            <extend_definition comment="Windows Media Player v11.0 is installed." definition_ref="oval:gov.nist.fdcc.patch:def:115233"/>
                            <criterion comment="Wmvcore.dll version is less than 11.0.5721.5251" test_ref="oval:gov.nist.fdcc.patch:tst:115233"/>
                        </criteria>
                    </criteria>
                </criteria>
                <criteria operator="AND">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                    </criteria>
                    <extend_definition comment="Windows Media Player v11.0 is installed." definition_ref="oval:gov.nist.fdcc.patch:def:115233"/>
                    <criterion comment="Wmvcore.dll version is less than 11.0.6001.7001" test_ref="oval:gov.nist.fdcc.patch:tst:115234"/>
                </criteria>
            </criteria>
        </definition>
        <definition id="oval:gov.nist.fdcc.patch:def:11525" version="1" class="patch">
            <metadata>
                <title>MS09-001: Vulnerabilities in SMB could allow remote code execution (958687)</title>
                <affected family="windows">
                    <platform>Microsoft Windows XP</platform>
                    <platform>Microsoft Windows Vista</platform>
                </affected>
                <reference source="CVE" ref_id="CVE-2008-4114" ref_url="http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4114"/>
                <reference source="CVE" ref_id="CVE-2008-4835" ref_url="http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4835"/>
                <reference source="CVE" ref_id="CVE-2008-4834" ref_url="http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4834"/>
                <reference source="Microsoft" ref_id="MS09-001" ref_url="http://www.microsoft.com/technet/security/Bulletin/ms09-001.mspx"/>
                <reference source="Microsoft" ref_id="KB958687" ref_url="http://support.microsoft.com/default.aspx/kb/958687"/>
                <!-- ==========================================  No OVAL reference yet  =========================================== -->
                <!--<reference source="OVAL" ref_id="oval:org.mitre.oval:def:0000" ref_url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:0000"/>-->
                <!-- ==========================================  No OVAL reference yet  =========================================== -->
                <description>Microsoft has released MS09-001to address security issues in Windows XP and Windows Vista, CVE-2008-4114, CVE-2008-4834, and CVE-2008-4835</description>
            </metadata>
            <criteria operator="OR">
                <criteria operator="AND">
                    <extend_definition comment="Microsoft Windows XP (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115276"/>
                    <criterion comment="Srv.sys version is less than 5.1.2600.3491" test_ref="oval:gov.nist.fdcc.patch:tst:115251"/>
                </criteria>
                <criteria operator="AND">
                    <extend_definition comment="Microsoft Windows XP (32-bit) SP3 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115278"/>
                    <criterion comment="Srv.sys version is less than 5.1.2600.5725" test_ref="oval:gov.nist.fdcc.patch:tst:115252"/>
                </criteria>
                <criteria operator="AND">
                    <extend_definition comment="Microsoft Windows XP (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115277"/>
                    <criterion comment="Srv.sys version is less than 5.2.3790.4425" test_ref="oval:gov.nist.fdcc.patch:tst:115253"/>
                </criteria>
                <criteria operator="AND">
                    <extend_definition comment="Microsoft Windows Vista (32-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                    <criterion comment="Srv.sys version is greater than or equal to 6.0.6001.18000" test_ref="oval:gov.nist.fdcc.patch:tst:115254"/>
                    <criterion comment="Srv.sys version is less than 6.0.6001.18185" test_ref="oval:gov.nist.fdcc.patch:tst:115255"/>
                </criteria>
                <criteria operator="AND">
                    <extend_definition comment="Microsoft Windows Vista (32-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                    <criterion comment="Srv.sys version is greater than or equal to 6.0.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:115256"/>
                    <criterion comment="Srv.sys version is less than 6.0.6001.22331" test_ref="oval:gov.nist.fdcc.patch:tst:115257"/>
                </criteria>
                <criteria operator="AND">
                    <extend_definition comment="Microsoft Windows Vista (64-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                    <criterion comment="Srv.sys version is greater than or equal to 6.0.6001.18000" test_ref="oval:gov.nist.fdcc.patch:tst:115254"/>
                    <criterion comment="Srv.sys version is less than 6.0.6001.18185" test_ref="oval:gov.nist.fdcc.patch:tst:115255"/>
                </criteria>
                <criteria operator="AND">
                    <extend_definition comment="Microsoft Windows Vista (64-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                    <criterion comment="Srv.sys version is greater than or equal to 6.0.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:115256"/>
                    <criterion comment="Srv.sys version is less than 6.0.6001.22331" test_ref="oval:gov.nist.fdcc.patch:tst:115257"/>
                </criteria>
            </criteria>
        </definition>
        <definition id="oval:gov.nist.fdcc.patch:def:11547" version="1" class="patch">
            <metadata>
                <title>MS09-006: Vulnerabilities in Windows Kernel could allow remote code execution (958690)</title>
                <affected family="windows">
                    <platform>Microsoft Windows XP</platform>
                    <platform>Microsoft Windows Vista</platform>
                </affected>
                <reference source="CVE" ref_id="CVE-2009-0081" ref_url="http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0081"/>
                <reference source="CVE" ref_id="CVE-2009-0082" ref_url="http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0082"/>
                <reference source="CVE" ref_id="CVE-2009-0083" ref_url="http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0083"/>
                <reference source="Microsoft" ref_id="MS09-006" ref_url="http://www.microsoft.com/technet/security/Bulletin/ms09-006.mspx"/>
                <reference source="Microsoft" ref_id="KB958690" ref_url="http://support.microsoft.com/default.aspx/kb/958690"/>
                <description>Microsoft has released MS09-006 to address security issues in Windows XP and Windows Vista, CVE-2009-0081, CVE-2009-0082, and CVE-2009-0083</description>
            </metadata>
            <criteria operator="OR">
                <criteria operator="AND">
                    <extend_definition comment="Microsoft Windows XP (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115276"/>
                    <criterion comment="Win32k.sys version is less than 5.1.2600.3521" test_ref="oval:gov.nist.fdcc.patch:tst:115471"/>
                </criteria>
                <criteria operator="AND">
                    <extend_definition comment="Microsoft Windows XP (32-bit) SP3 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115278"/>
                    <criterion comment="Win32k.sys version is less than 5.1.2600.5756" test_ref="oval:gov.nist.fdcc.patch:tst:115472"/>
                </criteria>
                <criteria operator="AND">
                    <extend_definition comment="Microsoft Windows XP (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115277"/>
                    <criterion comment="Win32k.sys version is less than 5.2.3790.4456" test_ref="oval:gov.nist.fdcc.patch:tst:115473"/>
                </criteria>
                <criteria operator="AND">
                    <extend_definition comment="Microsoft Windows Vista (32-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                    <criterion comment="Win32k.sys version is greater than or equal to 6.0.6001.18000" test_ref="oval:gov.nist.fdcc.patch:tst:115254"/>
                    <criterion comment="Win32k.sys version is less than 6.0.6001.18211" test_ref="oval:gov.nist.fdcc.patch:tst:115474"/>
                </criteria>
                <criteria operator="AND">
                    <extend_definition comment="Microsoft Windows Vista (32-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                    <criterion comment="Win32k.sys version is greater than or equal to 6.0.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:115256"/>
                    <criterion comment="Win32k.sys version is less than 6.0.6001.22372" test_ref="oval:gov.nist.fdcc.patch:tst:115475"/>
                </criteria>
                <criteria operator="AND">
                    <extend_definition comment="Microsoft Windows Vista (64-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                    <criterion comment="Win32k.sys version is greater than or equal to 6.0.6001.18000" test_ref="oval:gov.nist.fdcc.patch:tst:115254"/>
                    <criterion comment="Win32k.sys version is less than 6.0.6001.18211" test_ref="oval:gov.nist.fdcc.patch:tst:115474"/>
                </criteria>
                <criteria operator="AND">
                    <extend_definition comment="Microsoft Windows Vista (64-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                    <criterion comment="Win32k.sys version is greater than or equal to 6.0.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:115256"/>
                    <criterion comment="Win32k.sys version is less than 6.0.6001.22372" test_ref="oval:gov.nist.fdcc.patch:tst:115475"/>
                </criteria>
            </criteria>
        </definition>
        <definition id="oval:gov.nist.fdcc.patch:def:11548" version="1" class="patch">
            <metadata>
                <title>MS09-007: Vulnerability in SChannel could allow spoofing (960225)</title>
                <affected family="windows">
                    <platform>Microsoft Windows XP</platform>
                    <platform>Microsoft Windows Vista</platform>
                </affected>
                <reference source="CVE" ref_id="CVE-2009-0085" ref_url="http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0085"/>
                <reference source="Microsoft" ref_id="MS09-007" ref_url="http://www.microsoft.com/technet/security/Bulletin/ms09-007.mspx"/>
                <reference source="Microsoft" ref_id="KB960225" ref_url="http://support.microsoft.com/default.aspx/kb/960225"/>
                <description>Microsoft has released MS09-007 to address security issues in Windows XP and Windows Vista, CVE-2009-0085</description>
            </metadata>
            <criteria operator="OR">
                <criteria operator="AND" comment="WinXP,SP2 (32-bit)">
                    <extend_definition comment="Microsoft Windows XP (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115276"/>
                    <criterion comment="Schannel.sys version is less than 5.1.2600.3487" test_ref="oval:gov.nist.fdcc.patch:tst:115481"/>
                </criteria>
                <criteria operator="AND" comment="WinXP,SP3 (32-bit)">
                    <extend_definition comment="Microsoft Windows XP (32-bit) SP3 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115278"/>
                    <criterion comment="Schannel.sys version is less than 5.1.2600.5721" test_ref="oval:gov.nist.fdcc.patch:tst:115482"/>
                </criteria>
                <criteria operator="AND" comment="WinXP,SP2 (64-bit)">
                    <extend_definition comment="Microsoft Windows XP (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115277"/>
                    <criterion comment="Schannel.sys version is less than 5.2.3790.4458" test_ref="oval:gov.nist.fdcc.patch:tst:115483"/>
                </criteria>
                <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit, 64-bit, ia-64) - GDR">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                    </criteria>
                    <criterion comment="Schannel.dll version is greater than or equal to 6.0.6001.18000" test_ref="oval:gov.nist.fdcc.patch:tst:115577"/>
                    <criterion comment="Schannel.sys version is less than 6.0.6001.18175" test_ref="oval:gov.nist.fdcc.patch:tst:115484"/>
                </criteria>
                <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit, 64-bit, ia-64) - LDR">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                    </criteria>
                    <criterion comment="Schannel.dll version is greater than or equal to 6.0.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:115578"/>
                    <criterion comment="Schannel.sys version is less than 6.0.6001.22372" test_ref="oval:gov.nist.fdcc.patch:tst:115485"/>
                </criteria>
            </criteria>
        </definition>
        <definition id="oval:gov.nist.fdcc.patch:def:11550" version="1" class="patch">
            <metadata>
                <title>MS09-012: Vulnerabilities in Windows Could Allow Elevation of Privilege</title>
                <affected family="windows">
                    <platform>Microsoft Windows XP</platform>
                    <platform>Microsoft Windows Vista</platform>
                    <platform>Microsoft Windows Server 2008</platform>
                </affected>
                <reference source="Microsoft" ref_id="MS09-012" ref_url="http://www.microsoft.com/technet/security/bulletin/MS09-012"/>
                <reference source="Microsoft" ref_id="KB959454" ref_url="http://support.microsoft.com/kb/959454"/>
                <reference source="CVE" ref_id="CVE-2008-1436" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1436"/>
                <reference source="CVE" ref_id="CVE-2009-0078" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0078"/>
                <reference source="CVE" ref_id="CVE-2009-0079" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0079"/>
                <reference source="CVE" ref_id="CVE-2009-0080" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0080"/>
                <!--<reference source="OVAL" ref_id="oval:org.mitre.oval:def:" ref_url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:"/>-->
                <!--<reference source="OVAL" ref_id="oval:org.mitre.oval:def:" ref_url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:"/>-->
                <!--<reference source="OVAL" ref_id="oval:org.mitre.oval:def:" ref_url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:"/>-->
                <!--<reference source="OVAL" ref_id="oval:org.mitre.oval:def:" ref_url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:"/>-->
                <description>Microsoft has released MS09-012 to address security issues in Windows XP, Windows Vista, and Windows Server 2008 as documented by CVE-2008-1436, CVE-2009-0078, CVE-2009-0079 and CVE-2009-0080.</description>
            </metadata>
            <criteria operator="OR">
                <criteria operator="AND">
                    <extend_definition comment="Microsoft Windows XP (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115276"/>
                    <criteria operator="OR">
                        <criterion comment="Msdtcprx.dll version is less than 2001.12.4414.320" test_ref="oval:gov.nist.fdcc.patch:tst:115320"/>
                        <criterion comment="Ntoskrnl.exe version is less than 5.1.2600.3520" test_ref="oval:gov.nist.fdcc.patch:tst:115321"/>
                    </criteria>
                </criteria>
                <criteria operator="AND">
                    <extend_definition comment="Microsoft Windows XP (32-bit) SP3 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115278"/>
                    <criteria operator="OR">
                        <criterion comment="Msdtcprx.dll version is less than 2001.12.4414.706" test_ref="oval:gov.nist.fdcc.patch:tst:115322"/>
                        <criterion comment="Ntoskrnl.exe version is less than 5.1.2600.5755" test_ref="oval:gov.nist.fdcc.patch:tst:115323"/>
                    </criteria>
                </criteria>
                <criteria operator="AND">
                    <extend_definition comment="Microsoft Windows XP (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115277"/>
                    <criterion comment="Msdtcprx.dll version is less than 2001.12.4720.4340" test_ref="oval:gov.nist.fdcc.patch:tst:115324"/>
                    <criterion comment="Ntoskrnl.exe version is less than 5.2.3790.4478" test_ref="oval:gov.nist.fdcc.patch:tst:115325"/>
                </criteria>
                <criteria operator="AND">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                    </criteria>
                    <criteria operator="OR">
                        <criteria operator="AND">
                            <criterion comment="Msdtcprx.dll version is greater than or equal to 2001.12.6931.18000" test_ref="oval:gov.nist.fdcc.patch:tst:115326"/>
                            <criterion comment="Msdtcprx.dll version is less than 2001.12.6931.18085" test_ref="oval:gov.nist.fdcc.patch:tst:115328"/>
                        </criteria>
                        <criteria operator="AND">
                            <criterion comment="Ntoskrnl.exe version is greater than or equal to 6.0.6001.18000" test_ref="oval:gov.nist.fdcc.patch:tst:115327"/>
                            <criterion comment="Ntoskrnl.exe version is less than 6.0.6001.18226" test_ref="oval:gov.nist.fdcc.patch:tst:115329"/>
                        </criteria>
                    </criteria>
                </criteria>
                <criteria operator="AND">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                    </criteria>
                    <criteria operator="OR">
                        <criteria operator="AND">
                            <criterion comment="Msdtcprx.dll version is greater than or equal to 2001.12.6931.22000" test_ref="oval:gov.nist.fdcc.patch:tst:115330"/>
                            <criterion comment="Msdtcprx.dll version is less than 2001.12.6931.22197" test_ref="oval:gov.nist.fdcc.patch:tst:115332"/>
                        </criteria>
                        <criteria operator="AND">
                            <criterion comment="Ntoskrnl.exe version is greater than or equal to 6.0.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:115331"/>
                            <criterion comment="Ntoskrnl.exe version is less than 6.0.6001.22389" test_ref="oval:gov.nist.fdcc.patch:tst:115333"/>
                        </criteria>
                    </criteria>
                </criteria>
            </criteria>
        </definition>
        <definition id="oval:gov.nist.fdcc.patch:def:11551" version="2" class="patch">
            <metadata>
                <title>MS09-013: Vulnerabilities in Windows HTTP Services Could Allow Remote Code Execution</title>
                <affected family="windows">
                    <platform>Microsoft Windows XP</platform>
                    <platform>Microsoft Windows Vista</platform>
                    <platform>Microsoft Windows Server 2008</platform>
                </affected>
                <reference source="Microsoft" ref_id="MS09-013" ref_url="http://www.microsoft.com/technet/security/bulletin/MS09-013"/>
                <reference source="Microsoft" ref_id="KB960803" ref_url="http://support.microsoft.com/kb/960803"/>
                <reference source="CVE" ref_id="CVE-2009-0086" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0086"/>
                <reference source="CVE" ref_id="CVE-2009-0089" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0089"/>
                <reference source="CVE" ref_id="CVE-2009-0550" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0550"/>
                <!--<reference source="OVAL" ref_id="oval:org.mitre.oval:def:" ref_url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:"/>-->
                <!--<reference source="OVAL" ref_id="oval:org.mitre.oval:def:" ref_url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:"/>-->
                <!--<reference source="OVAL" ref_id="oval:org.mitre.oval:def:" ref_url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:"/>-->
                <description>Microsoft has released MS09-013 to address security issues in Windows XP, Windows Vista, and Windows Server 2008 as documented by CVE-2009-0086, CVE-2009-0089, and CVE-2009-0550.</description>
            </metadata>
            <criteria operator="OR">
                <criteria operator="AND">
                    <extend_definition comment="Microsoft Windows XP (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115276"/>
                    <criterion comment="Winhttp.dll version is less than 5.1.2600.3494" test_ref="oval:gov.nist.fdcc.patch:tst:115334"/>
                </criteria>
                <criteria operator="AND">
                    <extend_definition comment="Microsoft Windows XP (32-bit) SP3 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115278"/>
                    <criterion comment="Winhttp.dll version is less than 5.1.2600.5727" test_ref="oval:gov.nist.fdcc.patch:tst:115335"/>
                </criteria>
                <criteria operator="AND">
                    <extend_definition comment="Microsoft Windows XP (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115277"/>
                    <criterion comment="Winhttp.dll version is less than 5.2.3790.4427" test_ref="oval:gov.nist.fdcc.patch:tst:115336"/>
                </criteria>
                <criteria operator="AND">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
                    </criteria>
                    <criterion comment="Winhttp.dll version is greater than or equal to 6.0.6001.18000" test_ref="oval:gov.nist.fdcc.patch:tst:115337"/>
                    <criterion comment="Winhttp.dll version is less than 6.0.6001.18178" test_ref="oval:gov.nist.fdcc.patch:tst:115338"/>
                </criteria>
                <criteria operator="AND">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
                    </criteria>
                    <criterion comment="Winhttp.dll version is greater than or equal to 6.0.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:115339"/>
                    <criterion comment="Winhttp.dll version is less than 6.0.6001.22323" test_ref="oval:gov.nist.fdcc.patch:tst:115340"/>
                </criteria>
            </criteria>
        </definition>
        <definition id="oval:gov.nist.fdcc.patch:def:11552" version="1" class="patch">
            <metadata>
                <title>MS09-014: Cumulative Security Update for Internet Explorer (963027)</title>
                <affected family="windows">
                    <platform>Microsoft Windows XP</platform>
                    <platform>Microsoft Windows Vista</platform>
                    <platform>Microsoft Windows Server 2008</platform>
                    <product>Internet Explorer</product>
                </affected>
                <reference source="Microsoft" ref_id="MS09-014" ref_url="http://www.microsoft.com/technet/security/bulletin/MS09-014.mspx"/>
                <reference source="Microsoft" ref_id="KB963027" ref_url="http://support.microsoft.com/kb/963027"/>
                <reference source="CVE" ref_id="CVE-2008-2540" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2540"/>
                <reference source="CVE" ref_id="CVE-2009-0550" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0550"/>
                <reference source="CVE" ref_id="CVE-2009-0551" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0551"/>
                <reference source="CVE" ref_id="CVE-2009-0552" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0552"/>
                <reference source="CVE" ref_id="CVE-2009-0553" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0553"/>
                <reference source="CVE" ref_id="CVE-2009-0554" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0554"/>
                <!--<reference source="OVAL" ref_id="oval:org.mitre.oval:def:" ref_url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:"/>-->
                <description>Microsoft has released MS09-014 to address security issues in Internet Explorer 7 as documented by CVE-2008-2540, CVE-2009-0550, CVE-2009-0551, CVE-2009-0552, CVE-2009-0553, and CVE-2009-0554</description>
            </metadata>
            <criteria operator="OR">
                <criteria operator="AND">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows XP SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115274"/>
                        <extend_definition comment="Microsoft Windows XP (32-bit) SP3 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115278"/>
                    </criteria>
                    <extend_definition comment="Microsoft Internet Explorer 7 is installed" definition_ref="oval:org.mitre.oval:def:627"/>
                    <criterion comment="Mshtml.dll version is less than 7.0.6000.16825" test_ref="oval:gov.nist.fdcc.patch:tst:115521"/>
                </criteria>
                <criteria operator="AND">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows XP SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115274"/>
                        <extend_definition comment="Microsoft Windows XP (32-bit) SP3 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115278"/>
                    </criteria>
                    <extend_definition comment="Microsoft Internet Explorer 7 is installed" definition_ref="oval:org.mitre.oval:def:627"/>
                    <criterion comment="Mshtml.dll version is greater than or equal to 7.0.6001.20000" test_ref="oval:gov.nist.fdcc.patch:tst:115304"/>
                    <criterion comment="Mshtml.dll version is less than 7.0.6000.21015" test_ref="oval:gov.nist.fdcc.patch:tst:115522"/>
                </criteria>
                <criteria operator="AND">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                    </criteria>
                    <extend_definition comment="Microsoft Internet Explorer 7 is installed" definition_ref="oval:org.mitre.oval:def:627"/>
                    <criterion comment="Mshtml.dll version is greater than or equal to 7.0.6001.18000" test_ref="oval:gov.nist.fdcc.patch:tst:115258"/>
                    <criterion comment="Mshtml.dll version is less than 7.0.6001.18226" test_ref="oval:gov.nist.fdcc.patch:tst:115523"/>
                </criteria>
                <criteria operator="AND">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                    </criteria>
                    <extend_definition comment="Microsoft Internet Explorer 7 is installed" definition_ref="oval:org.mitre.oval:def:627"/>
                    <criterion comment="Mshtml.dll version is greater than or equal to 7.0.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:115259"/>
                    <criterion comment="Mshtml.dll version is less than 7.0.6001.22389" test_ref="oval:gov.nist.fdcc.patch:tst:115524"/>
                </criteria>
            </criteria>
        </definition>
        <definition id="oval:gov.nist.fdcc.patch:def:11554" version="1" class="patch">
            <metadata>
                <title>MS09-015: Blended Threat Vulnerability in SearchPath Could Allow Elevation of Privilege (959426)</title>
                <affected family="windows">
                    <platform>Microsoft Windows XP</platform>
                    <platform>Microsoft Windows Vista</platform>
                    <platform>Microsoft Windows Server 2008</platform>
                </affected>
                <reference source="Microsoft" ref_id="MS09-015" ref_url="http://www.microsoft.com/technet/security/bulletin/MS09-015"/>
                <reference source="Microsoft" ref_id="KB959426" ref_url="http://support.microsoft.com/kb/959426"/>
                <reference source="CVE" ref_id="CVE-2008-2540" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2540"/>
                <!--<reference source="OVAL" ref_id="oval:org.mitre.oval:def:" ref_url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:"/>-->
                <description>Microsoft has released MS09-015 to address security issues in Windows XP, Windows Vista, and Windows Server 2008 as documented by CVE-2008-2540.</description>
            </metadata>
            <criteria operator="OR">
                <criteria operator="AND">
                    <extend_definition comment="Microsoft Windows XP (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115276"/>
                    <criterion comment="Kernel32.dll version is less than 5.1.2600.3541" test_ref="oval:gov.nist.fdcc.patch:tst:115541"/>
                </criteria>
                <criteria operator="AND">
                    <extend_definition comment="Microsoft Windows XP (32-bit) SP3 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115278"/>
                    <criterion comment="Kernel32.dll version is less than 5.1.2600.5781" test_ref="oval:gov.nist.fdcc.patch:tst:115542"/>
                </criteria>
                <criteria operator="AND">
                    <extend_definition comment="Microsoft Windows XP (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115277"/>
                    <criterion comment="Kernel32.dll version is less than 5.2.3790.4480" test_ref="oval:gov.nist.fdcc.patch:tst:115543"/>
                </criteria>
                <criteria operator="AND">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
                    </criteria>
                    <criterion comment="Kernel32.dll version is greater than or equal to 6.0.6001.18000" test_ref="oval:gov.nist.fdcc.patch:tst:115544"/>
                    <criterion comment="Kernel32.dll version is less than 6.0.6001.18215" test_ref="oval:gov.nist.fdcc.patch:tst:115545"/>
                </criteria>
                <criteria operator="AND">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
                    </criteria>
                    <criterion comment="Kernel32.dll version is greater than or equal to 6.0.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:115546"/>
                    <criterion comment="Kernel32.dll version is less than 6.0.6001.22376" test_ref="oval:gov.nist.fdcc.patch:tst:115547"/>
                </criteria>
            </criteria>
        </definition>
        <definition id="oval:gov.nist.fdcc.patch:def:11557" version="1" class="patch">
            <metadata>
                <title>MS09-026: Vulnerability in RPC Could Allow Elevation of Privilege (970238)</title>
                <affected family="windows">
                    <platform>Microsoft Windows XP</platform>
                    <platform>Microsoft Windows Vista</platform>
                    <platform>Microsoft Windows Server 2008</platform>
                    <product>Operating System</product>
                </affected>
                <reference source="Microsoft" ref_id="MS09-026" ref_url="http://www.microsoft.com/technet/security/Bulletin/MS09-026.mspx"/>
                <reference source="Microsoft" ref_id="KB970238" ref_url="http://support.microsoft.com/kb/970238"/>
                <reference source="CVE" ref_id="CVE-2009-0568" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0568"/>
                <description>Microsoft has released MS09-026 to address security issues in Microsoft Windows XP, Windows Vista, and Windows Server 2008 as documented by CVE-2009-0568.</description>
            </metadata>
            <criteria operator="OR">
                <criteria operator="AND" comment="WinXP,SP2 (32-bit)">
                    <extend_definition comment="Microsoft Windows XP (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115276"/>
                    <criterion comment="Rpcrt4.dll version is less than 5.1.2600.3555" test_ref="oval:gov.nist.fdcc.patch:tst:115593"/>
                </criteria>
                <criteria operator="AND" comment="WinXP,SP2 (64-bit)">
                    <extend_definition comment="Microsoft Windows XP (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115277"/>
                    <criterion comment="Rpcrt4.dll version is less than 5.2.3790.4502" test_ref="oval:gov.nist.fdcc.patch:tst:115594"/>
                </criteria>
                <criteria operator="AND" comment="WinXP,SP3 (32-bit)">
                    <extend_definition comment="Microsoft Windows XP (32-bit) SP3 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115278"/>
                    <criterion comment="Rpcrt4.dll version is less than 5.1.2600.5795" test_ref="oval:gov.nist.fdcc.patch:tst:115595"/>
                </criteria>
                <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit, 64-bit, ia-64) - GDR">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
                    </criteria>
                    <criterion comment="Rpcrt4.dll version is greater than or equal to 6.0.6001.18000" test_ref="oval:gov.nist.fdcc.patch:tst:115596"/>
                    <criterion comment="Rpcrt4.dll version is less than 6.0.6001.18247" test_ref="oval:gov.nist.fdcc.patch:tst:115597"/>
                </criteria>
                <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit, 64-bit, ia-64) - LDR">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
                    </criteria>
                    <criterion comment="Rpcrt4.dll version is greater than or equal to 6.0.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:115598"/>
                    <criterion comment="Rpcrt4.dll version is less than 6.0.6001.22417" test_ref="oval:gov.nist.fdcc.patch:tst:115599"/>
                </criteria>
                <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - GDR">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11559"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11558"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11560"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11561"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11562"/>
                    </criteria>
                    <criterion comment="Rpcrt4.dll version is greater than or equal to 6.0.6002.18000" test_ref="oval:gov.nist.fdcc.patch:tst:115600"/>
                    <criterion comment="Rpcrt4.dll version is less than 6.0.6002.18024" test_ref="oval:gov.nist.fdcc.patch:tst:115601"/>
                </criteria>
                <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - LDR">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11559"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11558"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11560"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11561"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11562"/>
                    </criteria>
                    <criterion comment="Rpcrt4.dll version is greater than or equal to 6.0.6002.22000" test_ref="oval:gov.nist.fdcc.patch:tst:115602"/>
                    <criterion comment="Rpcrt4.dll version is less than 6.0.6002.22120" test_ref="oval:gov.nist.fdcc.patch:tst:115603"/>
                </criteria>
            </criteria>
        </definition>
        <definition id="oval:gov.nist.fdcc.patch:def:11566" version="1" class="patch">
            <metadata>
                <title>MS09-022: Vulnerabilities in Windows Print Spooler Could Allow Remote Code Execution (961501)</title>
                <affected family="windows">
                    <platform>Microsoft Windows XP</platform>
                    <platform>Microsoft Windows Vista</platform>
                    <platform>Microsoft Windows Server 2008</platform>
                    <product>Operating System</product>
                </affected>
                <reference source="Microsoft" ref_id="MS09-022" ref_url="http://www.microsoft.com/technet/security/Bulletin/MS09-022.mspx"/>
                <reference source="Microsoft" ref_id="KB961501" ref_url="http://support.microsoft.com/kb/961501"/>
                <reference source="CVE" ref_id="CVE-2009-0568" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0228"/>
                <reference source="CVE" ref_id="CVE-2009-0568" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0229"/>
                <reference source="CVE" ref_id="CVE-2009-0568" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0230"/>
                <description>Microsoft has released MS09-22 to address security issues in Microsoft Windows XP, Windows Vista, and Windows Server 2008 as documented by CVE-2009-0228, CVE-2009-0229, and CVE-2009-0230.</description>
            </metadata>
            <criteria operator="OR">
                <criteria operator="AND" comment="WinXP,SP2 (32-bit)">
                    <extend_definition comment="Microsoft Windows XP (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115276"/>
                    <criterion comment="Localspl.dll version is less than 5.1.2600.3569" test_ref="oval:gov.nist.fdcc.patch:tst:115661"/>
                </criteria>
                <criteria operator="AND" comment="WinXP,SP2 (64-bit)">
                    <extend_definition comment="Microsoft Windows XP (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115277"/>
                    <criterion comment="Localspl.dll version is less than 5.2.3790.4509" test_ref="oval:gov.nist.fdcc.patch:tst:115662"/>
                </criteria>
                <criteria operator="AND" comment="WinXP,SP3 (32-bit)">
                    <extend_definition comment="Microsoft Windows XP (32-bit) SP3 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115278"/>
                    <criterion comment="Localspl.dll version is less than 5.1.2600.5809" test_ref="oval:gov.nist.fdcc.patch:tst:115663"/>
                </criteria>
                <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit, 64-bit, ia-64) - GDR">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
                    </criteria>
                    <criterion comment="Localspl.dll version is greater than or equal to 6.0.6001.18000" test_ref="oval:gov.nist.fdcc.patch:tst:115667"/>
                    <criterion comment="Localspl.dll version is less than 6.0.6001.18247" test_ref="oval:gov.nist.fdcc.patch:tst:1156631"/>
                </criteria>
                <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit, 64-bit, ia-64) - LDR">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
                    </criteria>
                    <criterion comment="Localspl.dll version is greater than or equal to 6.0.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:115668"/>
                    <criterion comment="Localspl.dll version is less than 6.0.6001.22417" test_ref="oval:gov.nist.fdcc.patch:tst:115664"/>
                </criteria>
                <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - GDR">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11559"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11558"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11560"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11561"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11562"/>
                    </criteria>
                    <criterion comment="Localspl.dll version is greater than or equal to 6.0.6002.18000" test_ref="oval:gov.nist.fdcc.patch:tst:115669"/>
                    <criterion comment="Localspl.dll version is less than 6.0.6002.18024" test_ref="oval:gov.nist.fdcc.patch:tst:115665"/>
                </criteria>
                <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - LDR">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11559"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11558"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11560"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11561"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11562"/>
                    </criteria>
                    <criterion comment="Localspl.dll version is greater than or equal to 6.0.6002.22000" test_ref="oval:gov.nist.fdcc.patch:tst:115660"/>
                    <criterion comment="Localspl.dll version is less than 6.0.6002.22120" test_ref="oval:gov.nist.fdcc.patch:tst:115666"/>
                </criteria>
            </criteria>
        </definition>
        <definition id="oval:gov.nist.fdcc.patch:def:11565" version="1" class="patch">
            <metadata>
                <title>MS09-054: Cumulative Security Update for Internet Explorer (974455)</title>
                <affected family="windows">
                    <platform>Microsoft Windows XP</platform>
                    <platform>Microsoft Windows Vista</platform>
                    <platform>Microsoft Windows Server 2008</platform>
                    <product>Internet Explorer</product>
                </affected>
                <reference source="Microsoft" ref_id="MS09-054" ref_url="http://www.microsoft.com/technet/security/bulletin/MS09-054.mspx"/>
                <reference source="Microsoft" ref_id="KB974455" ref_url="http://support.microsoft.com/kb/974455"/>
                <reference source="CVE" ref_id="CVE-2009-1547" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1547"/>
                <reference source="CVE" ref_id="CVE-2009-2529" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2529"/>
                <reference source="CVE" ref_id="CVE-2009-2530" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2530"/>
                <reference source="CVE" ref_id="CVE-2009-2531" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2531"/>
                <!--<reference source="OVAL" ref_id="oval:org.mitre.oval:def:" ref_url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:"/>-->
                <description>Microsoft has released MS09-054 to address security issues in Internet Explorer 7 as documented by CVE-2009-1547, CVE-2009-2529, CVE-2009-2530 and CVE-2009-2531</description>
            </metadata>
            <criteria operator="OR">
                <criteria operator="AND">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows XP SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115274"/>
                        <extend_definition comment="Microsoft Windows XP (32-bit) SP3 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115278"/>
                    </criteria>
                    <extend_definition comment="Microsoft Internet Explorer 7 is installed" definition_ref="oval:org.mitre.oval:def:627"/>
                    <criterion comment="Mshtml.dll version is less than 7.0.6000.16915" test_ref="oval:gov.nist.fdcc.patch:tst:115651"/>
                </criteria>
                <criteria operator="AND">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows XP SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115274"/>
                        <extend_definition comment="Microsoft Windows XP (32-bit) SP3 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115278"/>
                    </criteria>
                    <extend_definition comment="Microsoft Internet Explorer 7 is installed" definition_ref="oval:org.mitre.oval:def:627"/>
                    <criterion comment="Mshtml.dll version is greater than or equal to 7.0.6000.20000" test_ref="oval:gov.nist.fdcc.patch:tst:115304"/>
                    <criterion comment="Mshtml.dll version is less than 7.0.6000.21115  " test_ref="oval:gov.nist.fdcc.patch:tst:115650"/>
                </criteria>
                <criteria operator="AND">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows XP (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115277"/>
                    </criteria>
                    <extend_definition comment="Microsoft Internet Explorer 7 is installed" definition_ref="oval:org.mitre.oval:def:627"/>
                    <criterion comment="Mshtml.dll version is less than 7.0.6000.16915  " test_ref="oval:gov.nist.fdcc.patch:tst:1156599"/>
                </criteria>
                <criteria operator="AND">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows XP (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115277"/>
                    </criteria>
                    <extend_definition comment="Microsoft Internet Explorer 7 is installed" definition_ref="oval:org.mitre.oval:def:627"/>
                    <criterion comment="Mshtml.dll version is greater than or equal to 7.0.6001.20000" test_ref="oval:gov.nist.fdcc.patch:tst:115304"/>
                    <criterion comment="Mshtml.dll version is less than 7.0.6000.21115  " test_ref="oval:gov.nist.fdcc.patch:tst:115652"/>
                </criteria>
                <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit, 64-bit, ia-64) - GDR">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
                    </criteria>
                    <criterion comment="Mshtml.dll version is greater than or equal to 7.0.6001.18000" test_ref="oval:gov.nist.fdcc.patch:tst:115258"/>
                    <criterion comment="Mshtml.dll version is less than 7.0.6001.18319" test_ref="oval:gov.nist.fdcc.patch:tst:115653"/>
                </criteria>
                <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit, 64-bit, ia-64) - LDR">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
                    </criteria>
                    <criterion comment="Mshtml.dll version is greater than or equal to 7.0.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:115259"/>
                    <criterion comment="Mshtml.dll version is less than 7.0.6001.22508" test_ref="oval:gov.nist.fdcc.patch:tst:115654"/>
                </criteria>
                <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - GDR">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11559"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11558"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11560"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11561"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11562"/>
                    </criteria>
                    <criterion comment="Mshtml.dll version is greater than or equal to 7.0.6002.18000" test_ref="oval:gov.nist.fdcc.patch:tst:115657"/>
                    <criterion comment="Mshtml.dll version is less than 7.0.6002.18100" test_ref="oval:gov.nist.fdcc.patch:tst:115655"/>
                </criteria>
                <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - LDR">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11559"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11558"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11560"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11561"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11562"/>
                    </criteria>
                    <criterion comment="Mshtml.dll version is greater than or equal to 7.0.6002.22000" test_ref="oval:gov.nist.fdcc.patch:tst:115658"/>
                    <criterion comment="Mshtml.dll version is less than 7.0.6002.22212" test_ref="oval:gov.nist.fdcc.patch:tst:115656"/>
                </criteria>
            </criteria>
        </definition>
        <definition id="oval:gov.nist.fdcc.patch:def:11571" version="1" class="patch">
            <metadata>
                <title>MS09-029: Vulnerabilities in the Embedded OpenType Font Engine Could Allow Remote Code Execution (961371)</title>
                <affected family="windows">
                    <platform>Microsoft Windows XP</platform>
                    <platform>Microsoft Windows Vista</platform>
                    <platform>Microsoft Windows Server 2008</platform>
                    <product>Operating System</product>
                </affected>
                <reference source="Microsoft" ref_id="MS09-029" ref_url="http://www.microsoft.com/technet/security/Bulletin/MS09-029.mspx"/>
                <reference source="Microsoft" ref_id="KB961371" ref_url="http://support.microsoft.com/kb/961371"/>
                <reference source="CVE" ref_id="CVE-2009-0231" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0231"/>
                <reference source="CVE" ref_id="CVE-2009-0232" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0232"/>
                <description>Microsoft has released MS09-29 to address security issues in Microsoft Windows XP, Windows Vista, and Windows Server 2008 as documented by CVE-2009-0231 and CVE-2009-0232.</description>
            </metadata>
            <criteria operator="OR">
                <criteria operator="AND" comment="WinXP,SP2 (32-bit)">
                    <extend_definition comment="Microsoft Windows XP (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115276"/>
                    <criterion comment="Fontsub.dll version is less than 5.1.2600.3589" test_ref="oval:gov.nist.fdcc.patch:tst:115710"/>
                </criteria>
                <criteria operator="AND" comment="WinXP,SP2 (64-bit)">
                    <extend_definition comment="Microsoft Windows XP (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115277"/>
                    <criterion comment="Fontsub.dll version is less than 5.2.3790.4530" test_ref="oval:gov.nist.fdcc.patch:tst:115711"/>
                </criteria>
                <criteria operator="AND" comment="WinXP,SP3 (32-bit)">
                    <extend_definition comment="Microsoft Windows XP (32-bit) SP3 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115278"/>
                    <criterion comment="Fontsub.dll version is less than 5.1.2600.5830" test_ref="oval:gov.nist.fdcc.patch:tst:115712"/>
                </criteria>
                <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit, 64-bit, ia-64) - GDR">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
                    </criteria>
                    <criterion comment="Fontsub.dll version is greater than or equal to 6.0.6001.18000" test_ref="oval:gov.nist.fdcc.patch:tst:115713"/>
                    <criterion comment="Fontsub.dll version is less than 6.0.6001.18272" test_ref="oval:gov.nist.fdcc.patch:tst:115714"/>
                </criteria>
                <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit, 64-bit, ia-64) - LDR">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
                    </criteria>
                    <criterion comment="Fontsub.dll version is greater than or equal to 6.0.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:115715"/>
                    <criterion comment="Fontsub.dll version is less than 6.0.6001.22450" test_ref="oval:gov.nist.fdcc.patch:tst:115716"/>
                </criteria>
                <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - GDR">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11559"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11558"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11560"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11561"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11562"/>
                    </criteria>
                    <criterion comment="Fontsub.dll version is greater than or equal to 6.0.6002.18000" test_ref="oval:gov.nist.fdcc.patch:tst:115717"/>
                    <criterion comment="Fontsub.dll version is less than 6.0.6002.18051" test_ref="oval:gov.nist.fdcc.patch:tst:115718"/>
                </criteria>
                <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - LDR">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11559"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11558"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11560"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11561"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11562"/>
                    </criteria>
                    <criterion comment="Fontsub.dll version is greater than or equal to 6.0.6002.22000" test_ref="oval:gov.nist.fdcc.patch:tst:115719"/>
                    <criterion comment="Fontsub.dll version is less than 6.0.6002.22152" test_ref="oval:gov.nist.fdcc.patch:tst:1157190"/>
                </criteria>
            </criteria>
        </definition>
        <definition id="oval:gov.nist.fdcc.patch:def:11572" version="1" class="patch">
            <metadata>
                <title>MS09-055: Cumulative Security Update of ActiveX Kill Bits (973525)</title>
                <affected family="windows">
                    <platform>Microsoft Windows XP</platform>
                    <platform>Microsoft Windows Vista</platform>
                    <platform>Microsoft Windows Server 2008</platform>
                    <platform>Microsoft Windows 7</platform>
                    <platform>Microsoft Windows Server 2008 R2</platform>
                    <product>Internet Explorer</product>
                </affected>
                <reference source="Microsoft" ref_id="MS09-055" ref_url="http://www.microsoft.com/technet/security/bulletin/MS09-055.mspx"/>
                <reference source="Microsoft" ref_id="KB973525" ref_url="http://support.microsoft.com/kb/973525"/>
                <reference source="CVE" ref_id="CVE-2009-2493" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2493"/>
                <description>Microsoft has released MS09-055 to address security issues in Internet Explorer 7 as documented by CVE-2009-2493</description>
            </metadata>
            <criteria operator="AND">
                <criteria operator="OR">
                    <extend_definition comment="Microsoft Windows XP SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115274"/>
                    <extend_definition comment="Microsoft Windows XP (32-bit) SP3 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115278"/>
                    <extend_definition comment="Microsoft Windows XP (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115277"/>
                    <extend_definition comment="Microsoft Windows Vista (32-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                    <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                    <extend_definition comment="Microsoft Windows Vista (64-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                    <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                    <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
                    <extend_definition comment="Microsoft Windows Vista (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11559"/>
                    <extend_definition comment="Microsoft Windows Server 2008 (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11558"/>
                    <extend_definition comment="Microsoft Windows Vista (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11560"/>
                    <extend_definition comment="Microsoft Windows Server 2008 (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11561"/>
                    <extend_definition comment="Microsoft Windows Server 2008 (ia-64) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11562"/>
                    <extend_definition comment="Microsoft Windows 7 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:6165"/>
                    <extend_definition comment="Microsoft Windows Server 2008 (32-bit) R2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115286"/>
                    <extend_definition comment="Microsoft Windows 7 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5950"/>
                    <extend_definition comment="Microsoft Windows Server 2008 (64-bit) R2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115287"/>
                    <extend_definition comment="Microsoft Windows 7 (ia-64) is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115281"/>
                    <extend_definition comment="Microsoft Windows Server 2008 (ia-64) R2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115288"/>
                </criteria>
                <criteria operator="OR">
                    <criterion comment="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{0002E531-0000-0000-C000-000000000046}!Compatibility Flags does not exist" test_ref="oval:gov.nist.fdcc.patch:tst:115721"/>
                    <criterion comment="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{0002E531-0000-0000-C000-000000000046}!Compatibility Flags is not equal to 0x00000400" test_ref="oval:gov.nist.fdcc.patch:tst:115722"/>
                </criteria>
            </criteria>
        </definition>
        <definition id="oval:gov.nist.fdcc.patch:def:11578" version="1" class="patch">
            <metadata>
                <title>MS09-036: Vulnerability in ASP.NET in Microsoft Windows Could Allow Denial of Service (970957)</title>
                <affected family="windows">
                    <platform>Microsoft Windows Vista</platform>
                    <platform>Microsoft Windows Server 2008</platform>
                </affected>
                <reference source="Microsoft" ref_id="MS09-036" ref_url="http://www.microsoft.com/technet/security/bulletin/MS09-036.mspx"/>
                <reference source="Microsoft" ref_id="KB970957" ref_url="http://support.microsoft.com/kb/970957"/>
                <reference source="Microsoft" ref_id="KB972593" ref_url="http://support.microsoft.com/kb/972593"/>
                <reference source="Microsoft" ref_id="KB972594" ref_url="http://support.microsoft.com/kb/972594"/>
                <reference source="CVE" ref_id="CVE-2009-1536" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1536"/>
                <description>Microsoft has released MS09-036 to address security issues in Windows Vista Service Pack 1 and Windows Server 2008 as documented by CVE-2009-1536</description>
            </metadata>
            <criteria operator="OR">
                <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit, 64-bit, ia-64) - GDR or LDR">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
                    </criteria>
                    <criteria operator="OR">
                        <criteria operator="AND">
                            <extend_definition comment="Microsoft .NET Framework 2.0 Service Pack 1 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11580"/>
                            <criterion comment="System.web.dll version is less than 2.0.50727.1871" test_ref="oval:gov.nist.fdcc.patch:tst:115780"/>
                        </criteria>
                        <criteria operator="AND">
                            <extend_definition comment="Microsoft .NET Framework 3.5 (Gold) is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11582"/>
                            <criterion comment="System.web.dll version is less than 2.0.50727.1871" test_ref="oval:gov.nist.fdcc.patch:tst:115781"/>
                        </criteria>
                    </criteria>
                </criteria>
                <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit, 64-bit, ia-64) - GDR">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
                    </criteria>
                    <criteria operator="OR">
                        <criteria operator="AND">
                            <extend_definition comment="Microsoft .NET Framework 2.0 Service Pack 2, or later, is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11581"/>
                            <criterion comment="System.web.dll version is less than 2.0.50727.3601" test_ref="oval:gov.nist.fdcc.patch:tst:115783"/>
                        </criteria>
                        <criteria operator="AND">
                            <extend_definition comment="Microsoft .NET Framework 3.5 Service Pack 1, or later, is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11583"/>
                            <criterion comment="System.web.dll version is less than 2.0.50727.3601" test_ref="oval:gov.nist.fdcc.patch:tst:115785"/>
                        </criteria>
                    </criteria>
                </criteria>
                <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit, 64-bit, ia-64) - LDR">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
                    </criteria>
                    <criteria operator="OR">
                        <criteria operator="AND">
                            <extend_definition comment="Microsoft .NET Framework 2.0 Service Pack 2, or later, is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11581"/>
                            <criterion comment="System.web.dll version is greater than or equal to 2.0.50727.3601" test_ref="oval:gov.nist.fdcc.patch:tst:115782"/>
                            <criterion comment="System.web.dll version is less than 2.0.50727.4049" test_ref="oval:gov.nist.fdcc.patch:tst:115786"/>
                        </criteria>
                        <criteria operator="AND">
                            <extend_definition comment="Microsoft .NET Framework 3.5 Service Pack 1, or later, is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11583"/>
                            <criterion comment="System.web.dll version is greater than or equal to 2.0.50727.3601" test_ref="oval:gov.nist.fdcc.patch:tst:115784"/>
                            <criterion comment="System.web.dll version is less than 2.0.50727.4049" test_ref="oval:gov.nist.fdcc.patch:tst:115787"/>
                        </criteria>
                    </criteria>
                </criteria>
            </criteria>
        </definition>
        <definition id="oval:gov.nist.fdcc.patch:def:11577" version="2" class="patch">
            <metadata>
                <title>MS09-037: Vulnerabilities in Microsoft Active Template Library (ATL) Could Allow Remote Code Execution (973908)</title>
                <affected family="windows">
                    <platform>Microsoft Windows XP</platform>
                    <platform>Microsoft Windows Vista</platform>
                    <platform>Microsoft Windows Server 2008</platform>
                </affected>
                <reference source="Microsoft" ref_id="MS09-037" ref_url="http://www.microsoft.com/technet/security/bulletin/MS09-037.mspx"/>
                <reference source="Microsoft" ref_id="KB973908" ref_url="http://support.microsoft.com/kb/973908"/>
                <reference source="CVE" ref_id="CVE-2008-0015" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0015"/>
                <reference source="CVE" ref_id="CVE-2008-0020" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0020"/>
                <reference source="CVE" ref_id="CVE-2009-0901" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0901"/>
                <reference source="CVE" ref_id="CVE-2009-2493" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2493"/>
                <reference source="CVE" ref_id="CVE-2009-2494" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2494"/>
                <description>Microsoft has released MS09-037 to address security issues in Windows XP, Windows Vista, and Windows Server 2008 as documented by CVE-2008-0015, CVE-2008-0020, CVE-2009-0901, CVE-2009-2493, and CVE-2009-2494 </description>
            </metadata>
            <criteria operator="OR">
                <criteria operator="AND" comment="Microsoft Outlook Express 6 on Windows XP  (32-bit) SP2">
                    <extend_definition comment="Microsoft Windows XP (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115276"/>
                    <extend_definition comment="Microsoft Outlook Express 6 for Windows XP/2003 is installed" definition_ref="oval:org.mitre.oval:def:208"/>
                    <criterion comment="the version of Msoe.dll is less than 6.0.2900.3598" test_ref="oval:org.mitre.oval:tst:9966"/>
                </criteria>
                <criteria operator="AND" comment="Microsoft Outlook Express 6 on Windows XP (32-bit) SP3">
                    <extend_definition comment="Microsoft Windows XP (32-bit) SP3 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115278"/>
                    <extend_definition comment="Microsoft Outlook Express 6 for Windows XP/2003 is installed" definition_ref="oval:org.mitre.oval:def:208"/>
                    <criterion comment="the version of Msoe.dll is less than 6.0.2900.5843" test_ref="oval:org.mitre.oval:tst:10297"/>
                </criteria>
                <criteria operator="AND" comment="Microsoft Outlook Express 6 on Windows XP (64-bit) SP2">
                    <extend_definition comment="Microsoft Windows XP (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115277"/>
                    <extend_definition comment="Microsoft Outlook Express 6 for Windows XP/2003 is installed" definition_ref="oval:org.mitre.oval:def:208"/>
                    <criterion comment="the version of Msoe.dll is less than 6.0.3790.4548" test_ref="oval:org.mitre.oval:tst:10588"/>
                </criteria>
                <criteria operator="AND" comment="Windows Media Player 9 on Windows XP (32-bit) SP2">
                    <extend_definition comment="Microsoft Windows XP (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115276"/>
                    <extend_definition comment="Windows Media Player v9.0 is installed." definition_ref="oval:org.mitre.oval:def:2147"/>
                    <criterion comment="the version of Wmp.dll is less than 9.0.0.3271" test_ref="oval:org.mitre.oval:tst:10183"/>
                </criteria>
                <criteria operator="AND" comment="Windows Media Player 9 on Windows XP (32-bit) SP3">
                    <extend_definition comment="Microsoft Windows XP (32-bit) SP3 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115278"/>
                    <extend_definition comment="Windows Media Player v9.0 is installed." definition_ref="oval:org.mitre.oval:def:2147"/>
                    <criterion comment="the version of Wmp.dll is less than 9.0.0.4507" test_ref="oval:org.mitre.oval:tst:10010"/>
                </criteria>
                <criteria operator="AND" comment="Windows Media Player 10 on Windows XP (32-bit) SP2/SP3">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows XP (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115276"/>
                        <extend_definition comment="Microsoft Windows XP (32-bit) SP3 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115278"/>
                    </criteria>
                    <extend_definition comment="Windows Media Player v10.0 is installed." definition_ref="oval:org.mitre.oval:def:2172"/>
                    <criterion comment="the version of Wmp.dll is less than 10.0.0.4074" test_ref="oval:org.mitre.oval:tst:9758"/>
                </criteria>
                <criteria operator="AND" comment="Windows Media Player 10 on Windows XP (64-bit) SP2">
                    <extend_definition comment="Microsoft Windows XP (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115277"/>
                    <extend_definition comment="Windows Media Player v10.0 is installed." definition_ref="oval:org.mitre.oval:def:2172"/>
                    <criterion comment="the version of Wmp.dll is less than 10.0.0.4006" test_ref="oval:org.mitre.oval:tst:10291"/>
                </criteria>
                <criteria operator="AND" comment="Windows Media Player 11 on Windows XP (32-bit) SP2/SP3">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows XP (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115276"/>
                        <extend_definition comment="Microsoft Windows XP (32-bit) SP3 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115278"/>
                    </criteria>
                    <extend_definition comment="Windows Media Player v11.0 is installed." definition_ref="oval:org.mitre.oval:def:2126"/>
                    <criterion comment="the version of Wmp.dll is less than 11.0.5721.5268" test_ref="oval:org.mitre.oval:tst:9769"/>
                </criteria>
                <criteria operator="AND" comment="Windows Media Player 11 on Windows XP (64-bit) SP2">
                    <extend_definition comment="Microsoft Windows XP (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115277"/>
                    <extend_definition comment="Windows Media Player v11.0 is installed." definition_ref="oval:org.mitre.oval:def:2126"/>
                    <criterion comment="the version of Wmp.dll is less than 11.0.5721.5268" test_ref="oval:org.mitre.oval:tst:9769"/>
                </criteria>
                <criteria operator="AND" comment="Windows Media Player 11 on Windows Vista SP1/Server 2008 (32-bit)/(64-bit)/ia64">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
                    </criteria>
                    <criterion comment="the version of Spwmp.dll is greater than or equal 6.0.6001.18000" test_ref="oval:org.mitre.oval:tst:10473"/>
                    <criterion comment="the version of Wmp.dll is less than 11.0.6001.7007" test_ref="oval:org.mitre.oval:tst:10523"/>
                </criteria>
                <criteria operator="AND" comment="Windows Media Player 11 on Windows Vista SP2/Server 2008 SP2  (32-bit)/(64-bit)/ia64">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11559"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11560"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11558"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11561"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11562"/>
                    </criteria>
                    <criterion comment="the version of Spwmp.dll is greater than or equal 6.0.6002.18000" test_ref="oval:org.mitre.oval:tst:10648"/>
                    <criterion comment="the version of Wmp.dll is less than 11.0.6002.18065" test_ref="oval:org.mitre.oval:tst:10003"/>
                </criteria>
                <criteria operator="AND" comment="Windows Media Player 11 on Windows Vista SP1/Server 2008 (32-bit)/(64-bit)/ia64">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
                    </criteria>
                    <criterion comment="the version of Spwmp.dll is greater than or equal 6.0.6001.22000" test_ref="oval:org.mitre.oval:tst:10251"/>
                    <criterion comment="the version of Wmp.dll is less than 11.0.6001.7114" test_ref="oval:org.mitre.oval:tst:10759"/>
                </criteria>
                <criteria operator="AND" comment="Windows Media Player 11 on Windows Vista SP2/Server 2008 SP2  (32-bit)/(64-bit)/ia64">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11559"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11560"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11558"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11561"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11562"/>
                    </criteria>
                    <criterion comment="the version of Spwmp.dll is greater than or equal 6.0.6002.22000" test_ref="oval:org.mitre.oval:tst:10624"/>
                    <criterion comment="the version of Wmp.dll is less than 11.0.6002.22172" test_ref="oval:org.mitre.oval:tst:10699"/>
                </criteria>
                <criteria operator="AND" comment="Windows ATL Component on Windows XP, Vista, Server 2008">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows XP (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115276"/>
                        <extend_definition comment="Microsoft Windows XP (32-bit) SP3 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115278"/>
                        <extend_definition comment="Microsoft Windows XP (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115277"/>
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11559"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11560"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11558"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11561"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11562"/>
                    </criteria>
                    <criterion comment="the version of atl.dll is less than 3.5.2284.2" test_ref="oval:org.mitre.oval:tst:10563"/>
                </criteria>
                <criteria operator="AND" comment="DHTML Editing Component ActiveX Control on Windows XP">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows XP (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115276"/>
                        <extend_definition comment="Microsoft Windows XP (32-bit) SP3 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115278"/>
                    </criteria>
                    <criterion comment="the version of dhtmled.ocx is less than 6.1.0.9247" test_ref="oval:org.mitre.oval:tst:10482"/>
                </criteria>
                <criteria operator="AND" comment="Microsoft MSWebDVD ActiveX Control on Windows XP (32-bit) SP2">
                    <extend_definition comment="Microsoft Windows XP (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115276"/>
                    <criterion comment="the version of Mswebdvd.dll is less than 6.5.2600.3610" test_ref="oval:org.mitre.oval:tst:10763"/>
                </criteria>
                <criteria operator="AND" comment="Microsoft MSWebDVD ActiveX Control on Windows XP (32-bit) SP2">
                    <extend_definition comment="Microsoft Windows XP (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115276"/>
                    <criterion comment="the version of Mswebdvd.dll is less than 6.5.2600.5857" test_ref="oval:org.mitre.oval:tst:10001"/>
                </criteria>
                <criteria operator="AND" comment="Microsoft MSWebDVD ActiveX Control on Windows XP (64-bit) SP2">
                    <extend_definition comment="Microsoft Windows XP (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115277"/>
                    <criterion comment="the version of Mswebdvd.dll is less than 6.5.3790.4564" test_ref="oval:org.mitre.oval:tst:10694"/>
                </criteria>
            </criteria>
        </definition>
        <definition id="oval:gov.nist.fdcc.patch:def:11579" version="1" class="patch">
            <metadata>
                <title>MS09-038: Vulnerabilities in Windows Media File Processing Could Allow Remote Code Execution (971557)</title>
                <affected family="windows">
                    <platform>Microsoft Windows XP</platform>
                    <platform>Microsoft Windows Vista</platform>
                    <platform>Microsoft Windows Server 2008</platform>
                </affected>
                <reference source="Microsoft" ref_id="MS09-038" ref_url="http://www.microsoft.com/technet/security/bulletin/MS09-038.mspx"/>
                <reference source="Microsoft" ref_id="KB971557" ref_url="http://support.microsoft.com/kb/971557"/>
                <reference source="CVE" ref_id="CVE-2009-1545" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1545"/>
                <reference source="CVE" ref_id="CVE-2009-1546" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1546"/>
                <description>Microsoft has released MS09-038 to address security issues in Windows XP, Windows Vista, and Windows Server 2008 as documented by CVE-2009-1545 and CVE-2009-1546</description>
            </metadata>
            <criteria operator="OR">
                <criteria operator="AND">
                    <extend_definition comment="Microsoft Windows XP (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115276"/>
                    <criterion comment="Avifil32.dll version is less than 5.1.2600.3585" test_ref="oval:gov.nist.fdcc.patch:tst:115790"/>
                </criteria>
                <criteria operator="AND">
                    <extend_definition comment="Microsoft Windows XP (32-bit) SP3 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115278"/>
                    <criterion comment="Avifil32.dll version is less than 5.1.2600.5827  " test_ref="oval:gov.nist.fdcc.patch:tst:115791"/>
                </criteria>
                <criteria operator="AND">
                    <extend_definition comment="Microsoft Windows XP (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115277"/>
                    <criterion comment="Avifil32.dll version is less than 5.2.3790.4527  " test_ref="oval:gov.nist.fdcc.patch:tst:115792"/>
                </criteria>
                <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit, 64-bit, ia-64) - GDR">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
                    </criteria>
                    <criterion comment="Avifil32.dll version is greater than or equal to 6.0.6001.18000" test_ref="oval:gov.nist.fdcc.patch:tst:115793"/>
                    <criterion comment="Avifil32.dll version is less than 6.0.6001.18270" test_ref="oval:gov.nist.fdcc.patch:tst:115794"/>
                </criteria>
                <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit, 64-bit, ia-64) - LDR">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
                    </criteria>
                    <criterion comment="Avifil32.dll version is greater than or equal to 6.0.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:115795"/>
                    <criterion comment="Avifil32.dll version is less than 6.0.6001.22447" test_ref="oval:gov.nist.fdcc.patch:tst:115796"/>
                </criteria>
                <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - GDR">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11559"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11558"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11560"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11561"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11562"/>
                    </criteria>
                    <criterion comment="Avifil32.dll version is greater than or equal to 6.0.6002.18000" test_ref="oval:gov.nist.fdcc.patch:tst:115797"/>
                    <criterion comment="Avifil32.dll version is less than 6.0.6002.18049" test_ref="oval:gov.nist.fdcc.patch:tst:115798"/>
                </criteria>
                <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - LDR">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11559"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11558"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11560"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11561"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11562"/>
                    </criteria>
                    <criterion comment="Avifil32.dll version is greater than or equal to 6.0.6002.22000" test_ref="oval:gov.nist.fdcc.patch:tst:115799"/>
                    <criterion comment="Avifil32.dll version is less than 6.0.6002.22150" test_ref="oval:gov.nist.fdcc.patch:tst:1157991"/>
                </criteria>
            </criteria>
        </definition>
        <definition id="oval:gov.nist.fdcc.patch:def:11574" version="1" class="patch">
            <metadata>
                <title>MS09-041: Vulnerability in Workstation Service Could Allow Elevation of Privilege (971657)</title>
                <affected family="windows">
                    <platform>Microsoft Windows XP</platform>
                    <platform>Microsoft Windows Vista</platform>
                    <platform>Microsoft Windows Server 2008</platform>
                </affected>
                <reference source="Microsoft" ref_id="MS09-041" ref_url="http://www.microsoft.com/technet/security/bulletin/MS09-041.mspx"/>
                <reference source="Microsoft" ref_id="KB971657" ref_url="http://support.microsoft.com/kb/971657"/>
                <reference source="CVE" ref_id="CVE-2009-1544" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1544"/>
                <description>Microsoft has released MS09-041 to address security issues in Windows XP, Windows Vista, and Windows Server 2008 as documented by CVE-2009-1544</description>
            </metadata>
            <criteria operator="OR">
                <criteria operator="AND">
                    <extend_definition comment="Microsoft Windows XP (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115276"/>
                    <criterion comment="Wkssvc.dll version is less than 5.1.2600.3584" test_ref="oval:gov.nist.fdcc.patch:tst:115740"/>
                </criteria>
                <criteria operator="AND">
                    <extend_definition comment="Microsoft Windows XP (32-bit) SP3 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115278"/>
                    <criterion comment="Wkssvc.dll version is less than 5.1.2600.5826  " test_ref="oval:gov.nist.fdcc.patch:tst:115741"/>
                </criteria>
                <criteria operator="AND">
                    <extend_definition comment="Microsoft Windows XP (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115277"/>
                    <criterion comment="Wkssvc.dll version is less than 5.2.3790.4530  " test_ref="oval:gov.nist.fdcc.patch:tst:115742"/>
                </criteria>
                <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit, 64-bit, ia-64) - GDR">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
                    </criteria>
                    <criterion comment="Wkssvc.dll version is greater than or equal to 6.0.6001.18000" test_ref="oval:gov.nist.fdcc.patch:tst:115743"/>
                    <criterion comment="Wkssvc.dll version is less than 6.0.6001.18270" test_ref="oval:gov.nist.fdcc.patch:tst:115744"/>
                </criteria>
                <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit, 64-bit, ia-64) - LDR">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
                    </criteria>
                    <criterion comment="Wkssvc.dll version is greater than or equal to 6.0.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:115745"/>
                    <criterion comment="Wkssvc.dll version is less than 6.0.6001.22447" test_ref="oval:gov.nist.fdcc.patch:tst:115746"/>
                </criteria>
                <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - GDR">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11559"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11558"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11560"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11561"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11562"/>
                    </criteria>
                    <criterion comment="Wkssvc.dll version is greater than or equal to 6.0.6002.18000" test_ref="oval:gov.nist.fdcc.patch:tst:115747"/>
                    <criterion comment="Wkssvc.dll version is less than 6.0.6002.18049" test_ref="oval:gov.nist.fdcc.patch:tst:115748"/>
                </criteria>
                <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - LDR">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11559"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11558"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11560"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11561"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11562"/>
                    </criteria>
                    <criterion comment="Wkssvc.dll version is greater than or equal to 6.0.6002.22000" test_ref="oval:gov.nist.fdcc.patch:tst:115749"/>
                    <criterion comment="Wkssvc.dll version is less than 6.0.6002.22150" test_ref="oval:gov.nist.fdcc.patch:tst:1157491"/>
                </criteria>
            </criteria>
        </definition>
        <definition id="oval:gov.nist.fdcc.patch:def:11575" version="1" class="patch">
            <metadata>
                <title>MS09-042: Vulnerability in Telnet Could Allow Remote Code Execution (960859)</title>
                <affected family="windows">
                    <platform>Microsoft Windows XP</platform>
                    <platform>Microsoft Windows Vista</platform>
                    <platform>Microsoft Windows Server 2008</platform>
                </affected>
                <reference source="Microsoft" ref_id="MS09-042" ref_url="http://www.microsoft.com/technet/security/bulletin/MS09-042.mspx"/>
                <reference source="Microsoft" ref_id="KB960859" ref_url="http://support.microsoft.com/kb/960859"/>
                <reference source="CVE" ref_id="CVE-2009-1930" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1930"/>
                <description>Microsoft has released MS09-042 to address security issues in Windows XP, Windows Vista, and Windows Server 2008 as documented by CVE-2009-1930</description>
            </metadata>
            <criteria operator="OR">
                <criteria operator="AND">
                    <extend_definition comment="Microsoft Windows XP (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115276"/>
                    <criterion comment="Telnet.exe version is less than 5.1.2600.3587" test_ref="oval:gov.nist.fdcc.patch:tst:115750"/>
                </criteria>
                <criteria operator="AND">
                    <extend_definition comment="Microsoft Windows XP (32-bit) SP3 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115278"/>
                    <criterion comment="Telnet.exe version is less than 5.1.2600.5829  " test_ref="oval:gov.nist.fdcc.patch:tst:115751"/>
                </criteria>
                <criteria operator="AND">
                    <extend_definition comment="Microsoft Windows XP (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115277"/>
                    <criterion comment="Telnet.exe version is less than 5.2.3790.4528  " test_ref="oval:gov.nist.fdcc.patch:tst:115752"/>
                </criteria>
                <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit, 64-bit, ia-64) - GDR">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
                    </criteria>
                    <criterion comment="Telnet.exe version is greater than or equal to 6.0.6001.18000" test_ref="oval:gov.nist.fdcc.patch:tst:115753"/>
                    <criterion comment="Telnet.exe version is less than 6.0.6001.18270" test_ref="oval:gov.nist.fdcc.patch:tst:115754"/>
                </criteria>
                <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit, 64-bit, ia-64) - LDR">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
                    </criteria>
                    <criterion comment="Telnet.exe version is greater than or equal to 6.0.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:115755"/>
                    <criterion comment="Telnet.exe version is less than 6.0.6001.22447" test_ref="oval:gov.nist.fdcc.patch:tst:115756"/>
                </criteria>
                <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - GDR">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11559"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11558"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11560"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11561"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11562"/>
                    </criteria>
                    <criterion comment="Telnet.exe version is greater than or equal to 6.0.6002.18000" test_ref="oval:gov.nist.fdcc.patch:tst:115757"/>
                    <criterion comment="Telnet.exe version is less than 6.0.6002.18049" test_ref="oval:gov.nist.fdcc.patch:tst:115758"/>
                </criteria>
                <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - LDR">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11559"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11558"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11560"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11561"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11562"/>
                    </criteria>
                    <criterion comment="Telnet.exe version is greater than or equal to 6.0.6002.22000" test_ref="oval:gov.nist.fdcc.patch:tst:115759"/>
                    <criterion comment="Telnet.exe version is less than 6.0.6002.22150" test_ref="oval:gov.nist.fdcc.patch:tst:1157591"/>
                </criteria>
            </criteria>
        </definition>
        <definition id="oval:gov.nist.fdcc.patch:def:11576" version="1" class="patch">
            <metadata>
                <title>MS09-044: Vulnerabilities in Remote Desktop Connection Could Allow Remote Code Execution (970927)</title>
                <affected family="windows">
                    <platform>Microsoft Windows XP</platform>
                    <platform>Microsoft Windows Vista</platform>
                    <platform>Microsoft Windows Server 2008</platform>
                </affected>
                <reference source="Microsoft" ref_id="MS09-044" ref_url="http://www.microsoft.com/technet/security/bulletin/MS09-044.mspx"/>
                <reference source="Microsoft" ref_id="KB970927" ref_url="http://support.microsoft.com/kb/970927"/>
                <reference source="Microsoft" ref_id="KB958470" ref_url="http://support.microsoft.com/kb/958470"/>
                <reference source="Microsoft" ref_id="KB958469" ref_url="http://support.microsoft.com/kb/958469"/>
                <reference source="CVE" ref_id="CVE-2009-1133" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1133"/>
                <reference source="CVE" ref_id="CVE-2009-1929" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1929"/>
                <description>Microsoft has released MS09-044 to address security issues in Windows XP, Windows Vista, and Windows Server 2008 as documented by CVE-2009-1133 and CVE-2009-1929</description>
            </metadata>
            <criteria operator="OR">
                <criteria operator="AND">
                    <extend_definition comment="Microsoft Windows XP (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115276"/>
                    <criterion comment="Mstscax.dll version is less than 5.1.2600.3581" test_ref="oval:gov.nist.fdcc.patch:tst:115761"/>
                </criteria>
                <criteria operator="AND">
                    <extend_definition comment="Microsoft Windows XP (32-bit) SP3 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115278"/>
                    <criterion comment="Mstscax.dll version is less than 5.1.2600.3581" test_ref="oval:gov.nist.fdcc.patch:tst:115761"/>
                </criteria>
                <criteria operator="AND">
                    <extend_definition comment="Microsoft Windows XP (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115277"/>
                    <criterion comment="Mstscax.dll version is less than 5.1.2600.3581" test_ref="oval:gov.nist.fdcc.patch:tst:115761"/>
                </criteria>
                <criteria operator="AND">
                    <extend_definition comment="Microsoft Windows XP (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115276"/>
                    <criterion comment="2k3mstsc.dll version is less than 5.1.3790.0" test_ref="oval:gov.nist.fdcc.patch:tst:115762"/>
                </criteria>
                <criteria operator="AND">
                    <extend_definition comment="Microsoft Windows XP (32-bit) SP3 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115278"/>
                    <criterion comment="2k3mstsc.dll version is less than 5.1.3790.0 " test_ref="oval:gov.nist.fdcc.patch:tst:115762"/>
                </criteria>
                <criteria operator="AND">
                    <extend_definition comment="Microsoft Windows XP (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115277"/>
                    <criterion comment="2k3mstsc.dll version is less than 5.1.2600.3581" test_ref="oval:gov.nist.fdcc.patch:tst:115763"/>
                </criteria>
                <criteria operator="AND">
                    <extend_definition comment="Microsoft Windows XP (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115276"/>
                    <criterion comment="Mstscax.dll version is greater than or equal to 6.0.6000.16000" test_ref="oval:gov.nist.fdcc.patch:tst:115764"/>
                    <criterion comment="Mstscax.dll version is less than 6.0.6000.16865" test_ref="oval:gov.nist.fdcc.patch:tst:115765"/>
                </criteria>
                <criteria operator="AND">
                    <extend_definition comment="Microsoft Windows XP (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115276"/>
                    <criterion comment="Mstscax.dll version is greater than or equal to 6.0.6000.21000" test_ref="oval:gov.nist.fdcc.patch:tst:115766"/>
                    <criterion comment="Mstscax.dll version is less than 6.0.6000.21061" test_ref="oval:gov.nist.fdcc.patch:tst:115767"/>
                </criteria>
                <criteria operator="AND">
                    <extend_definition comment="Microsoft Windows XP (32-bit) SP3 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115278"/>
                    <criterion comment="Mstscax.dll version is greater than or equal to 6.0.6001.18000" test_ref="oval:gov.nist.fdcc.patch:tst:115768"/>
                    <criterion comment="Mstscax.dll version is less than 6.0.6001.18266" test_ref="oval:gov.nist.fdcc.patch:tst:115769"/>
                </criteria>
                <criteria operator="AND">
                    <extend_definition comment="Microsoft Windows XP (32-bit) SP3 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115278"/>
                    <criterion comment="Mstscax.dll version is greater than or equal to 6.0.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1157691"/>
                    <criterion comment="Mstscax.dll version is less than 6.0.6001.22443" test_ref="oval:gov.nist.fdcc.patch:tst:1157692"/>
                </criteria>
                <criteria operator="AND">
                    <extend_definition comment="Microsoft Windows XP (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115277"/>
                    <criterion comment="Mstscax.dll version is greater than or equal to 6.0.6000.16000" test_ref="oval:gov.nist.fdcc.patch:tst:115764"/>
                    <criterion comment="Mstscax.dll version is less than 6.0.6000.16865" test_ref="oval:gov.nist.fdcc.patch:tst:115765"/>
                </criteria>
                <criteria operator="AND">
                    <extend_definition comment="Microsoft Windows XP (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115277"/>
                    <criterion comment="Mstscax.dll version is greater than or equal to 6.0.6000.21000" test_ref="oval:gov.nist.fdcc.patch:tst:115766"/>
                    <criterion comment="Mstscax.dll version is less than 6.0.6000.21061" test_ref="oval:gov.nist.fdcc.patch:tst:115767"/>
                </criteria>
                <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit, 64-bit, ia-64) - GDR">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
                    </criteria>
                    <criterion comment="Mstscax.dll version is greater than or equal to 6.0.6001.18000" test_ref="oval:gov.nist.fdcc.patch:tst:115768"/>
                    <criterion comment="Mstscax.dll version is less than 6.0.6001.18266" test_ref="oval:gov.nist.fdcc.patch:tst:115769"/>
                </criteria>
                <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit, 64-bit, ia-64) - LDR">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
                    </criteria>
                    <criterion comment="Mstscax.dll version is greater than or equal to 6.0.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1157691"/>
                    <criterion comment="Mstscax.dll version is less than 6.0.6001.22443" test_ref="oval:gov.nist.fdcc.patch:tst:1157692"/>
                </criteria>
                <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - GDR">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11559"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11558"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11560"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11561"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11562"/>
                    </criteria>
                    <criterion comment="Mstscax.dll version is greater than or equal to 6.0.6002.18000" test_ref="oval:gov.nist.fdcc.patch:tst:1157693"/>
                    <criterion comment="Mstscax.dll version is less than 6.0.6002.18045" test_ref="oval:gov.nist.fdcc.patch:tst:1157694"/>
                </criteria>
                <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - LDR">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11559"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11558"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11560"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11561"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11562"/>
                    </criteria>
                    <criterion comment="Mstscax.dll version is greater than or equal to 6.0.6002.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1157695"/>
                    <criterion comment="Mstscax.dll version is less than 6.0.6002.22146" test_ref="oval:gov.nist.fdcc.patch:tst:1157696"/>
                </criteria>
            </criteria>
        </definition>
        <definition id="oval:gov.nist.fdcc.patch:def:11585" version="1" class="patch">
            <metadata>
                <title>MS09-045: Vulnerability in JScript Scripting Engine Could Allow Remote Code Execution (971961)</title>
                <affected family="windows">
                    <platform>Microsoft Windows XP</platform>
                    <platform>Microsoft Windows Vista</platform>
                    <platform>Microsoft Windows Server 2008</platform>
                </affected>
                <reference source="Microsoft" ref_id="MS09-045" ref_url="http://www.microsoft.com/technet/security/bulletin/MS09-045.mspx"/>
                <reference source="Microsoft" ref_id="KB971961" ref_url="http://support.microsoft.com/kb/971961"/>
                <reference source="CVE" ref_id="CVE-2009-1920" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1920"/>
                <description>Microsoft has released MS09-045 to address security issues in Windows XP, Windows Vista, and Windows Server 2008 as documented by CVE-2009-1920</description>
            </metadata>
            <criteria operator="OR">
                <criteria operator="AND" comment="Microsoft XP (32-bit SP2 or SP3, 64-bit SP2)">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows XP (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115276"/>
                        <extend_definition comment="Microsoft Windows XP (32-bit) SP3 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115278"/>
                        <extend_definition comment="Microsoft Windows XP (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115277"/>
                    </criteria>
                    <criterion comment="Jscript.dll version is greater than or equal to 5.6.0.0" test_ref="oval:gov.nist.fdcc.patch:tst:115851"/>
                    <criterion comment="Jscript.dll version is less than 5.6.0.8837" test_ref="oval:gov.nist.fdcc.patch:tst:115852"/>
                </criteria>
                <criteria operator="AND" comment="Microsoft XP (32-bit SP2 or SP3, 64-bit SP2)">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows XP (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115276"/>
                        <extend_definition comment="Microsoft Windows XP (32-bit) SP3 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115278"/>
                        <extend_definition comment="Microsoft Windows XP (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115277"/>
                    </criteria>
                    <criterion comment="Jscript.dll version is greater than or equal to 5.7.0.0" test_ref="oval:gov.nist.fdcc.patch:tst:115853"/>
                    <criterion comment="Jscript.dll version is less than 5.7.6002.22145" test_ref="oval:gov.nist.fdcc.patch:tst:115854"/>
                </criteria>
                <criteria operator="AND" comment="Microsoft XP (32-bit SP2 or SP3, 64-bit SP2)">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows XP (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115276"/>
                        <extend_definition comment="Microsoft Windows XP (32-bit) SP3 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115278"/>
                        <extend_definition comment="Microsoft Windows XP (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115277"/>
                    </criteria>
                    <criterion comment="Jscript.dll version is greater than or equal to 5.8.0.0" test_ref="oval:gov.nist.fdcc.patch:tst:115855"/>
                    <criterion comment="Jscript.dll version is less than 5.8.6001.22886" test_ref="oval:gov.nist.fdcc.patch:tst:115856"/>
                </criteria>
                <criteria operator="AND" comment="Vista, Server 2008 SP1 or SP2 (32-bit, 64-bit, ia-64) - GDR">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11559"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11558"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11560"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11561"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11562"/>
                    </criteria>
                    <criterion comment="Jscript.dll version is greater than or equal to 5.7.0.18000" test_ref="oval:gov.nist.fdcc.patch:tst:115857"/>
                    <criterion comment="Jscript.dll version is less than 5.7.0.18266" test_ref="oval:gov.nist.fdcc.patch:tst:115858"/>
                </criteria>
                <criteria operator="AND" comment="Vista, Server 2008 SP1 or SP2 (32-bit, 64-bit, ia-64) - LDR">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11559"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11558"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11560"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11561"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11562"/>
                    </criteria>
                    <criterion comment="Jscript.dll version is greater than or equal to 5.7.0.22000" test_ref="oval:gov.nist.fdcc.patch:tst:115859"/>
                    <criterion comment="Jscript.dll version is less than 5.7.0.22443" test_ref="oval:gov.nist.fdcc.patch:tst:1158591"/>
                </criteria>
                <criteria operator="AND" comment="Vista, Server 2008 SP1 or SP2 (32-bit, 64-bit, ia-64) - GDR">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11559"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11558"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11560"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11561"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11562"/>
                    </criteria>
                    <criterion comment="Jscript.dll version is greater than or equal to 5.7.6002.18000" test_ref="oval:gov.nist.fdcc.patch:tst:1158592"/>
                    <criterion comment="Jscript.dll version is less than 5.7.6002.18045" test_ref="oval:gov.nist.fdcc.patch:tst:1158593"/>
                </criteria>
                <criteria operator="AND" comment="Vista, Server 2008 SP1 or SP2 (32-bit, 64-bit, ia-64) - LDR">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11559"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11558"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11560"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11561"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11562"/>
                    </criteria>
                    <criterion comment="Jscript.dll version is greater than or equal to 5.7.6002.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1158531"/>
                    <criterion comment="Jscript.dll version is less than 5.7.6002.22146" test_ref="oval:gov.nist.fdcc.patch:tst:1158594"/>
                </criteria>
                <criteria operator="AND" comment="Vista, Server 2008 SP1 or SP2 (32-bit, 64-bit, ia-64) - GDR">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11559"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11558"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11560"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11561"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11562"/>
                    </criteria>
                    <criterion comment="Jscript.dll version is greater than or equal to 5.8.6001.18000" test_ref="oval:gov.nist.fdcc.patch:tst:1158595"/>
                    <criterion comment="Jscript.dll version is less than 5.8.6001.18795" test_ref="oval:gov.nist.fdcc.patch:tst:1158596"/>
                </criteria>
                <criteria operator="AND" comment="Vista, Server 2008 SP1 or SP2 (32-bit, 64-bit, ia-64) - LDR">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11559"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11558"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11560"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11561"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11562"/>
                    </criteria>
                    <criterion comment="Jscript.dll version is greater than or equal to 5.8.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1158551"/>
                    <criterion comment="Jscript.dll version is less than 5.8.6001.22886" test_ref="oval:gov.nist.fdcc.patch:tst:1158597"/>
                </criteria>
            </criteria>
        </definition>
        <definition id="oval:gov.nist.fdcc.patch:def:11587" version="1" class="patch">
            <metadata>
                <title>MS09-047: Vulnerabilities in Windows Media Format Could Allow Remote Code Execution (973812)</title>
                <affected family="windows">
                    <platform>Microsoft Windows XP</platform>
                    <platform>Microsoft Windows Vista</platform>
                    <platform>Microsoft Windows Server 2008</platform>
                </affected>
                <reference source="Microsoft" ref_id="MS09-047" ref_url="http://www.microsoft.com/technet/security/bulletin/MS09-047.mspx"/>
                <reference source="Microsoft" ref_id="KB973812" ref_url="http://support.microsoft.com/kb/973812"/>
                <reference source="CVE" ref_id="CVE-2009-2498" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2498"/>
                <reference source="CVE" ref_id="CVE-2009-2499" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2499"/>
                <description>Microsoft has released MS09-047 to address security issues in Windows XP, Windows Vista, and Windows Server 2008 as documented by CVE-2009-2498 and CVE-2009-2499</description>
            </metadata>
            <criteria operator="OR">
                <criteria operator="AND">
                    <extend_definition comment="Microsoft Windows XP (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115276"/>
                    <extend_definition comment="Windows Media Player v9.0 is installed." definition_ref="oval:gov.nist.fdcc.patch:def:115231"/>
                    <criterion comment="the version of Wmvcore.dll is less than 9.0.0.3270" test_ref="oval:gov.nist.fdcc.patch:tst:115870"/>
                </criteria>
                <criteria operator="AND">
                    <extend_definition comment="Microsoft Windows XP (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115276"/>
                    <extend_definition comment="Windows Media Player v9.0 is installed." definition_ref="oval:gov.nist.fdcc.patch:def:115231"/>
                    <criterion comment="Wmvcore.dll version is greater than or equal to 9.0.0.3300" test_ref="oval:gov.nist.fdcc.patch:tst:115871"/>
                    <criterion comment="the version of Wmvcore.dll is less than 9.0.0.3362" test_ref="oval:gov.nist.fdcc.patch:tst:115872"/>
                </criteria>
                <criteria operator="AND">
                    <extend_definition comment="Microsoft Windows XP (32-bit) SP3 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115278"/>
                    <extend_definition comment="Windows Media Player v9.0 is installed." definition_ref="oval:gov.nist.fdcc.patch:def:115231"/>
                    <criterion comment="the version of Wmvcore.dll is less than 9.0.0.4506" test_ref="oval:gov.nist.fdcc.patch:tst:115873"/>
                </criteria>
                <criteria operator="AND">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows XP (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115276"/>
                        <extend_definition comment="Microsoft Windows XP (32-bit) SP3 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115278"/>
                    </criteria>
                    <extend_definition comment="Windows Media Player v10.0 is installed." definition_ref="oval:gov.nist.fdcc.patch:def:115232"/>
                    <criterion comment="the version of Wmvcore.dll is less than 10.0.0.3705" test_ref="oval:gov.nist.fdcc.patch:tst:115874"/>
                </criteria>
                <criteria operator="AND">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows XP (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115276"/>
                        <extend_definition comment="Microsoft Windows XP (32-bit) SP3 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115278"/>
                    </criteria>
                    <extend_definition comment="Windows Media Player v10.0 is installed." definition_ref="oval:gov.nist.fdcc.patch:def:115232"/>
                    <criterion comment="Wmvcore.dll version is greater than or equal to 10.0.0.4000" test_ref="oval:gov.nist.fdcc.patch:tst:115875"/>
                    <criterion comment="the version of Wmvcore.dll is less than 10.0.0.4072" test_ref="oval:gov.nist.fdcc.patch:tst:115876"/>
                </criteria>
                <criteria operator="AND">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows XP (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115276"/>
                        <extend_definition comment="Microsoft Windows XP (32-bit) SP3 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115278"/>
                    </criteria>
                    <extend_definition comment="Windows Media Player v10.0 is installed." definition_ref="oval:gov.nist.fdcc.patch:def:115232"/>
                    <criterion comment="Wmvcore.dll version is greater than or equal to 10.0.0.4300" test_ref="oval:gov.nist.fdcc.patch:tst:115877"/>
                    <criterion comment="the version of Wmvcore.dll is less than 10.0.0.4372" test_ref="oval:gov.nist.fdcc.patch:tst:115878"/>
                </criteria>
                <criteria operator="AND">
                    <extend_definition comment="Microsoft Windows XP (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115277"/>
                    <extend_definition comment="Windows Media Player v10.0 is installed." definition_ref="oval:gov.nist.fdcc.patch:def:115232"/>
                    <criterion comment="the version of Wmvcore.dll is less than 10.0.0.4005" test_ref="oval:gov.nist.fdcc.patch:tst:115879"/>
                </criteria>
                <criteria operator="AND">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows XP (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115276"/>
                        <extend_definition comment="Microsoft Windows XP (32-bit) SP3 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115278"/>
                        <extend_definition comment="Microsoft Windows XP (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115277"/>
                    </criteria>
                    <extend_definition comment="Windows Media Player v11.0 is installed." definition_ref="oval:gov.nist.fdcc.patch:def:115233"/>
                    <criterion comment="Wmvcore.dll version is less than 11.0.5721.5265" test_ref="oval:gov.nist.fdcc.patch:tst:1158790"/>
                </criteria>
                <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit, 64-bit, ia-64) - GDR">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
                    </criteria>
                    <criterion comment="Wmvcore.dll version is greater than or equal to 11.0.6001.7000" test_ref="oval:gov.nist.fdcc.patch:tst:1158791"/>
                    <criterion comment="Wmvcore.dll version is less than 11.0.6001.7006" test_ref="oval:gov.nist.fdcc.patch:tst:1158792"/>
                </criteria>
                <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit, 64-bit, ia-64) - LDR">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
                    </criteria>
                    <criterion comment="Wmvcore.dll version is greater than or equal to 11.0.6001.7100" test_ref="oval:gov.nist.fdcc.patch:tst:1158793"/>
                    <criterion comment="Wmvcore.dll version is less than 11.0.6001.7113" test_ref="oval:gov.nist.fdcc.patch:tst:1158794"/>
                </criteria>
                <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - GDR">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11559"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11558"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11560"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11561"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11562"/>
                    </criteria>
                    <criterion comment="Wmvcore.dll version is greater than or equal to 11.0.6002.18000" test_ref="oval:gov.nist.fdcc.patch:tst:1158795"/>
                    <criterion comment="Wmvcore.dll version is less than 11.0.6002.18049" test_ref="oval:gov.nist.fdcc.patch:tst:1158796"/>
                </criteria>
                <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - LDR">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11559"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11558"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11560"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11561"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11562"/>
                    </criteria>
                    <criterion comment="Wmvcore.dll version is greater than or equal to 11.0.6002.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1158797"/>
                    <criterion comment="Wmvcore.dll version is less than 11.0.6002.22150" test_ref="oval:gov.nist.fdcc.patch:tst:1158798"/>
                </criteria>
                <criteria operator="AND" comment="Server 2008 SP2 (32-bit, 64-bit, ia-64)">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11558"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11561"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11562"/>
                    </criteria>
                    <criterion comment="Wmsserver.dll version is less than 9.5.6001.18281" test_ref="oval:gov.nist.fdcc.patch:tst:1158799"/>
                </criteria>
            </criteria>
        </definition>
        <definition id="oval:gov.nist.fdcc.patch:def:11588" version="1" class="patch">
            <metadata>
                <title>MS09-048: Vulnerabilities in Windows TCP/IP Could Allow Remote Code Execution (967723)</title>
                <affected family="windows">
                    <platform>Microsoft Windows Vista</platform>
                    <platform>Microsoft Windows Server 2008</platform>
                </affected>
                <reference source="Microsoft" ref_id="MS09-048" ref_url="http://www.microsoft.com/technet/security/bulletin/MS09-048.mspx"/>
                <reference source="Microsoft" ref_id="KB967723" ref_url="http://support.microsoft.com/kb/967723"/>
                <reference source="CVE" ref_id="CVE-2008-4609" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4609"/>
                <reference source="CVE" ref_id="CVE-2009-1925" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1925"/>
                <reference source="CVE" ref_id="CVE-2009-1926" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1926"/>
                <description>Microsoft has released MS09-048 to address security issues in Windows Vista and Windows Server 2008 as documented by CVE-2008-4609, CVE-2009-1925, and CVE-2009-1926</description>
            </metadata>
            <criteria operator="OR">
                <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit, 64-bit, ia-64) - GDR">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
                    </criteria>
                    <criterion comment="Netevent.dll version is greater than or equal to 6.0.6001.18000" test_ref="oval:gov.nist.fdcc.patch:tst:115881"/>
                    <criterion comment="Netevent.dll version is less than 6.0.6001.18311" test_ref="oval:gov.nist.fdcc.patch:tst:115882"/>
                </criteria>
                <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit, 64-bit, ia-64) - LDR">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
                    </criteria>
                    <criterion comment="Netevent.dll version is greater than or equal to 6.0.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:115883"/>
                    <criterion comment="Netevent.dll version is less than 6.0.6001.22497" test_ref="oval:gov.nist.fdcc.patch:tst:115884"/>
                </criteria>
                <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - GDR">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11559"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11558"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11560"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11561"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11562"/>
                    </criteria>
                    <criterion comment="Netevent.dll version is greater than or equal to 6.0.6002.18000" test_ref="oval:gov.nist.fdcc.patch:tst:115885"/>
                    <criterion comment="Netevent.dll version is less than 6.0.6002.18091" test_ref="oval:gov.nist.fdcc.patch:tst:115886"/>
                </criteria>
                <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - LDR">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11559"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11558"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11560"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11561"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11562"/>
                    </criteria>
                    <criterion comment="Netevent.dll version is greater than or equal to 6.0.6002.22000" test_ref="oval:gov.nist.fdcc.patch:tst:115887"/>
                    <criterion comment="Netevent.dll version is less than 6.0.6002.22200" test_ref="oval:gov.nist.fdcc.patch:tst:115888"/>
                </criteria>
            </criteria>
        </definition>
        <definition id="oval:gov.nist.fdcc.patch:def:11589" version="1" class="patch">
            <metadata>
                <title>MS09-049: Vulnerability in Wireless LAN AutoConfig Service Could Allow Remote Code Execution (970710)</title>
                <affected family="windows">
                    <platform>Microsoft Windows Vista</platform>
                    <platform>Microsoft Windows Server 2008</platform>
                </affected>
                <reference source="Microsoft" ref_id="MS09-049" ref_url="http://www.microsoft.com/technet/security/bulletin/MS09-049.mspx"/>
                <reference source="Microsoft" ref_id="KB970710" ref_url="http://support.microsoft.com/kb/970710"/>
                <reference source="CVE" ref_id="CVE-2009-1132" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1132"/>
                <description>Microsoft has released MS09-049 to address security issues in Windows Vista and Windows Server 2008 as documented by CVE-2009-1132</description>
            </metadata>
            <criteria operator="OR">
                <criteria operator="AND" comment="Vista, Server 2008 SP1 (64-bit, ia-64) - GDR">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
                    </criteria>
                    <criterion comment="Wlanmsm.dll version is greater than or equal to 6.0.6001.18000" test_ref="oval:gov.nist.fdcc.patch:tst:115890"/>
                    <criterion comment="Wlanmsm.dll version is less than 6.0.6001.18288" test_ref="oval:gov.nist.fdcc.patch:tst:115892"/>
                </criteria>
                <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit, 64-bit, ia-64) - LDR">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
                    </criteria>
                    <criterion comment="Wlanmsm.dll version is greater than or equal to 6.0.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:115893"/>
                    <criterion comment="Wlanmsm.dll version is less than 6.0.6001.22468" test_ref="oval:gov.nist.fdcc.patch:tst:115894"/>
                </criteria>
                <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - GDR">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11559"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11558"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11560"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11561"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11562"/>
                    </criteria>
                    <criterion comment="Wlanmsm.dll version is greater than or equal to 6.0.6002.18000" test_ref="oval:gov.nist.fdcc.patch:tst:115895"/>
                    <criterion comment="Wlanmsm.dll version is less than 6.0.6002.18064" test_ref="oval:gov.nist.fdcc.patch:tst:115896"/>
                </criteria>
                <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - LDR">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11559"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11558"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11560"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11561"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11562"/>
                    </criteria>
                    <criterion comment="Wlanmsm.dll version is greater than or equal to 6.0.6002.22000" test_ref="oval:gov.nist.fdcc.patch:tst:115897"/>
                    <criterion comment="Wlanmsm.dll version is less than 6.0.6002.22170" test_ref="oval:gov.nist.fdcc.patch:tst:115898"/>
                </criteria>
            </criteria>
        </definition>
        <definition id="oval:gov.nist.fdcc.patch:def:11590" version="1" class="patch">
            <metadata>
                <title>MS09-056: Vulnerabilities in Windows CryptoAPI Could Allow Spoofing (974571)</title>
                <affected family="windows">
                    <platform>Microsoft Windows XP</platform>
                    <platform>Microsoft Windows Vista</platform>
                    <platform>Microsoft Windows Server 2008</platform>
                    <platform>Microsoft Windows 7</platform>
                    <platform>Microsoft Windows Server 2008 R2</platform>
                </affected>
                <reference source="Microsoft" ref_id="MS09-056" ref_url="http://www.microsoft.com/technet/security/bulletin/MS09-056.mspx"/>
                <reference source="Microsoft" ref_id="KB974571" ref_url="http://support.microsoft.com/kb/974571"/>
                <reference source="CVE" ref_id="CVE-2009-2510" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2510"/>
                <reference source="CVE" ref_id="CVE-2009-2511" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2511"/>
                <description>Microsoft has released MS09-056 to address security issues in Windows XP, Windows Vista, Windows Server 2008, and Windows 7 as documented by CVE-200-</description>
            </metadata>
            <criteria operator="OR">
                <criteria operator="AND" comment="XP (32-bit) SP2">
                    <extend_definition comment="Microsoft Windows XP (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115276"/>
                    <criterion comment="the version of msasn1.dll is less than 5.1.2600.3624" test_ref="oval:gov.nist.fdcc.patch:tst:1159000"/>
                </criteria>
                <criteria operator="AND" comment="XP (32-bit) SP3">
                    <extend_definition comment="Microsoft Windows XP (32-bit) SP3 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115278"/>
                    <criterion comment="the version of msasn1.dll is less than 5.1.2600.5875" test_ref="oval:gov.nist.fdcc.patch:tst:1159001"/>
                </criteria>
                <criteria operator="AND" comment="XP (64-bit) SP2">
                    <extend_definition comment="Microsoft Windows XP (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115277"/>
                    <criterion comment="the version of msasn1.dll is less than 5.2.3790.4584" test_ref="oval:gov.nist.fdcc.patch:tst:1159002"/>
                </criteria>
                <criteria operator="AND" comment="The OS is Windows Vista or Server 2008 (Gold, SP1, or SP2) and the GDR or LDR patch is installed">
                    <criteria operator="OR" comment="Either Windows Vista or Server 2008 is installed">
                        <extend_definition comment="Microsoft Windows Vista is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115289"/>
                        <extend_definition comment="Microsoft Windows Server 2008 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115290"/>
                    </criteria>
                    <criteria operator="OR" comment="The Gold, SP1, or SP2 GDR or LDR patch is installed">
                        <criteria operator="AND" comment="Vista, Server 2008 Gold (32-bit, 64-bit, ia-64) - GDR">
                            <!--<criterion comment="msasn1.dll version is greater than or equal to 6.0.6000.16000" test_ref="oval:gov.nist.fdcc.patch:tst:1159003"/>-->
                            <criterion comment="msasn1.dll version is less than to 6.0.6000.16922" test_ref="oval:gov.nist.fdcc.patch:tst:1159015"/>
                        </criteria>
                        <criteria operator="AND" comment="Vista, Server 2008 Gold (32-bit, 64-bit, ia-64) - LDR">
                            <criterion comment="msasn1.dll version is greater than or equal to 6.0.6000.20000" test_ref="oval:gov.nist.fdcc.patch:tst:1159016"/>
                            <criterion comment="msasn1.dll version is less than to 6.0.6000.21122" test_ref="oval:gov.nist.fdcc.patch:tst:1159017"/>
                        </criteria>
                        <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit, 64-bit, ia-64) - GDR">
                            <criterion comment="msasn1.dll version is greater than or equal to 6.0.6001.18000" test_ref="oval:gov.nist.fdcc.patch:tst:1159003"/>
                            <criterion comment="msasn1.dll version is less than to 6.0.6001.18326" test_ref="oval:gov.nist.fdcc.patch:tst:1159007"/>
                        </criteria>
                        <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit, 64-bit, ia-64) - LDR">
                            <criterion comment="msasn1.dll version is greater than or equal to 6.0.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1159004"/>
                            <criterion comment="msasn1.dll version is less than to 6.0.6001.22515" test_ref="oval:gov.nist.fdcc.patch:tst:1159008"/>
                        </criteria>
                        <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - GDR">
                            <criterion comment="msasn1.dll version is greater than or equal to 6.0.6002.18000" test_ref="oval:gov.nist.fdcc.patch:tst:1159005"/>
                            <criterion comment="msasn1.dll version is less than to 6.0.6002.18106" test_ref="oval:gov.nist.fdcc.patch:tst:1159009"/>
                        </criteria>
                        <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - LDR">
                            <criterion comment="msasn1.dll version is greater than or equal to 6.0.6002.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1159006"/>
                            <criterion comment="msasn1.dll version is less than to 6.0.6002.22218" test_ref="oval:gov.nist.fdcc.patch:tst:1159010"/>
                        </criteria>
                    </criteria>
                </criteria>
                <criteria operator="AND" comment="The OS is Windows 7 or Server 2008 R2 (Gold) and the  GDR or LDR patch is installed">
                    <criteria operator="OR" comment="Either Windows 7 or Server 2008 R2 is installed">
                        <extend_definition comment="Microsoft Windows Vista is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115289"/>
                        <extend_definition comment="Microsoft Windows Server 2008 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115290"/>
                    </criteria>
                    <criteria operator="OR" comment="The (Gold) GDR or LDR patch is installed">
                        <criteria operator="AND" comment="Vista, Server 2008 R2 (Gold) - GDR">
                            <criterion comment="msasn1.dll version is greater than or equal to 6.1.7600.16000" test_ref="oval:gov.nist.fdcc.patch:tst:1159011"/>
                            <criterion comment="msasn1.dll version is less than to 6.1.7600.16415" test_ref="oval:gov.nist.fdcc.patch:tst:1159013"/>
                        </criteria>
                        <criteria operator="AND" comment="Vista, Server 2008 R2 (Gold) - LDR">
                            <criterion comment="msasn1.dll version is greater than or equal to 6.1.7600.20000" test_ref="oval:gov.nist.fdcc.patch:tst:1159012"/>
                            <criterion comment="msasn1.dll version is less than to 6.1.7600.20518" test_ref="oval:gov.nist.fdcc.patch:tst:1159014"/>
                        </criteria>
                    </criteria>
                </criteria>
            </criteria>
        </definition>
        <definition id="oval:gov.nist.fdcc.patch:def:11592" version="1" class="patch">
            <metadata>
                <title>MS09-058: Vulnerabilities in Windows Kernel Could Allow Elevation of Privilege (971486)</title>
                <affected family="windows">
                    <platform>Microsoft Windows XP</platform>
                    <platform>Microsoft Windows Vista</platform>
                    <platform>Microsoft Windows Server 2008</platform>
                </affected>
                <reference source="Microsoft" ref_id="MS09-058" ref_url="http://www.microsoft.com/technet/security/bulletin/MS09-058.mspx"/>
                <reference source="Microsoft" ref_id="KB971486" ref_url="http://support.microsoft.com/kb/971486"/>
                <reference source="CVE" ref_id="CVE-2009-2515" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2515"/>
                <reference source="CVE" ref_id="CVE-2009-2516" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2516"/>
                <reference source="CVE" ref_id="CVE-2009-2517" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2517"/>
                <description>Microsoft has released MS09-058 to address security issues in Windows XP, Windows Vista, and Windows Server 2008 as documented by CVE-2009-2515, CVE-2009-2516, CVE-2009-2517</description>
            </metadata>
            <criteria operator="OR">
                <criteria operator="AND" comment="XP (32-bit) SP2">
                    <extend_definition comment="Microsoft Windows XP (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115276"/>
                    <criterion comment="the version of ntoskrnl.exe is less than 5.1.2600.3610" test_ref="oval:gov.nist.fdcc.patch:tst:1159200"/>
                </criteria>
                <criteria operator="AND" comment="XP (32-bit) SP3">
                    <extend_definition comment="Microsoft Windows XP (32-bit) SP3 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115278"/>
                    <criterion comment="the version of ntoskrnl.exe is less than 5.1.2600.5857" test_ref="oval:gov.nist.fdcc.patch:tst:1159201"/>
                </criteria>
                <criteria operator="AND" comment="XP (64-bit) SP2">
                    <extend_definition comment="Microsoft Windows XP (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115277"/>
                    <criterion comment="the version of ntoskrnl.exe is less than 5.2.3790.4566" test_ref="oval:gov.nist.fdcc.patch:tst:1159202"/>
                </criteria>
                <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit,64-bit, ia-64) - GDR">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
                    </criteria>
                    <criterion comment="ntoskrnl.exe version is greater than or equal to 6.0.6001.18000" test_ref="oval:gov.nist.fdcc.patch:tst:1159203"/>
                    <criterion comment="ntoskrnl.exe version is less than to 6.0.6001.18304" test_ref="oval:gov.nist.fdcc.patch:tst:1159207"/>
                </criteria>
                <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit, 64-bit, ia-64) - LDR">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
                    </criteria>
                    <criterion comment="ntoskrnl.exe version is greater than or equal to 6.0.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1159204"/>
                    <criterion comment="ntoskrnl.exe version is less than to 6.0.6001.22489" test_ref="oval:gov.nist.fdcc.patch:tst:1159208"/>
                </criteria>
                <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - GDR">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11559"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11558"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11560"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11561"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11562"/>
                    </criteria>
                    <criterion comment="ntoskrnl.exe version is greater than or equal to 6.0.6002.18000" test_ref="oval:gov.nist.fdcc.patch:tst:1159205"/>
                    <criterion comment="ntoskrnl.exe version is less than to 6.0.6002.18082" test_ref="oval:gov.nist.fdcc.patch:tst:1159209"/>
                </criteria>
                <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - LDR">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11559"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11558"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11560"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11561"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11562"/>
                    </criteria>
                    <criterion comment="ntoskrnl.exe version is greater than or equal to 6.0.6002.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1159206"/>
                    <criterion comment="ntoskrnl.exe version is less than to 6.0.6002.22191" test_ref="oval:gov.nist.fdcc.patch:tst:1159210"/>
                </criteria>
            </criteria>
        </definition>
        <definition id="oval:gov.nist.fdcc.patch:def:11593" version="1" class="patch">
            <metadata>
                <title>MS09-059: Vulnerability in Local Security Authority Subsystem Service Could Allow Denial of Service (975467)</title>
                <affected family="windows">
                    <platform>Microsoft Windows XP</platform>
                    <platform>Microsoft Windows Vista</platform>
                    <platform>Microsoft Windows Server 2008</platform>
                    <platform>Microsoft Windows 7</platform>
                    <platform>Microsoft Windows Server 2008 R2</platform>
                </affected>
                <reference source="Microsoft" ref_id="MS09-059" ref_url="http://www.microsoft.com/technet/security/bulletin/MS09-059.mspx"/>
                <reference source="Microsoft" ref_id="KB975467" ref_url="http://support.microsoft.com/kb/975467"/>
                <reference source="CVE" ref_id="CVE-2009-2524" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2524"/>
                <description>Microsoft has released MS09-059 to address security issues in Windows XP, Windows Vista, Windows Server 2008, and Windows 7 as documented by CVE-2009-2524</description>
            </metadata>
            <criteria operator="OR">
                <criteria operator="AND" comment="XP (32-bit) SP2">
                    <extend_definition comment="Microsoft Windows XP (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115276"/>
                    <criterion comment="the version of Msv1_0.dll is less than 5.1.2600.3625" test_ref="oval:gov.nist.fdcc.patch:tst:1159300"/>
                </criteria>
                <criteria operator="AND" comment="XP (32-bit) SP3">
                    <extend_definition comment="Microsoft Windows XP (32-bit) SP3 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115278"/>
                    <criterion comment="the version of Msv1_0.dll is less than 5.1.2600.5876" test_ref="oval:gov.nist.fdcc.patch:tst:1159301"/>
                </criteria>
                <criteria operator="AND" comment="XP (64-bit) SP2">
                    <extend_definition comment="Microsoft Windows XP (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115277"/>
                    <criterion comment="the version of Msv1_0.dll is less than 5.2.3790.4587" test_ref="oval:gov.nist.fdcc.patch:tst:1159302"/>
                </criteria>
                <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit,64-bit, ia-64) - GDR">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
                    </criteria>
                    <criterion comment="Msv1_0.dll version is greater than or equal to 6.0.6001.18000" test_ref="oval:gov.nist.fdcc.patch:tst:1159303"/>
                    <criterion comment="Msv1_0.dll version is less than to 6.0.6001.18330" test_ref="oval:gov.nist.fdcc.patch:tst:1159307"/>
                </criteria>
                <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit, 64-bit, ia-64) - LDR">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
                    </criteria>
                    <criterion comment="Msv1_0.dll version is greater than or equal to 6.0.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1159304"/>
                    <criterion comment="Msv1_0.dll version is less than to 6.0.6001.22518" test_ref="oval:gov.nist.fdcc.patch:tst:1159308"/>
                </criteria>
                <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - GDR">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11559"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11558"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11560"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11561"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11562"/>
                    </criteria>
                    <criterion comment="Msv1_0.dll version is greater than or equal to 6.0.6002.18000" test_ref="oval:gov.nist.fdcc.patch:tst:1159305"/>
                    <criterion comment="Msv1_0.dll version is less than to 6.0.6002.18111" test_ref="oval:gov.nist.fdcc.patch:tst:1159309"/>
                </criteria>
                <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - LDR">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11559"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11558"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11560"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11561"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11562"/>
                    </criteria>
                    <criterion comment="Msv1_0.dll version is greater than or equal to 6.0.6002.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1159306"/>
                    <criterion comment="Msv1_0.dll version is less than to 6.0.6002.22223" test_ref="oval:gov.nist.fdcc.patch:tst:1159310"/>
                </criteria>
                <criteria operator="AND" comment="7, Server 2008 R2 (32-bit, 64-bit, ia-64) - GDR">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows 7 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:6165"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) R2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115286"/>
                        <extend_definition comment="Microsoft Windows 7 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5950"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) R2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115287"/>
                        <extend_definition comment="Microsoft Windows 7 (ia-64) is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115281"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) R2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115288"/>
                    </criteria>
                    <criterion comment="Msv1_0.dll version is greater than or equal to 6.1.7600.16000" test_ref="oval:gov.nist.fdcc.patch:tst:1159311"/>
                    <criterion comment="Msv1_0.dll version is less than to 6.1.7600.16420" test_ref="oval:gov.nist.fdcc.patch:tst:1159313"/>
                </criteria>
                <criteria operator="AND" comment="7, Server 2008 R2 (32-bit, 64-bit, ia-64) - LDR">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows 7 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:6165"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) R2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115286"/>
                        <extend_definition comment="Microsoft Windows 7 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5950"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) R2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115287"/>
                        <extend_definition comment="Microsoft Windows 7 (ia-64) is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115281"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) R2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115288"/>
                    </criteria>
                    <criterion comment="Msv1_0.dll version is greater than or equal to 6.1.7600.20000" test_ref="oval:gov.nist.fdcc.patch:tst:1159312"/>
                    <criterion comment="Msv1_0.dll version is less than to 6.1.7600.20524" test_ref="oval:gov.nist.fdcc.patch:tst:1159314"/>
                </criteria>
            </criteria>
        </definition>
        <definition id="oval:gov.nist.fdcc.patch:def:11594" version="1" class="patch">
            <metadata>
                <title>MS09-061: Vulnerabilities in the Microsoft .NET Common Language Runtime Could Allow Remote Code Execution (974378)</title>
                <affected family="windows">
                    <platform>Microsoft Windows XP</platform>
                    <platform>Microsoft Windows Vista</platform>
                    <platform>Microsoft Windows Server 2008</platform>
                    <platform>Microsoft Windows 7</platform>
                    <platform>Microsoft Windows Server 2008 R2</platform>
                </affected>
                <reference source="Microsoft" ref_id="MS09-061" ref_url="http://www.microsoft.com/technet/security/bulletin/MS09-061.mspx"/>
                <reference source="Microsoft" ref_id="KB974378" ref_url="http://support.microsoft.com/kb/974378"/>
                <reference source="CVE" ref_id="CVE-2009-0090" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0090"/>
                <reference source="CVE" ref_id="CVE-2009-0091" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0091"/>
                <reference source="CVE" ref_id="CVE-2009-2497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2497"/>
                <description>Microsoft has released MS09-061 to address security issues in Microsoft .NET Framework on Microsoft Windows XP, Windows Vista, Windows 7, Windows Server 2008, and Windows Server 2008 R2 as documented by CVE-2009-0090, CVE-2009-0091, and CVE-2009-2497</description>
            </metadata>
            <criteria operator="OR">
                <criteria operator="AND" comment="(vista sp1/2 (32/64) OR 2008 RTM/sp2 (32/64) OR xp sp2/3 OR xp x64 sp2 OR 7 OR 2008 R2) AND .net 1.1 sp1">
                    <criteria operator="OR" comment="vista sp1/2 (32/64) OR 2008 RTM/sp2 (32/64) OR xp sp2/3 OR xp x64 sp2 OR 7 OR 2008 R2">
                        <extend_definition comment="Microsoft Windows XP (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115276"/>
                        <extend_definition comment="Microsoft Windows XP (32-bit) SP3 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115278"/>
                        <extend_definition comment="Microsoft Windows XP (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115277"/>
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11559"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11558"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11560"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11561"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11562"/>
                        <extend_definition comment="Microsoft Windows 7 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:6165"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) R2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115286"/>
                        <extend_definition comment="Microsoft Windows 7 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5950"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) R2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115287"/>
                        <extend_definition comment="Microsoft Windows 7 (ia-64) is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115281"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) R2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115288"/>
                    </criteria>
                    <extend_definition comment="Microsoft .NET Framework 1.1 Service Pack 1, or later, is Installed" definition_ref="oval:gov.nist.fdcc.patch:def:115285"/>
                    <criterion comment="the version of mscorlib.dll is less than 1.1.4322.2443" test_ref="oval:gov.nist.fdcc.patch:tst:1159400"/>
                </criteria>
                <criteria operator="AND" comment="(vista sp1 (32/64) OR 2008 RTM (32/64)) AND .net 2.0 sp1">
                    <criteria operator="OR" comment="vista sp1 (32/64) OR 2008 RTM (32/64)">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
                    </criteria>
                    <extend_definition comment="Microsoft .NET Framework 2.0 Service Pack 1 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11580"/>
                    <criterion comment="mscorlib..dll version is less than to 2.0.50727.1873" test_ref="oval:gov.nist.fdcc.patch:tst:1159401"/>
                </criteria>
                <criteria operator="AND" comment="(xp sp3 OR xp x64 sp2) AND .net 2.0 sp1 OR .net 3.5">
                    <criteria operator="OR" comment="xp sp3 OR xp x64 sp2">
                        <extend_definition comment="Microsoft Windows XP (32-bit) SP3 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115278"/>
                        <extend_definition comment="Microsoft Windows XP (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115277"/>
                    </criteria>
                    <criteria operator="OR" comment=".net 2.0 sp1 OR .net 3.5">
                        <extend_definition comment="Microsoft .NET Framework 2.0 Service Pack 1 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11580"/>
                        <extend_definition comment="Microsoft .NET Framework 3.5 (Gold) is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11582"/>
                    </criteria>
                    <criterion comment="the version of mscorlib.dll is less than 2.0.50727.1873" test_ref="oval:gov.nist.fdcc.patch:tst:1159401"/>
                </criteria>
                <criteria operator="OR" comment="(vista sp1 (32/64) OR 2008 RTM (32/64) OR xp sp2/3 OR xp x64 sp2) AND .net 2.0 sp2 OR 3.5 sp1">
                    <criteria operator="AND" comment="xp sp2/3 OR xp x64 sp2 AND mscorlib.dll version is less than 2.0.50727.3603">
                        <criteria operator="OR" comment="xp sp2/3 OR xp x64 sp2">
                            <extend_definition comment="Microsoft Windows XP (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115276"/>
                            <extend_definition comment="Microsoft Windows XP (32-bit) SP3 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115278"/>
                            <extend_definition comment="Microsoft Windows XP (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115277"/>
                        </criteria>
                        <criteria operator="OR" comment=".net 2.0 sp2 OR 3.5 sp1">
                            <extend_definition comment="Microsoft .NET Framework 2.0 Service Pack 2, or later, is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11581"/>
                            <extend_definition comment="Microsoft .NET Framework 3.5 Service Pack 1, or later, is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11583"/>
                        </criteria>
                        <criterion comment="the version of mscorlib.dll is less than 2.0.50727.3603" test_ref="oval:gov.nist.fdcc.patch:tst:1159402"/>
                    </criteria>
                    <criteria operator="AND" comment="vista sp1 (32/64) OR 2008 RTM (32/64) AND  the GDR or LDR update has been applied">
                        <criteria operator="OR" comment="vista sp1 (32/64) OR 2008 RTM (32/64)">
                            <extend_definition comment="Microsoft Windows Vista (32-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                            <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                            <extend_definition comment="Microsoft Windows Vista (64-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                            <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                            <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
                        </criteria>
                        <criteria operator="OR" comment=".net 2.0 sp2 OR 3.5 sp1">
                            <extend_definition comment="Microsoft .NET Framework 2.0 Service Pack 2, or later, is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11581"/>
                            <extend_definition comment="Microsoft .NET Framework 3.5 Service Pack 1, or later, is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11583"/>
                        </criteria>
                        <criteria operator="OR" comment="GDR or LDR update has been applied">
                            <criterion comment="the version of mscorlib.dll is less than 2.0.50727.3603" test_ref="oval:gov.nist.fdcc.patch:tst:1159402"/>
                            <criteria operator="AND" comment="LDR">
                                <criterion comment="the version of mscorlib.dll version is greater than or equal to 2.0.50727.4000" test_ref="oval:gov.nist.fdcc.patch:tst:1159403"/>
                                <criterion comment="the version of mscorlib.dll is less than 2.0.50727.4062" test_ref="oval:gov.nist.fdcc.patch:tst:1159404"/>
                            </criteria>
                        </criteria>
                    </criteria>
                </criteria>
                <criteria operator="AND" comment="(vista sp2 (32/64) OR 2008 sp2 (32/64)) AND .net 2.0 sp2">
                    <criteria operator="OR" comment="vista sp2 (32/64) OR 2008 sp2 (32/64)">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11559"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11558"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11560"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11561"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11562"/>
                    </criteria>
                    <criteria operator="OR" comment="GDR or LDR update has been applied">
                        <criterion comment="the version of mscorlib.dll is less than 2.0.50727.4200" test_ref="oval:gov.nist.fdcc.patch:tst:1159405"/>
                        <criteria operator="AND" comment="LDR">
                            <criterion comment="the version of mscorlib.dll version is greater than or equal to 2.0.50727.4300" test_ref="oval:gov.nist.fdcc.patch:tst:1159406"/>
                            <criterion comment="the version of mscorlib.dll is less than 2.0.50727.4400" test_ref="oval:gov.nist.fdcc.patch:tst:1159407"/>
                        </criteria>
                    </criteria>
                    <extend_definition comment="Microsoft .NET Framework 2.0 Service Pack 2, or later, is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11581"/>
                </criteria>
            </criteria>
        </definition>
        <definition id="oval:gov.nist.fdcc.patch:def:11595" version="2" class="patch">
            <metadata>
                <title>MS09-062: Vulnerabilities in GDI+ Could Allow Remote Code Execution (957488)</title>
                <affected family="windows">
                    <platform>Microsoft Windows XP</platform>
                    <platform>Microsoft Windows Vista</platform>
                    <platform>Microsoft Windows Server 2008</platform>
                </affected>
                <reference source="Microsoft" ref_id="MS09-062" ref_url="http://www.microsoft.com/technet/security/bulletin/MS09-062.mspx"/>
                <reference source="Microsoft" ref_id="kb957488" ref_url="http://support.microsoft.com/kb/957488"/>
                <reference source="CVE" ref_id="CVE-2009-2500" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2500"/>
                <reference source="CVE" ref_id="CVE-2009-2501" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2501"/>
                <reference source="CVE" ref_id="CVE-2009-2502" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2502"/>
                <reference source="CVE" ref_id="CVE-2009-2503" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2503"/>
                <reference source="CVE" ref_id="CVE-2009-2504" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2504"/>
                <reference source="CVE" ref_id="CVE-2009-2504" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2518"/>
                <reference source="CVE" ref_id="CVE-2009-2504" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2528"/>
                <reference source="CVE" ref_id="CVE-2009-2504" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3126"/>
                <description>Microsoft has released MS09-062 to address security issues in Windows XP; Windows Vista and Windows Vista Service Pack 1; Windows Vista x64 Edition and Windows Vista x64 Edition Service Pack 1; Windows Server 2008 for 32-bit Systems, Windows Server 2008 for x64-based Systems, and Windows Server 2008 for Itanium-based Systems as documented by CVE-2009-2500, CVE-2009-2501, CVE-2009-2502, CVE-2009-2503, CVE-2009-2504, CVE-2009-2518, CVE-2009-2528, and CVE-2009-3126</description>
            </metadata>
            <criteria operator="OR">
                <criteria operator="AND" comment="XP SP2/SP3 (32-bit/64-bit)">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows XP (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115276"/>
                        <extend_definition comment="Microsoft Windows XP (32-bit) SP3 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115278"/>
                        <extend_definition comment="Microsoft Windows XP (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115277"/>
                    </criteria>
                    <criterion comment="the version of gdiplus.dll is less than 5.2.6001.22319" test_ref="oval:gov.nist.fdcc.patch:tst:1159503"/>
                </criteria>
                <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit,64-bit, ia-64) - GDR">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
                    </criteria>
                    <criterion comment="gdiplus.dll version is greater than or equal to 5.2.6001.18000" test_ref="oval:gov.nist.fdcc.patch:tst:1159500"/>
                    <criterion comment="gdiplus.dll version is less than to 5.2.6001.18175" test_ref="oval:gov.nist.fdcc.patch:tst:1159502"/>
                </criteria>
                <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit, 64-bit, ia-64) - LDR">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
                    </criteria>
                    <criterion comment="gdiplus.dll version is greater than or equal to 5.2.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1159501"/>
                    <criterion comment="gdiplus.dll version is less than to 5.2.6001.22319" test_ref="oval:gov.nist.fdcc.patch:tst:1159503"/>
                </criteria>
            </criteria>
        </definition>
        <definition id="oval:gov.nist.fdcc.patch:def:11600" version="1" class="patch">
            <metadata>
                <title>MS09-050: Vulnerabilities in SMBv2 Could Allow Remote Code Execution (975517)</title>
                <affected family="windows">
                    <platform>Microsoft Windows Vista</platform>
                    <platform>Microsoft Windows Server 2008</platform>
                </affected>
                <reference source="Microsoft" ref_id="MS09-050" ref_url="http://www.microsoft.com/technet/security/bulletin/MS09-05-.mspx"/>
                <reference source="Microsoft" ref_id="KB975517" ref_url="http://support.microsoft.com/kb/975517"/>
                <reference source="CVE" ref_id="CVE-2009-1545" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2526"/>
                <reference source="CVE" ref_id="CVE-2009-1546" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2532"/>
                <reference source="CVE" ref_id="CVE-2009-1546" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3103"/>
                <description>Microsoft has released MS09-050 to address security issues in Windows Vista and Windows Server 2008 as documented by CVE-2009-2526, CVE-2009-2532, and CVE-2009-3103</description>
            </metadata>
            <criteria operator="OR">
                <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit, 64-bit, ia-64) - GDR">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
                    </criteria>
                    <criterion comment="Srv2.sys version is greater than or equal to 6.0.6001.18000" test_ref="oval:gov.nist.fdcc.patch:tst:116001"/>
                    <criterion comment="Srv2.sys version is less than 6.0.6001.18331" test_ref="oval:gov.nist.fdcc.patch:tst:116002"/>
                </criteria>
                <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit, 64-bit, ia-64) - LDR">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
                    </criteria>
                    <criterion comment="Srv2.sys version is greater than or equal to 6.0.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:116003"/>
                    <criterion comment="Srv2.sys version is less than 6.0.6001.22522" test_ref="oval:gov.nist.fdcc.patch:tst:116004"/>
                </criteria>
                <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - GDR">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11559"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11558"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11560"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11561"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11562"/>
                    </criteria>
                    <criterion comment="Srv2.sys version is greater than or equal to 6.0.6002.18000" test_ref="oval:gov.nist.fdcc.patch:tst:116005"/>
                    <criterion comment="Srv2.sys version is less than 6.0.6002.18112" test_ref="oval:gov.nist.fdcc.patch:tst:116006"/>
                </criteria>
                <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - LDR">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11559"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11558"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11560"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11561"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11562"/>
                    </criteria>
                    <criterion comment="Srv2.sys version is greater than or equal to 6.0.6002.22000" test_ref="oval:gov.nist.fdcc.patch:tst:116007"/>
                    <criterion comment="Srv2.sys version is less than 6.0.6002.22225" test_ref="oval:gov.nist.fdcc.patch:tst:116008"/>
                </criteria>
            </criteria>
        </definition>
        <definition id="oval:gov.nist.fdcc.patch:def:11601" version="1" class="patch">
            <metadata>
                <title>MS09-051: Vulnerabilities in Windows Media Runtime Could Allow Remote Code Execution (975682)</title>
                <affected family="windows">
                    <platform>Microsoft Windows XP</platform>
                    <platform>Microsoft Windows Vista</platform>
                    <platform>Microsoft Windows Server 2008</platform>
                </affected>
                <reference source="Microsoft" ref_id="MS09-051" ref_url="http://www.microsoft.com/technet/security/bulletin/MS09-051.mspx"/>
                <reference source="Microsoft" ref_id="KB975682" ref_url="http://support.microsoft.com/kb/975682"/>
                <reference source="CVE" ref_id="CVE-2009-0555" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0555"/>
                <reference source="CVE" ref_id="CVE-2009-2525" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2525"/>
                <description>Microsoft has released MS09-051 to address security issues in Windows XP, Windows Vista, and Windows Server 2008 as documented by CVE-2009-0555 and CVE-2009-2525</description>
            </metadata>
            <criteria operator="OR">
                <criteria operator="AND">
                    <extend_definition comment="Microsoft Windows XP (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115276"/>
                    <extend_definition comment="Windows Media Player v9.0 is installed." definition_ref="oval:gov.nist.fdcc.patch:def:115231"/>
                    <criterion comment="the version of wmspdmod.dll is less than 9.0.0.3269" test_ref="oval:gov.nist.fdcc.patch:tst:116010"/>
                </criteria>
                <criteria operator="AND">
                    <extend_definition comment="Microsoft Windows XP (32-bit) SP3 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115278"/>
                    <extend_definition comment="Windows Media Player v9.0 is installed." definition_ref="oval:gov.nist.fdcc.patch:def:115231"/>
                    <criterion comment="the version of wmspdmod.dll is less than 9.0.0.4505" test_ref="oval:gov.nist.fdcc.patch:tst:116011"/>
                </criteria>
                <criteria operator="AND">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows XP (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115276"/>
                        <extend_definition comment="Microsoft Windows XP (32-bit) SP3 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115278"/>
                    </criteria>
                    <extend_definition comment="Windows Media Player v10.0 is installed." definition_ref="oval:gov.nist.fdcc.patch:def:115232"/>
                    <criterion comment="the version of wmspdmod.dll is less than 10.0.0.3704" test_ref="oval:gov.nist.fdcc.patch:tst:116012"/>
                </criteria>
                <criteria operator="AND">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows XP (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115276"/>
                        <extend_definition comment="Microsoft Windows XP (32-bit) SP3 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115278"/>
                    </criteria>
                    <extend_definition comment="Windows Media Player v10.0 is installed." definition_ref="oval:gov.nist.fdcc.patch:def:115232"/>
                    <criterion comment="wmspdmod.dll version is greater than or equal to 10.0.0.4000" test_ref="oval:gov.nist.fdcc.patch:tst:116013"/>
                    <criterion comment="the version of wmspdmod.dll is less than 10.0.0.4070" test_ref="oval:gov.nist.fdcc.patch:tst:116014"/>
                </criteria>
                <criteria operator="AND">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows XP (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115276"/>
                        <extend_definition comment="Microsoft Windows XP (32-bit) SP3 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115278"/>
                    </criteria>
                    <extend_definition comment="Windows Media Player v10.0 is installed." definition_ref="oval:gov.nist.fdcc.patch:def:115232"/>
                    <criterion comment="wmspdmod.dll version is greater than or equal to 10.0.0.4300" test_ref="oval:gov.nist.fdcc.patch:tst:116015"/>
                    <criterion comment="the version of wmspdmod.dll is less than 10.0.0.4365" test_ref="oval:gov.nist.fdcc.patch:tst:116016"/>
                </criteria>
                <criteria operator="AND">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows XP (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115276"/>
                        <extend_definition comment="Microsoft Windows XP (32-bit) SP3 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115278"/>
                    </criteria>
                    <extend_definition comment="Windows Media Player v11.0 is installed." definition_ref="oval:gov.nist.fdcc.patch:def:115233"/>
                    <criterion comment="the version of wmspdmod.dll is less than 11.0.5721.5263" test_ref="oval:gov.nist.fdcc.patch:tst:116017"/>
                </criteria>
                <criteria operator="AND">
                    <extend_definition comment="Microsoft Windows XP (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115277"/>
                    <extend_definition comment="Windows Media Player v10.0 is installed." definition_ref="oval:gov.nist.fdcc.patch:def:115232"/>
                    <criterion comment="the version of wmspdmod.dll is less than 10.0.0.3819" test_ref="oval:gov.nist.fdcc.patch:tst:116018"/>
                </criteria>
                <criteria operator="AND">
                    <extend_definition comment="Microsoft Windows XP (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115277"/>
                    <extend_definition comment="Windows Media Player v10.0 is installed." definition_ref="oval:gov.nist.fdcc.patch:def:115232"/>
                    <criterion comment="wmspdmod.dll version is greater than or equal to 10.0.0.4000" test_ref="oval:gov.nist.fdcc.patch:tst:116019"/>
                    <criterion comment="the version of wmspdmod.dll is less than 10.0.0.4004" test_ref="oval:gov.nist.fdcc.patch:tst:1160101"/>
                </criteria>
                <criteria operator="AND">
                    <extend_definition comment="Microsoft Windows XP (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115277"/>
                    <extend_definition comment="Windows Media Player v11.0 is installed." definition_ref="oval:gov.nist.fdcc.patch:def:115233"/>
                    <criterion comment="wmspdmod.dll version is less than 11.0.5721.5263" test_ref="oval:gov.nist.fdcc.patch:tst:1160102"/>
                </criteria>
                <criteria operator="AND">
                    <extend_definition comment="Microsoft Windows XP is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115275"/>
                    <criterion comment="msaud32.acm version is less than 8.0.0.4502" test_ref="oval:gov.nist.fdcc.patch:tst:1160110"/>
                </criteria>
                <criteria operator="AND" comment="The OS is Windows Vista or Server 2008 (Gold, SP1, or SP2) and the GDR or LDR patch is installed">
                    <criteria operator="OR" comment="Either Windows Vista or Server 2008 is installed">
                        <extend_definition comment="Microsoft Windows Vista is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115289"/>
                        <extend_definition comment="Microsoft Windows Server 2008 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115290"/>
                    </criteria>
                    <criteria operator="OR" comment="The Gold, SP1, or SP2 GDR or LDR patch is installed">
                        <criteria operator="AND" comment="Vista, Server 2008 Gold (32-bit, 64-bit, ia-64) - GDR">
                            <criterion comment="wmspdmod.dll version is less than 11.0.6000.6350" test_ref="oval:gov.nist.fdcc.patch:tst:1160111"/>
                        </criteria>
                        <criteria operator="AND" comment="Vista, Server 2008 Gold (32-bit, 64-bit, ia-64) - LDR">
                            <criterion comment="wmspdmod.dll version is greater than or equal to 11.0.6000.6500" test_ref="oval:gov.nist.fdcc.patch:tst:1160112"/>
                            <criterion comment="wmspdmod.dll version is less than 11.0.6000.6509" test_ref="oval:gov.nist.fdcc.patch:tst:1160113"/>
                        </criteria>
                        <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit, 64-bit, ia-64) - GDR">
                            <criterion comment="wmspdmod.dll version is greater than or equal to 11.0.6001.7000" test_ref="oval:gov.nist.fdcc.patch:tst:1160103"/>
                            <criterion comment="wmspdmod.dll version is less than 11.0.6001.7005" test_ref="oval:gov.nist.fdcc.patch:tst:1160104"/>
                        </criteria>
                        <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit, 64-bit, ia-64) - LDR">
                            <criterion comment="wmspdmod.dll version is greater than or equal to 11.0.6001.7100" test_ref="oval:gov.nist.fdcc.patch:tst:1160105"/>
                            <criterion comment="wmspdmod.dll version is less than 11.0.6001.7111" test_ref="oval:gov.nist.fdcc.patch:tst:1160106"/>
                        </criteria>
                        <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - GDR">
                            <criterion comment="wmspdmod.dll version is greater than or equal to 11.0.6002.18000" test_ref="oval:gov.nist.fdcc.patch:tst:1160107"/>
                            <criterion comment="wmspdmod.dll version is less than 11.0.6002.18034" test_ref="oval:gov.nist.fdcc.patch:tst:1160108"/>
                        </criteria>
                        <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - LDR">
                            <criterion comment="wmspdmod.dll version is greater than or equal to 11.0.6002.22000" test_ref="oval:gov.nist.fdcc.patch:tst:1160109"/>
                            <criterion comment="wmspdmod.dll version is less than 11.0.6002.22131" test_ref="oval:gov.nist.fdcc.patch:tst:1160100"/>
                        </criteria>
                    </criteria>
                </criteria>
            </criteria>
        </definition>
        <definition id="oval:gov.nist.fdcc.patch:def:11602" version="1" class="patch">
            <metadata>
                <title>MS09-053: Vulnerabilities in FTP Service for Internet Information Services Could Allow Remote Code Execution (975254)</title>
                <affected family="windows">
                    <platform>Microsoft Windows XP</platform>
                    <platform>Microsoft Windows Vista</platform>
                    <platform>Microsoft Windows Server 2008</platform>
                </affected>
                <reference source="Microsoft" ref_id="MS09-053" ref_url="http://www.microsoft.com/technet/security/bulletin/MS09-053.mspx"/>
                <reference source="Microsoft" ref_id="KB975254" ref_url="http://support.microsoft.com/kb/975254"/>
                <reference source="CVE" ref_id="CVE-2009-2521" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2521"/>
                <reference source="CVE" ref_id="CVE-2009-3023" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3023"/>
                <description>Microsoft has released MS09-053 to address security issues in Windows XP, Windows Vista, and Windows Server 2008 as documented by CVE-2009-2521 and CVE-2009-3023</description>
            </metadata>
            <criteria operator="OR">
                <criteria operator="AND">
                    <extend_definition comment="Microsoft Windows XP (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115276"/>
                    <criterion comment="The FTP component is installed" test_ref="oval:gov.nist.fdcc.patch:tst:4600002"/>
                    <criterion comment="ftpsvc2.dll version is less than 6.0.2600.3624" test_ref="oval:gov.nist.fdcc.patch:tst:116020"/>
                </criteria>
                <criteria operator="AND">
                    <extend_definition comment="Microsoft Windows XP (32-bit) SP3 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115278"/>
                    <criterion comment="The FTP component is installed" test_ref="oval:gov.nist.fdcc.patch:tst:4600002"/>
                    <criterion comment="ftpsvc2.dll version is less than  6.0.2600.5875" test_ref="oval:gov.nist.fdcc.patch:tst:116021"/>
                </criteria>
                <criteria operator="AND">
                    <extend_definition comment="Microsoft Windows XP (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115277"/>
                    <criterion comment="ftpsvc2.dll version is less than 6.0.3790.4584  " test_ref="oval:gov.nist.fdcc.patch:tst:116022"/>
                </criteria>
                <criteria operator="AND" comment="The OS is Windows Vista or Server 2008 (Gold, SP1, or SP2) and the GDR or LDR patch is installed">
                    <criteria operator="OR" comment="Either Windows Vista or Server 2008 is installed">
                        <extend_definition comment="Microsoft Windows Vista is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115289"/>
                        <extend_definition comment="Microsoft Windows Server 2008 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115290"/>
                    </criteria>
                    <criteria operator="OR" comment="The Gold, SP1, or SP2 GDR or LDR patch is installed">
                        <criteria operator="AND" comment="Vista, Server 2008 Gold (32-bit, 64-bit, ia-64) - GDR">
                            <criterion comment="ftpsvc2.dll version is greater than or equal to 7.0.6000.16000" test_ref="oval:gov.nist.fdcc.patch:tst:1160201"/>
                            <criterion comment="ftpsvc2.dll version is less than 7.0.6000.16923" test_ref="oval:gov.nist.fdcc.patch:tst:1160202"/>
                        </criteria>
                        <criteria operator="AND" comment="Vista, Server 2008 Gold (32-bit, 64-bit, ia-64) - LDR">
                            <criterion comment="ftpsvc2.dll version is greater than or equal to 7.0.6000.20000" test_ref="oval:gov.nist.fdcc.patch:tst:1160203"/>
                            <criterion comment="ftpsvc2.dll version is less than 7.0.6000.21123" test_ref="oval:gov.nist.fdcc.patch:tst:1160204"/>
                        </criteria>
                        <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit, 64-bit, ia-64) - GDR">
                            <criterion comment="ftpsvc2.dll version is greater than or equal to 7.0.6001.18000" test_ref="oval:gov.nist.fdcc.patch:tst:116023"/>
                            <criterion comment="ftpsvc2.dll version is less than 7.0.6001.18327" test_ref="oval:gov.nist.fdcc.patch:tst:116024"/>
                        </criteria>
                        <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit, 64-bit, ia-64) - LDR">
                            <criterion comment="ftpsvc2.dll version is greater than or equal to 7.0.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:116025"/>
                            <criterion comment="ftpsvc2.dll version is less than 7.0.6001.22516" test_ref="oval:gov.nist.fdcc.patch:tst:116026"/>
                        </criteria>
                        <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - GDR">
                            <criterion comment="ftpsvc2.dll version is greater than or equal to 7.0.6002.18000" test_ref="oval:gov.nist.fdcc.patch:tst:116027"/>
                            <criterion comment="ftpsvc2.dll version is less than 7.0.6002.18107" test_ref="oval:gov.nist.fdcc.patch:tst:116028"/>
                        </criteria>
                        <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - LDR">
                            <criterion comment="ftpsvc2.dll version is greater than or equal to 7.0.6002.22000" test_ref="oval:gov.nist.fdcc.patch:tst:116029"/>
                            <criterion comment="ftpsvc2.dll version is less than 7.0.6002.22219" test_ref="oval:gov.nist.fdcc.patch:tst:1160200"/>
                        </criteria>
                    </criteria>
                </criteria>
            </criteria>
        </definition>
        <definition id="oval:gov.nist.fdcc.patch:def:11620" version="1" class="patch">
            <metadata>
                <title>MS09-063: Vulnerability in Web Services on Devices API Could Allow Remote Code Execution (973565)</title>
                <affected family="windows">
                    <platform>Microsoft Windows Vista</platform>
                    <platform>Microsoft Windows Server 2008</platform>
                </affected>
                <reference source="Microsoft" ref_id="MS09-063" ref_url="http://www.microsoft.com/technet/security/bulletin/MS09-063.mspx"/>
                <reference source="Microsoft" ref_id="KB973565" ref_url="http://support.microsoft.com/kb/973565"/>
                <reference source="CVE" ref_id="CVE-2009-2512" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2512"/>
                <description>Microsoft has released MS09-063 to address security issues in Windows Vista and Windows Server 2008 as documented by CVE-2009-2512</description>
            </metadata>
            <criteria operator="OR">
                <criteria operator="AND" comment="Vista, Server 2008 SP1 (64-bit, ia-64) - GDR">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
                    </criteria>
                    <criterion comment="Wsdapi.dll version is greater than or equal to 6.0.6001.18000" test_ref="oval:gov.nist.fdcc.patch:tst:116200"/>
                    <criterion comment="Wsdapi.dll version is less than 6.0.6001.18306" test_ref="oval:gov.nist.fdcc.patch:tst:116201"/>
                </criteria>
                <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit, 64-bit, ia-64) - LDR">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
                    </criteria>
                    <criterion comment="Wsdapi.dll version is greater than or equal to 6.0.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:116202"/>
                    <criterion comment="Wsdapi.dll version is less than 6.0.6001.22491" test_ref="oval:gov.nist.fdcc.patch:tst:116203"/>
                </criteria>
                <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - GDR">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11559"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11558"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11560"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11561"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11562"/>
                    </criteria>
                    <criterion comment="Wsdapi.dll version is greater than or equal to 6.0.6002.18000" test_ref="oval:gov.nist.fdcc.patch:tst:116204"/>
                    <criterion comment="Wsdapi.dll version is less than 6.0.6002.18085" test_ref="oval:gov.nist.fdcc.patch:tst:116205"/>
                </criteria>
                <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - LDR">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11559"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11558"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11560"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11561"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11562"/>
                    </criteria>
                    <criterion comment="Wsdapi.dll version is greater than or equal to 6.0.6002.22000" test_ref="oval:gov.nist.fdcc.patch:tst:116206"/>
                    <criterion comment="Wsdapi.dll version is less than 6.0.6002.22194" test_ref="oval:gov.nist.fdcc.patch:tst:116207"/>
                </criteria>
            </criteria>
        </definition>
        <definition id="oval:gov.nist.fdcc.patch:def:11621" version="1" class="patch">
            <metadata>
                <title>MS09-065: Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Remote Code Execution (969947)</title>
                <affected family="windows">
                    <platform>Microsoft Windows XP</platform>
                    <platform>Microsoft Windows Vista</platform>
                    <platform>Microsoft Windows Server 2008</platform>
                </affected>
                <reference source="Microsoft" ref_id="MS09-065" ref_url="http://www.microsoft.com/technet/security/bulletin/MS09-065.mspx"/>
                <reference source="Microsoft" ref_id="KB969947" ref_url="http://support.microsoft.com/kb/969947"/>
                <reference source="CVE" ref_id="CVE-2009-1127" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1127"/>
                <reference source="CVE" ref_id="CVE-2009-2513" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2513"/>
                <reference source="CVE" ref_id="CVE-2009-2514" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2514"/>
                <description>Microsoft has released MS09-065 to address security issues in Windows XP, Windows Vista, and Windows Server 2008 as documented by CVE-2009-1127, CVE-2009-2513, and CVE-2009-2514</description>
            </metadata>
            <criteria operator="OR">
                <criteria operator="AND" comment="XP (32-bit) SP2">
                    <extend_definition comment="Microsoft Windows XP (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115276"/>
                    <criterion comment="the version of Win32k.sys is less than 5.1.2600.3614" test_ref="oval:gov.nist.fdcc.patch:tst:116210"/>
                </criteria>
                <criteria operator="AND" comment="XP (32-bit) SP3">
                    <extend_definition comment="Microsoft Windows XP (32-bit) SP3 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115278"/>
                    <criterion comment="the version of Win32k.sys is less than 5.1.2600.5863" test_ref="oval:gov.nist.fdcc.patch:tst:116211"/>
                </criteria>
                <criteria operator="AND" comment="XP (64-bit) SP2">
                    <extend_definition comment="Microsoft Windows XP (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115277"/>
                    <criterion comment="the version of Win32k.sys is less than 5.2.3790.4571" test_ref="oval:gov.nist.fdcc.patch:tst:116212"/>
                </criteria>
                <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit,64-bit, ia-64) - GDR">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
                    </criteria>
                    <criterion comment="Win32k.sys version is greater than or equal to 6.0.6001.18000" test_ref="oval:gov.nist.fdcc.patch:tst:116213"/>
                    <criterion comment="Win32k.sys version is less than to 6.0.6001.18311" test_ref="oval:gov.nist.fdcc.patch:tst:116214"/>
                </criteria>
                <criteria operator="AND" comment="Vista, Server 2008 SP1 (32-bit, 64-bit, ia-64) - LDR">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:4873"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP1 is installed" definition_ref="oval:org.mitre.oval:def:5254"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) is installed" definition_ref="oval:org.mitre.oval:def:5667"/>
                    </criteria>
                    <criterion comment="Win32k.sys version is greater than or equal to 6.0.6001.22000" test_ref="oval:gov.nist.fdcc.patch:tst:116215"/>
                    <criterion comment="Win32k.sys version is less than to 6.0.6001.22497" test_ref="oval:gov.nist.fdcc.patch:tst:116216"/>
                </criteria>
                <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - GDR">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11559"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11558"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11560"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11561"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11562"/>
                    </criteria>
                    <criterion comment="Win32k.sys version is greater than or equal to 6.0.6002.18000" test_ref="oval:gov.nist.fdcc.patch:tst:116217"/>
                    <criterion comment="Win32k.sys version is less than to 6.0.6002.18091" test_ref="oval:gov.nist.fdcc.patch:tst:116218"/>
                </criteria>
                <criteria operator="AND" comment="Vista, Server 2008 SP2 (32-bit, 64-bit, ia-64) - LDR">
                    <criteria operator="OR">
                        <extend_definition comment="Microsoft Windows Vista (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11559"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11558"/>
                        <extend_definition comment="Microsoft Windows Vista (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11560"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (64-bit) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11561"/>
                        <extend_definition comment="Microsoft Windows Server 2008 (ia-64) SP2 is installed" definition_ref="oval:gov.nist.fdcc.patch:def:11562"/>
                    </criteria>
                    <criterion comment="Win32k.sys version is greater than or equal to 6.0.6002.22000" test_ref="oval:gov.nist.fdcc.patch:tst:116219"/>
                    <criterion comment="Win32k.sys version is less than to 6.0.6002.22200" test_ref="oval:gov.nist.fdcc.patch:tst:1162191"/>
                </criteria>
            </criteria>
        </definition>
        <!--====================================================================================================-->
        <!--=====================================  EXTENDED DEFINITIONS  =========================================-->
        <!--====================================================================================================-->
        <definition id="oval:gov.nist.fdcc.patch:def:115231" version="1" class="inventory">
            <metadata>
                <title>Windows Media Player 9.0 is installed.</title>
                <affected family="windows">
                    <platform>Microsoft Windows XP</platform>
                    <product>Media Player</product>
                </affected>
                <description>Windows Media Player v9.0 is installed.</description>
            </metadata>
            <criteria operator="AND">
                <criterion comment="Windows Media Player 9 is installed" test_ref="oval:gov.nist.fdcc.patch:tst:115235"/>
                <criterion negate="true" comment="Windows Media Player 10 is installed" test_ref="oval:gov.nist.fdcc.patch:tst:115236"/>
                <extend_definition negate="true" comment="Windows Media Player 11.0 is installed." definition_ref="oval:gov.nist.fdcc.patch:def:115233"/>
            </criteria>
        </definition>
        <definition id="oval:gov.nist.fdcc.patch:def:115232" version="1" class="inventory">
            <metadata>
                <title>Windows Media Player 10.0 is installed.</title>
                <affected family="windows">
                    <platform>Microsoft Windows XP</platform>
                    <product>Media Player</product>
                </affected>
                <description>Windows Media Player v10.0 is installed.</description>
            </metadata>
            <criteria operator="AND">
                <criterion comment="Windows Media Player 10 is installed" test_ref="oval:gov.nist.fdcc.patch:tst:115236"/>
                <extend_definition negate="true" comment="Windows Media Player v11.0 is installed." definition_ref="oval:gov.nist.fdcc.patch:def:115233"/>
            </criteria>
        </definition>
        <definition id="oval:gov.nist.fdcc.patch:def:115233" version="1" class="inventory">
            <metadata>
                <title>Windows Media Player 11.0 is installed.</title>
                <affected family="windows">
                    <platform>Microsoft Windows XP</platform>
                    <platform>Microsoft Windows Vista</platform>
                    <product>Media Player</product>
                </affected>
                <description>Windows Media Player 11.0 is installed.</description>
            </metadata>
            <criteria operator="AND">
                <criterion comment="PlayerVersion is greater than 11.0.0.0" test_ref="oval:gov.nist.fdcc.patch:tst:115237"/>
                <criterion comment="PlayerVersion is less than 12.0.0.0" test_ref="oval:gov.nist.fdcc.patch:tst:115238"/>
            </criteria>
        </definition>
        <definition id="oval:gov.nist.fdcc.patch:def:115234" version="1" class="inventory">
            <metadata>
                <title>Microsoft Windows Mail is installed</title>
                <affected family="windows">
                    <platform>Microsoft Windows Vista</platform>
                    <product>Windows Mail</product>
                </affected>
                <reference source="CPE" ref_id="cpe:/a:microsoft:windows_mail"/>
                <description>Microsoft Windows Mail is installed</description>
            </metadata>
            <criteria>
                <criterion comment="Windows Mail is installed" test_ref="oval:gov.nist.fdcc.patch:tst:115270"/>
            </criteria>
        </definition>
        <definition id="oval:gov.nist.fdcc.patch:def:115274" version="1" class="inventory">
            <metadata>
                <title>Microsoft Windows XP SP2 is installed</title>
                <affected family="windows">
                    <platform>Microsoft Windows XP</platform>
                </affected>
                <reference source="CPE" ref_id="cpe:/o:microsoft:windows_xp::sp2"/>
                <description>The operating system installed on the system is Microsoft Windows XP SP2.</description>
            </metadata>
            <criteria operator="AND">
                <extend_definition comment="Microsoft Windows XP is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115275"/>
                <criterion comment="Win2K/XP/2003 service pack 2 is installed" test_ref="oval:org.mitre.oval:tst:3019"/>
            </criteria>
        </definition>
        <definition id="oval:gov.nist.fdcc.patch:def:115275" version="1" class="inventory">
            <metadata>
                <title>Microsoft Windows XP is installed</title>
                <affected family="windows">
                    <platform>Microsoft Windows XP</platform>
                </affected>
                <reference source="CPE" ref_id="cpe:/o:microsoft:windows_xp"/>
                <description>The operating system installed on the system is Microsoft Windows XP.</description>
            </metadata>
            <criteria operator="AND">
                <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/>
                <criterion comment="Windows XP is installed" test_ref="oval:gov.nist.fccc.patch:tst:57914"/>
                <criterion comment="Currentversion = 5.1 or 5.2" test_ref="oval:gov.nist.fdcc.patch:tst:115300"/>
            </criteria>
        </definition>
        <definition id="oval:gov.nist.fdcc.patch:def:115276" version="1" class="inventory">
            <metadata>
                <title>Microsoft Windows XP (32-bit) SP2 is installed</title>
                <affected family="windows">
                    <platform>Microsoft Windows XP</platform>
                </affected>
                <reference source="CPE" ref_id="cpe:/o:microsoft:windows_xp::sp2:x86"/>
                <description>A version of Microsoft Windows XP (32-bit) SP2 is installed.</description>
            </metadata>
            <criteria operator="AND">
                <extend_definition comment="Microsoft Windows XP is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115275"/>
                <criterion comment="a version of Windows for the x86 architecture is installed" test_ref="oval:org.mitre.oval:tst:3823"/>
                <criterion comment="Win2K/XP/2003 service pack 2 is installed" test_ref="oval:org.mitre.oval:tst:3019"/>
            </criteria>
        </definition>
        <definition id="oval:gov.nist.fdcc.patch:def:115277" version="1" class="inventory">
            <metadata>
                <title>Microsoft Windows XP (64-bit) SP2 is installed</title>
                <affected family="windows">
                    <platform>Microsoft Windows XP</platform>
                </affected>
                <reference source="CPE" ref_id="cpe:/o:microsoft:windows_xp::sp2:x64"/>
                <description>A version of Microsoft Windows XP (64-bit) SP2 is installed.</description>
            </metadata>
            <criteria operator="AND">
                <extend_definition comment="Microsoft Windows XP is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115275"/>
                <criterion comment="a version of Windows for the x64 architecture is installed" test_ref="oval:org.mitre.oval:tst:3653"/>
                <criterion comment="Win2K/XP/2003 service pack 2 is installed" test_ref="oval:org.mitre.oval:tst:3019"/>
            </criteria>
        </definition>
        <definition id="oval:gov.nist.fdcc.patch:def:115278" version="1" class="inventory">
            <metadata>
                <title>Microsoft Windows XP (32-bit) SP3 is installed</title>
                <affected family="windows">
                    <platform>Microsoft Windows XP</platform>
                </affected>
                <reference source="CPE" ref_id="cpe:/o:microsoft:windows_xp::sp3:x86"/>
                <description>A version of Microsoft Windows XP (x86) Service Pack 3 is installed.</description>
            </metadata>
            <criteria operator="AND">
                <extend_definition comment="Microsoft Windows XP is installed" definition_ref="oval:gov.nist.fdcc.patch:def:115275"/>
                <criterion comment="a version of Windows for the x86 architecture is installed" test_ref="oval:org.mitre.oval:tst:3823"/>
                <criterion comment="Win2K/XP/2003 service pack 3 is installed" test_ref="oval:org.mitre.oval:tst:7814"/>
            </criteria>
        </definition>
        <definition id="oval:gov.nist.fdcc.patch:def:115279" version="1" class="inventory">
            <metadata>
                <title>Microsoft IIS is installed</title>
                <affected family="windows">
                    <platform>Microsoft Windows XP</platform>
                    <platform>Microsoft Windows Vista</platform>
                    <platform>Microsoft Windows Server 2008</platform>
                </affected>
                <reference source="CPE" ref_id="cpe:/a:microsoft:iis"/>
                <description>The application Microsoft IIS is installed.</description>
            </metadata>
            <criteria>
                <criterion comment="IIS registry key exists" test_ref="oval:gov.nist.fdcc.patch:tst:115302"/>
            </criteria>
        </definition>
        <definition id="oval:gov.nist.fdcc.patch:def:11558" version="1" class="inventory">
            <metadata>
                <title>Microsoft Windows Server 2008 (32-bit) SP2 is installed</title>
                <affected family="windows">
                    <platform>Microsoft Windows Server 2008</platform>
                </affected>
                <reference source="CPE" ref_id="cpe:/o:microsoft:windows_2008:::x86"/>
                <description>The operating system installed on the system is Microsoft Windows Server 2008 (32-bit) SP2</description>
            </metadata>
            <criteria>
                <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/>
                <criterion comment="Windows Server 2008 is installed" test_ref="oval:org.mitre.oval:tst:7697"/>
                <criterion comment="a version of Windows for the x86 architecture is installed" test_ref="oval:org.mitre.oval:tst:3823"/>
                <criterion comment="Win2K/XP/2003/Vista/2008 service pack 2 is installed" test_ref="oval:org.mitre.oval:tst:3019"/>
            </criteria>
        </definition>
        <definition id="oval:gov.nist.fdcc.patch:def:11559" version="1" class="inventory">
            <metadata>
                <title>Microsoft Windows Vista (32-bit) SP2 is installed</title>
                <affected family="windows">
                    <platform>Microsoft Windows Vista</platform>
                </affected>
                <reference source="CPE" ref_id="cpe:/o:microsoft:windows_vista::sp1:x86"/>
                <description>The operating system installed on the system is Microsoft Windows Vista (32-bit) Service Pack 2</description>
            </metadata>
            <criteria>
                <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/>
                <criterion comment="Windows Vista is installed" test_ref="oval:org.mitre.oval:tst:7914"/>
                <criterion comment="a version of Windows for the x86 architecture is installed" test_ref="oval:org.mitre.oval:tst:3823"/>
                <criterion comment="Win2K/XP/2003/Vista/2008 service pack 2 is installed" test_ref="oval:org.mitre.oval:tst:3019"/>
            </criteria>
        </definition>
        <definition id="oval:gov.nist.fdcc.patch:def:11560" version="1" class="inventory">
            <metadata>
                <title>Microsoft Windows Vista (64-bit) SP2 is installed</title>
                <affected family="windows">
                    <platform>Microsoft Windows Vista</platform>
                </affected>
                <reference source="CPE" ref_id="cpe:/o:microsoft:windows_vista::sp1:x64"/>
                <description>The operating system installed on the system is Microsoft Windows Vista (64-bit) SP2</description>
            </metadata>
            <criteria>
                <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/>
                <criterion comment="Windows Vista is installed" test_ref="oval:org.mitre.oval:tst:7914"/>
                <criterion comment="a version of Windows for the x64 architecture is installed" test_ref="oval:org.mitre.oval:tst:3653"/>
                <criterion comment="Win2K/XP/2003/Vista/2008 service pack 2 is installed" test_ref="oval:org.mitre.oval:tst:3019"/>
            </criteria>
        </definition>
        <definition id="oval:gov.nist.fdcc.patch:def:11561" version="1" class="inventory">
            <metadata>
                <title>Microsoft Windows Server 2008 (64-bit) SP2 is installed</title>
                <affected family="windows">
                    <platform>Microsoft Windows Server 2008</platform>
                </affected>
                <reference source="CPE" ref_id="cpe:/o:microsoft:windows_2008::sp2:x64"/>
                <description>The operating system installed on the system is Microsoft Windows Server 2008 (64-bit)</description>
            </metadata>
            <criteria>
                <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/>
                <criterion comment="Windows Server 2008 is installed" test_ref="oval:org.mitre.oval:tst:7697"/>
                <criterion comment="a version of Windows for the x64 architecture is installed" test_ref="oval:org.mitre.oval:tst:3653"/>
                <criterion comment="Win2K/XP/2003/Vista/2008 service pack 2 is installed" test_ref="oval:org.mitre.oval:tst:3019"/>
            </criteria>
        </definition>
        <definition id="oval:gov.nist.fdcc.patch:def:11562" version="1" class="inventory">
            <metadata>
                <title>Microsoft Windows Server 2008 (ia-64) SP2 is installed</title>
                <affected family="windows">
                    <platform>Microsoft Windows Server 2008</platform>
                </affected>
                <reference source="CPE" ref_id="cpe:/o:microsoft:windows_2008::sp2:itanium"/>
                <description>The operating system installed on the system is Microsoft Windows Server 2008 Itanium Edition</description>
            </metadata>
            <criteria>
                <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/>
                <criterion comment="Windows Server 2008 is installed" test_ref="oval:org.mitre.oval:tst:7697"/>
                <criterion comment="a version of Windows for the ia64 architecture is installed" test_ref="oval:org.mitre.oval:tst:2747"/>
                <criterion comment="Win2K/XP/2003/Vista/2008 service pack 2 is installed" test_ref="oval:org.mitre.oval:tst:3019"/>
            </criteria>
        </definition>
        <definition id="oval:gov.nist.fdcc.patch:def:115281" version="1" class="inventory">
            <metadata>
                <title>Microsoft Windows 7 (ia64) is installed</title>
                <affected family="windows">
                    <platform>Microsoft Windows 7</platform>
                </affected>
                <reference source="CPE" ref_id="cpe:/o:microsoft:windows_7:::ia64"/>
                <description>The operating system installed on the system is Microsoft Windows 7 (ia64)</description>
            </metadata>
            <criteria>
                <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/>
                <criterion comment="Windows 7 is installed" test_ref="oval:org.mitre.oval:tst:10792"/>
                <criterion comment="a version of Windows for the ia64 architecture is installed" test_ref="oval:org.mitre.oval:tst:2747"/>
            </criteria>
        </definition>
        <definition id="oval:gov.nist.fdcc.patch:def:115282" version="1" class="inventory">
            <metadata>
                <title>Microsoft Windows Server 2008 R2 (32-bit) is installed</title>
                <affected family="windows">
                    <platform>Microsoft Windows Server 2008 R2</platform>
                </affected>
                <reference source="CPE" ref_id="cpe:/o:microsoft:windows_2008:r2::x86"/>
                <description>The operating system installed on the system is Microsoft Windows Server 2008 R2 (32-bit)</description>
            </metadata>
            <criteria>
                <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/>
                <criterion comment="Windows Server 2008 is installed" test_ref="oval:org.mitre.oval:tst:7697"/>
                <criterion comment="a version of Windows for the x86 architecture is installed" test_ref="oval:org.mitre.oval:tst:3823"/>
            </criteria>
        </definition>
        <definition id="oval:gov.nist.fdcc.patch:def:115283" version="1" class="inventory">
            <metadata>
                <title>Microsoft Windows Server 2008 R2 (64-bit) is installed</title>
                <affected family="windows">
                    <platform>Microsoft Windows Server 2008 R2</platform>
                </affected>
                <reference source="CPE" ref_id="cpe:/o:microsoft:windows_2008:r2::x64"/>
                <description>The operating system installed on the system is Microsoft Windows Server 2008 R2 (64-bit)</description>
            </metadata>
            <criteria>
                <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/>
                <criterion comment="Windows Server 2008 is installed" test_ref="oval:org.mitre.oval:tst:7697"/>
                <criterion comment="a version of Windows for the x64 architecture is installed" test_ref="oval:org.mitre.oval:tst:3653"/>
            </criteria>
        </definition>
        <definition id="oval:gov.nist.fdcc.patch:def:115284" version="1" class="inventory">
            <metadata>
                <title>Microsoft Windows Server 2008 R2 (ia-64) is installed</title>
                <affected family="windows">
                    <platform>Microsoft Windows Server 2008 R2</platform>
                </affected>
                <reference source="CPE" ref_id="cpe:/o:microsoft:windows_2008:r2::itanium"/>
                <description>The operating system installed on the system is Microsoft Windows Server 2008 R2 Itanium Edition</description>
            </metadata>
            <criteria>
                <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/>
                <criterion comment="Windows Server 2008 is installed" test_ref="oval:org.mitre.oval:tst:7697"/>
                <criterion comment="a version of Windows for the ia64 architecture is installed" test_ref="oval:org.mitre.oval:tst:2747"/>
            </criteria>
        </definition>
        <definition id="oval:gov.nist.fdcc.patch:def:115285" version="1" class="inventory">
            <metadata>
                <title>Microsoft .NET Framework 1.1 Service Pack 1, or later, is Installed</title>
                <affected family="windows">
                    <platform>Microsoft Windows XP</platform>
                    <platform>Microsoft Windows Vista</platform>
                    <product>.NET Framework</product>
                </affected>
                <description>Microsoft .NET Framework 1.1 SP1 is Installed</description>
            </metadata>
            <criteria operator="AND">
                <criterion comment="Mscorlib.dll version is greater than or equal to 1.1.4322.2032" test_ref="oval:gov.nist.fdcc.patch:tst:1152850"/>
                <!--<criterion comment="Mscorlib.dll version is less than 1.1.4322.x" test_ref="oval:gov.nist.fdcc.patch:tst:"/>-->
            </criteria>
        </definition>
        <definition id="oval:gov.nist.fdcc.patch:def:115286" version="1" class="inventory">
            <metadata>
                <title>Microsoft Windows Server 2008 R2 (32-bit) is installed</title>
                <affected family="windows">
                    <platform>Microsoft Windows Server 2008</platform>
                </affected>
                <reference source="CPE" ref_id="cpe:/o:microsoft:windows_2008_r2:::x86"/>
                <description>The operating system installed on the system is Microsoft Windows Server 2008 (32-bit)</description>
                <oval_repository>
                    <dates>
                        <submitted date="2009-10-19T10:26:00.749-05:00">
                            <contributor organization="National Institute of Standards and Technology">Tim Harrison</contributor>
                        </submitted>
                    </dates>
                    <status>DRAFT</status>
                </oval_repository>
            </metadata>
            <criteria>
                <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/>
                <criterion comment="Windows Server 2008 is installed" test_ref="oval:org.mitre.oval:tst:7697"/>
                <criterion comment="a version of Windows for the x86 architecture is installed" test_ref="oval:org.mitre.oval:tst:3823"/>
                <criterion comment="The version of Windows is 6.1" test_ref="oval:gov.nist.fdcc.patch:tst:1152631"/>
            </criteria>
        </definition>
        <definition id="oval:gov.nist.fdcc.patch:def:115287" version="1" class="inventory">
            <metadata>
                <title>Microsoft Windows Server 2008 R2 (64-bit) is installed</title>
                <affected family="windows">
                    <platform>Microsoft Windows Server 2008 R2</platform>
                </affected>
                <reference source="CPE" ref_id="cpe:/o:microsoft:windows_2008_r2:::x64"/>
                <description>The operating system installed on the system is Microsoft Windows Server 2008 R2 (64-bit)</description>
                <oval_repository>
                    <dates>
                        <submitted date="2009-10-19T10:26:00.749-05:00">
                            <contributor organization="National Institute of Standards and Technology">Tim Harrison</contributor>
                        </submitted>
                    </dates>
                    <status>DRAFT</status>
                </oval_repository>
            </metadata>
            <criteria>
                <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/>
                <criterion comment="Windows Server 2008 is installed" test_ref="oval:org.mitre.oval:tst:7697"/>
                <criterion comment="a version of Windows for the x64 architecture is installed" test_ref="oval:org.mitre.oval:tst:3653"/>
                <criterion comment="The version of Windows is 6.1" test_ref="oval:gov.nist.fdcc.patch:tst:1152631"/>
            </criteria>
        </definition>
        <definition id="oval:gov.nist.fdcc.patch:def:115288" version="1" class="inventory">
            <metadata>
                <title>Microsoft Windows Server 2008 R2 (ia-64) is installed</title>
                <affected family="windows">
                    <platform>Microsoft Windows Server 2008</platform>
                </affected>
                <reference source="CPE" ref_id="cpe:/o:microsoft:windows_2008_r2:::itanium"/>
                <description>The operating system installed on the system is Microsoft Windows Server 2008 R2 Itanium Edition</description>
                <oval_repository>
                    <dates>
                        <submitted date="2009-10-19T10:26:00.749-05:00">
                            <contributor organization="National Institute of Standards and Technology">Tim Harrison</contributor>
                        </submitted>
                    </dates>
                    <status>DRAFT</status>
                </oval_repository>
            </metadata>
            <criteria>
                <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/>
                <criterion comment="Windows Server 2008 is installed" test_ref="oval:org.mitre.oval:tst:7697"/>
                <criterion comment="a version of Windows for the ia64 architecture is installed" test_ref="oval:org.mitre.oval:tst:2747"/>
                <criterion comment="The version of Windows is 6.1" test_ref="oval:gov.nist.fdcc.patch:tst:1152631"/>
            </criteria>
        </definition>
        <definition id="oval:gov.nist.fdcc.patch:def:115289" version="1" class="inventory">
            <metadata>
                <title>Microsoft Windows Vista is installed</title>
                <affected family="windows">
                    <platform>Microsoft Windows Vista</platform>
                </affected>
                <reference source="CPE" ref_id="cpe:/o:microsoft:windows_vista:::"/>
                <description>The operating system installed on the system is Microsoft Windows Vista </description>
            </metadata>
            <criteria>
                <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/>
                <criterion comment="Windows Vista is installed" test_ref="oval:org.mitre.oval:tst:7914"/>
            </criteria>
        </definition>
        <definition id="oval:gov.nist.fdcc.patch:def:115290" version="1" class="inventory">
            <metadata>
                <title>Microsoft Windows Server 2008 is installed</title>
                <affected family="windows">
                    <platform>Microsoft Windows Server 2008</platform>
                </affected>
                <reference source="CPE" ref_id="cpe:/o:microsoft:windows_2008:::"/>
                <description>The operating system installed on the system is Microsoft Windows Server 2008</description>
            </metadata>
            <criteria>
                <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/>
                <criterion comment="Windows Server 2008 is installed" test_ref="oval:org.mitre.oval:tst:7697"/>
                <criterion comment="The version of Windows is 6.0" test_ref="oval:gov.nist.fdcc.patch:tst:1152630"/>
            </criteria>
        </definition>
        <definition id="oval:gov.nist.fdcc.patch:def:115291" version="1" class="inventory">
            <metadata>
                <title>Microsoft Windows 7 is installed</title>
                <affected family="windows">
                    <platform>Microsoft Windows 7</platform>
                </affected>
                <reference source="CPE" ref_id="cpe:/o:microsoft:windows_7:::"/>
                <description>The operating system installed on the system is Microsoft Windows 7</description>
            </metadata>
            <criteria>
                <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/>
                <criterion comment="Windows 7 is installed" test_ref="oval:org.mitre.oval:tst:10792"/>
                <criterion comment="The version of Windows is 6.1" test_ref="oval:gov.nist.fdcc.patch:tst:1152631"/>
            </criteria>
        </definition>
        <definition id="oval:gov.nist.fdcc.patch:def:115292" version="1" class="inventory">
            <metadata>
                <title>Microsoft Windows Server 2008 R2 is installed</title>
                <affected family="windows">
                    <platform>Microsoft Windows Server 2008 R2</platform>
                </affected>
                <reference source="CPE" ref_id="cpe:/o:microsoft:windows_2008:r2::"/>
                <description>The operating system installed on the system is Microsoft Windows Server 2008 R2</description>
            </metadata>
            <criteria>
                <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/>
                <criterion comment="Windows Server 2008 is installed" test_ref="oval:org.mitre.oval:tst:7697"/>
                <criterion comment="The version of Windows is 6.1" test_ref="oval:gov.nist.fdcc.patch:tst:1152631"/>
            </criteria>
        </definition>
        <definition id="oval:org.mitre.oval:def:208" version="1" class="inventory">
            <metadata>
                <title>Microsoft Outlook Express 6 for Windows XP/2003 is installed</title>
                <affected family="windows">
                    <platform>Microsoft Windows XP</platform>
                </affected>
                <description>Microsoft Outlook Express 6 for Windows XP/2003 is installed</description>
                <oval_repository>
                    <dates>
                        <submitted date="2007-07-03T12:32:22">
                            <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
                        </submitted>
                        <status_change date="2007-07-03T14:04:49.139-04:00">DRAFT</status_change>
                        <status_change date="2007-07-18T15:57:53.037-04:00">INTERIM</status_change>
                        <status_change date="2007-08-02T14:47:15.591-04:00">ACCEPTED</status_change>
                    </dates>
                    <status>ACCEPTED</status>
                </oval_repository>
            </metadata>
            <criteria operator="AND">
                <criterion comment="Windows XP is installed" test_ref="oval:org.mitre.oval:tst:2838"/>
                <criterion comment="Outlook Express 6 for Windows XP/2003 is installed" test_ref="oval:org.mitre.oval:tst:1633"/>
            </criteria>
        </definition>
        <definition id="oval:org.mitre.oval:def:227" version="2" class="inventory">
            <metadata>
                <title>Microsoft IIS 6.0 is installed</title>
                <affected family="windows">
                    <platform>Microsoft Windows 2000</platform>
                    <platform>Microsoft Windows XP</platform>
                    <platform>Microsoft Windows Server 2008</platform>
                </affected>
                <reference source="CPE" ref_id="cpe:/a:microsoft:iis:6.0"/>
                <description>The application Microsoft IIS 6.0 is installed.</description>
                <oval_repository>
                    <dates>
                        <submitted date="2006-07-25T12:05:33">
                            <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
                        </submitted>
                        <status_change date="2006-09-27T12:29:16.652-04:00">INTERIM</status_change>
                        <status_change date="2006-10-16T15:58:35.614-04:00">ACCEPTED</status_change>
                        <modified comment="Added CPE reference." date="2007-04-30T07:48:00.336-04:00">
                            <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
                        </modified>
                        <status_change date="2007-04-30T08:13:22.361-04:00">INTERIM</status_change>
                        <status_change date="2007-05-23T15:05:39.977-04:00">ACCEPTED</status_change>
                    </dates>
                    <status>ACCEPTED</status>
                </oval_repository>
            </metadata>
            <criteria>
                <criterion comment="IIS Major Version equals 6" test_ref="oval:org.mitre.oval:tst:170"/>
                <criterion comment="IIS Minor Version equals 0" test_ref="oval:org.mitre.oval:tst:164"/>
            </criteria>
        </definition>
        <definition id="oval:org.mitre.oval:def:415" version="1" class="inventory">
            <metadata>
                <title>Microsoft XML Core Services 3 is installed</title>
                <affected family="windows">
                    <platform>Microsoft Windows 2000</platform>
                    <platform>Microsoft Windows XP</platform>
                    <platform>Microsoft Windows Server 2003</platform>
                </affected>
                <reference source="CPE" ref_id="cpe:/a:microsoft:xml_core_services:3"/>
                <description>Microsoft XML Core Services 3 is installed.</description>
                <oval_repository>
                    <dates>
                        <submitted date="2006-10-11T05:29:41">
                            <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
                        </submitted>
                        <status_change date="2006-10-13T14:55:00.00-04:00">DRAFT</status_change>
                        <status_change date="2006-10-31T19:35:39.106-05:00">INTERIM</status_change>
                        <status_change date="2006-11-21T21:27:48.903-05:00">ACCEPTED</status_change>
                    </dates>
                    <status>ACCEPTED</status>
                </oval_repository>
            </metadata>
            <criteria>
                <criterion comment="Microsoft XML Core Services 3 is installed." test_ref="oval:org.mitre.oval:tst:179"/>
            </criteria>
        </definition>
        <definition id="oval:org.mitre.oval:def:454" version="1" class="inventory">
            <metadata>
                <title>Microsoft XML Core Services 6 is installed</title>
                <affected family="windows">
                    <platform>Microsoft Windows 2000</platform>
                    <platform>Microsoft Windows XP</platform>
                    <platform>Microsoft Windows Server 2003</platform>
                </affected>
                <reference source="CPE" ref_id="cpe:/a:microsoft:xml_core_services:6"/>
                <description>Microsoft XML Core Services 6 is installed.</description>
                <oval_repository>
                    <dates>
                        <submitted date="2006-10-11T05:29:41">
                            <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
                        </submitted>
                        <status_change date="2006-10-13T14:55:00.000-04:00">DRAFT</status_change>
                        <status_change date="2006-10-31T19:35:42.283-05:00">INTERIM</status_change>
                        <status_change date="2006-11-21T21:27:51.747-05:00">ACCEPTED</status_change>
                    </dates>
                    <status>ACCEPTED</status>
                </oval_repository>
            </metadata>
            <criteria>
                <criterion comment="Microsoft XML Core Services 6 is installed." test_ref="oval:org.mitre.oval:tst:182"/>
            </criteria>
        </definition>
        <definition id="oval:org.mitre.oval:def:460" version="2" class="inventory">
            <metadata>
                <title>Microsoft IIS 5.1 is installed</title>
                <affected family="windows">
                    <platform>Microsoft Windows 2000</platform>
                    <platform>Microsoft Windows XP</platform>
                    <platform>Microsoft Windows Server 2008</platform>
                </affected>
                <reference source="CPE" ref_id="cpe:/a:microsoft:iis:5.1"/>
                <description>The application Microsoft IIS 5.1 is installed.</description>
                <oval_repository>
                    <dates>
                        <submitted date="2006-07-25T12:05:33">
                            <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
                        </submitted>
                        <status_change date="2006-09-27T12:29:27.089-04:00">INTERIM</status_change>
                        <status_change date="2006-10-16T15:58:41.067-04:00">ACCEPTED</status_change>
                        <modified comment="Added CPE reference." date="2007-04-30T07:48:00.815-04:00">
                            <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
                        </modified>
                        <status_change date="2007-04-30T08:14:32.837-04:00">INTERIM</status_change>
                        <status_change date="2007-05-23T15:05:46.398-04:00">ACCEPTED</status_change>
                    </dates>
                    <status>ACCEPTED</status>
                </oval_repository>
            </metadata>
            <criteria>
                <criterion comment="IIS major version equals 5" test_ref="oval:org.mitre.oval:tst:3081"/>
                <criterion comment="IIS 5.1 Minor Version" test_ref="oval:org.mitre.oval:tst:1357"/>
            </criteria>
        </definition>
        <definition id="oval:org.mitre.oval:def:493" version="1" class="inventory">
            <metadata>
                <title>Microsoft XML Core Services 5 is installed</title>
                <affected family="windows">
                    <platform>Microsoft Windows 2000</platform>
                    <platform>Microsoft Windows XP</platform>
                    <platform>Microsoft Windows Server 2003</platform>
                </affected>
                <reference source="CPE" ref_id="cpe:/a:microsoft:xml_core_services:5"/>
                <description>Microsoft XML Core Services 5 is installed.</description>
                <oval_repository>
                    <dates>
                        <submitted date="2006-10-11T05:29:41">
                            <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
                        </submitted>
                        <status_change date="2006-10-13T14:55:00.000-04:00">DRAFT</status_change>
                        <status_change date="2006-10-31T19:35:45.581-05:00">INTERIM</status_change>
                        <status_change date="2006-11-21T21:27:55.727-05:00">ACCEPTED</status_change>
                        <modified comment="Changed the location of MSXML5.dll, which is installed as a part of Office 2003 and Office 2007" date="2008-11-19T10:37:00.716-05:00">
                            <contributor organization="Sudhir Gandhe">Secure Elements, Inc.</contributor>
                        </modified>
                        <status_change date="2008-11-19T10:38:59.532-05:00">INTERIM</status_change>
                    </dates>
                    <status>INTERIM</status>
                </oval_repository>
            </metadata>
            <criteria>
                <criterion comment="Microsoft XML Core Services 5 is installed." test_ref="oval:org.mitre.oval:tst:49"/>
            </criteria>
        </definition>
        <definition id="oval:org.mitre.oval:def:563" version="3" class="inventory">
            <metadata>
                <title>Microsoft Internet Explorer 6 is installed</title>
                <affected family="windows">
                    <platform>Microsoft Windows 2000</platform>
                    <platform>Microsoft Windows XP</platform>
                    <platform>Microsoft Windows Server 2003</platform>
                </affected>
                <reference source="CPE" ref_id="cpe:/a:microsoft:ie:6"/>
                <description>The application Microsoft Internet Explorer 6 is installed.</description>
                <oval_repository>
                    <dates>
                        <submitted date="2006-08-11T12:53:40">
                            <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
                        </submitted>
                        <status_change date="2006-09-08T11:26:00.000-04:00">DRAFT</status_change>
                        <status_change date="2006-09-27T12:29:31.086-04:00">INTERIM</status_change>
                        <status_change date="2006-10-16T15:58:44.500-04:00">ACCEPTED</status_change>
                        <modified comment="Added an anchor to the regex used to check for Internet Explorer 6." date="2007-01-11T20:38:00.950-05:00">
                            <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
                        </modified>
                        <status_change date="2007-01-11T20:49:17.329-05:00">INTERIM</status_change>
                        <status_change date="2007-02-20T13:40:46.580-05:00">ACCEPTED</status_change>
                        <modified comment="Added CPE reference." date="2007-04-30T07:48:00.756-04:00">
                            <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
                        </modified>
                        <status_change date="2007-04-30T07:54:07.779-04:00">INTERIM</status_change>
                        <status_change date="2007-05-23T15:05:48.577-04:00">ACCEPTED</status_change>
                    </dates>
                    <status>ACCEPTED</status>
                </oval_repository>
            </metadata>
            <criteria>
                <criterion comment="Internet Explorer 6 (any patch level) is installed" test_ref="oval:org.mitre.oval:tst:2333"/>
            </criteria>
        </definition>
        <definition id="oval:org.mitre.oval:def:627" version="1" class="inventory">
            <metadata>
                <title>Microsoft Internet Explorer 7 is installed</title>
                <affected family="windows">
                    <platform>Microsoft Windows XP</platform>
                    <platform>Microsoft Windows Server 2003</platform>
                    <platform>Microsoft Windows Vista</platform>
                </affected>
                <reference source="CPE" ref_id="cpe:/a:microsoft:ie:7"/>
                <description>A version of Microsoft Internet Explorer 7 is installed.</description>
                <oval_repository>
                    <dates>
                        <submitted date="2007-01-09T06:00:00">
                            <contributor organization="Secure Elements, Inc.">Sudhir Gandhe</contributor>
                        </submitted>
                        <status_change date="2007-01-11T15:30:00-04:00">DRAFT</status_change>
                        <status_change date="2007-02-20T13:40:49.320-05:00">INTERIM</status_change>
                        <modified comment="Added Microsoft Windows Vista to the list of affected platforms." date="2007-03-05T09:10:00.104-05:00">
                            <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
                        </modified>
                        <status_change date="2007-03-21T16:17:23.092-04:00">ACCEPTED</status_change>
                    </dates>
                    <status>ACCEPTED</status>
                </oval_repository>
            </metadata>
            <criteria>
                <criterion comment="Internet Explorer 7 is installed" test_ref="oval:org.mitre.oval:tst:178"/>
            </criteria>
        </definition>
        <definition id="oval:org.mitre.oval:def:1002" version="1" class="inventory">
            <metadata>
                <title>Microsoft XML Core Services 4 is installed</title>
                <affected family="windows">
                    <platform>Microsoft Windows 2000</platform>
                    <platform>Microsoft Windows XP</platform>
                    <platform>Microsoft Windows Server 2003</platform>
                </affected>
                <reference source="CPE" ref_id="cpe:/a:microsoft:xml_core_services:4"/>
                <description>Microsoft XML Core Services 4 is installed.</description>
                <oval_repository>
                    <dates>
                        <submitted date="2006-10-11T05:29:41">
                            <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
                        </submitted>
                        <status_change date="2006-10-13T14:55:00.000-04:00">DRAFT</status_change>
                        <status_change date="2006-10-31T19:35:29.444-05:00">INTERIM</status_change>
                        <status_change date="2006-11-21T21:27:39.227-05:00">ACCEPTED</status_change>
                    </dates>
                    <status>ACCEPTED</status>
                </oval_repository>
            </metadata>
            <criteria>
                <criterion comment="Microsoft XML Core Services 4 is installed." test_ref="oval:org.mitre.oval:tst:30"/>
            </criteria>
        </definition>
        <definition id="oval:org.mitre.oval:def:1211" version="2" class="inventory">
            <metadata>
                <title>Microsoft Office 2007 is installed</title>
                <affected family="windows">
                    <platform>Microsoft Windows 2000</platform>
                    <platform>Microsoft Windows XP</platform>
                    <platform>Microsoft Windows Server 2003</platform>
                    <platform>Microsoft Windows Vista</platform>
                    <product>Microsoft Office 2007</product>
                </affected>
                <reference source="CPE" ref_id="cpe:/a:microsoft:office:2007"/>
                <description>The application Microsoft Office 2007 is installed.</description>
                <oval_repository>
                    <dates>
                        <submitted date="2007-03-05T09:15:44.461-04:00">
                            <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
                        </submitted>
                        <status_change date="2007-03-05T09:15:44.461-04:00">DRAFT</status_change>
                        <status_change date="2007-03-21T16:16:45.739-04:00">INTERIM</status_change>
                        <status_change date="2007-04-10T13:44:19.356-04:00">ACCEPTED</status_change>
                        <modified comment="Changed tst:3839 to check a different registry key to determine if Office 2007 is installed." date="2007-05-09T21:24:00.183-04:00">
                            <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
                        </modified>
                        <status_change date="2007-05-09T21:25:56.329-04:00">INTERIM</status_change>
                        <modified comment="Corrected cpe name in reference." date="2007-05-23T15:38:00.055-04:00">
                            <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
                        </modified>
                        <status_change date="2007-06-08T21:36:34.361-04:00">ACCEPTED</status_change>
                    </dates>
                    <status>ACCEPTED</status>
                </oval_repository>
            </metadata>
            <criteria>
                <criterion comment="Microsoft Office 2007 is installed" test_ref="oval:org.mitre.oval:tst:3839"/>
            </criteria>
        </definition>
        <definition id="oval:org.mitre.oval:def:1282" version="3" class="inventory">
            <metadata>
                <title>Microsoft Windows Vista (32-bit) is installed</title>
                <affected family="windows">
                    <platform>Microsoft Windows Vista</platform>
                </affected>
                <reference source="CPE" ref_id="cpe:/o:microsoft:windows_vista:::x86"/>
                <description>The operating system installed on the system is Microsoft Windows Vista (32-bit)</description>
                <oval_repository>
                    <dates>
                        <submitted date="2007-04-11T11:27:37.975-04:00">
                            <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
                        </submitted>
                        <status_change date="2007-04-11T12:15:00.000-04:00">DRAFT</status_change>
                        <status_change date="2007-04-30T08:18:46.566-04:00">INTERIM</status_change>
                        <status_change date="2007-05-23T15:05:26.800-04:00">ACCEPTED</status_change>
                        <modified comment="Vista test updated because of the conflictions with Server 2008" date="2008-03-26T10:51:02.210-04:00">
                            <contributor organization="Secure Elements, Inc.">Sudhir Gandhe</contributor>
                        </modified>
                        <status_change date="2008-03-31T04:00:20.410-04:00">INTERIM</status_change>
                        <modified comment="Changed the CPE reference" date="2008-04-04T11:17:00.749-04:00">
                            <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
                        </modified>
                        <status_change date="2008-04-21T04:00:11.683-04:00">ACCEPTED</status_change>
                        <modified comment="Replaced negation of test for x64 with a test for x86" date="2009-10-19T10:26:00.749-05:00">
                            <contributor organization="National Institute of Standards and Technology">Andrew Buttner</contributor>
                        </modified>
                        <status_change date="2009-10-19T10:26:00.749-05:00">INTERIM</status_change>
                    </dates>
                    <status>INTERIM</status>
                </oval_repository>
            </metadata>
            <criteria>
                <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/>
                <criterion comment="Windows Vista is installed" test_ref="oval:org.mitre.oval:tst:7914"/>
                <criterion comment="a version of Windows for the x86 architecture is installed" test_ref="oval:org.mitre.oval:tst:3823"/>
            </criteria>
        </definition>
        <definition id="oval:org.mitre.oval:def:2126" version="1" class="inventory">
            <metadata>
                <title>Windows Media Player v11.0 is installed.</title>
                <affected family="windows">
                    <platform>Microsoft Windows XP</platform>
                    <platform>Microsoft Windows Server 2003</platform>
                    <platform>Microsoft Windows Vista</platform>
                    <product>Media Player</product>
                </affected>
                <reference source="CPE" ref_id="cpe:/a:microsoft:media_player:11"/>
                <description>Windows Media Player v11.0 is installed.</description>
                <oval_repository>
                    <dates>
                        <submitted date="2007-08-15T09:28:35">
                            <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
                        </submitted>
                        <status_change date="2007-08-15T15:55:11.057-04:00">DRAFT</status_change>
                        <status_change date="2007-09-06T09:13:31.049-04:00">INTERIM</status_change>
                        <status_change date="2007-09-27T08:57:44.929-04:00">ACCEPTED</status_change>
                    </dates>
                    <status>ACCEPTED</status>
                </oval_repository>
            </metadata>
            <criteria operator="AND">
                <criterion comment="PlayerVersion is greater than 11.0.0.0" test_ref="oval:org.mitre.oval:tst:3203"/>
                <criterion comment="PlayerVersion is less than 12.0.0.0" test_ref="oval:org.mitre.oval:tst:4192"/>
            </criteria>
        </definition>
        <definition id="oval:org.mitre.oval:def:2147" version="2" class="inventory">
            <metadata>
                <title>Windows Media Player v9.0 is installed.</title>
                <affected family="windows">
                    <platform>Microsoft Windows XP</platform>
                    <product>Media Player</product>
                </affected>
                <reference source="CPE" ref_id="cpe:/a:microsoft:media_player:9"/>
                <description>Windows Media Player v9.0 is installed.</description>
            </metadata>
            <criteria operator="AND">
                <criterion comment="Windows Media Player 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:786"/>
                <!-- upgrading from Player 9 may not remove the Player 9 registry keys. -->
                <criterion comment="Windows Media Player 10 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:833"/>
                <extend_definition comment="Windows Media Player v11 is installed" negate="true" definition_ref="oval:org.mitre.oval:def:2126"/>
            </criteria>
        </definition>
        <definition id="oval:org.mitre.oval:def:2172" version="2" class="inventory">
            <metadata>
                <title>Windows Media Player v10.0 is installed.</title>
                <affected family="windows">
                    <platform>Microsoft Windows XP</platform>
                    <platform>Microsoft Windows Server 2003</platform>
                    <product>Media Player</product>
                </affected>
                <reference source="CPE" ref_id="cpe:/a:microsoft:media_player:10"/>
                <description>Windows Media Player v10.0 is installed.</description>
            </metadata>
            <criteria operator="AND">
                <criterion comment="Windows Media Player 10 is installed" test_ref="oval:org.mitre.oval:tst:833"/>
                <!-- upgrading from Player 10 may not remove the Player 10 registry keys. -->
                <extend_definition comment="Windows Media Player v11 is installed" negate="true" definition_ref="oval:org.mitre.oval:def:2126"/>
            </criteria>
        </definition>
        <definition id="oval:org.mitre.oval:def:4870" version="3" class="inventory">
            <metadata>
                <title>Microsoft Windows Server 2008 (32-bit) is installed</title>
                <affected family="windows">
                    <platform>Microsoft Windows Server 2008</platform>
                </affected>
                <reference source="CPE" ref_id="cpe:/o:microsoft:windows_2008:::x86"/>
                <description>The operating system installed on the system is Microsoft Windows Server 2008 (32-bit)</description>
                <oval_repository>
                    <dates>
                        <submitted date="2008-03-26T10:44:02">
                            <contributor organization="Secure Elements, Inc.">Sudhir Gandhe</contributor>
                        </submitted>
                        <status_change date="2008-03-26T16:27:25.280-04:00">DRAFT</status_change>
                        <modified comment="Changed the CPE reference" date="2008-04-04T11:17:00.555-04:00">
                            <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
                        </modified>
                        <status_change date="2008-04-21T04:00:20.181-04:00">INTERIM</status_change>
                        <status_change date="2008-05-12T04:00:10.618-04:00">ACCEPTED</status_change>
                        <modified comment="Changed registry check for amd64 to be a case insensitive equals" date="2009-09-04T10:48:00.140-05:00">
                            <contributor organization="Hewlett-Packard">Todd Dolinsky</contributor>
                        </modified>
                        <status_change date="2009-09-07T04:00:25.188-04:00">INTERIM</status_change>
                        <status_change date="2009-09-28T04:00:03.365-04:00">ACCEPTED</status_change>
                        <modified comment="Replaced negation of test for x64 with a test for x86 and added a test for the OS version" date="2009-10-19T10:26:00.749-05:00">
                            <contributor organization="National Institute of Standards and Technology">Andrew Buttner</contributor>
                        </modified>
                        <status_change date="2009-10-19T10:26:00.749-05:00">INTERIM</status_change>
                    </dates>
                    <status>INTERIM</status>
                </oval_repository>
            </metadata>
            <criteria>
                <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/>
                <criterion comment="Windows Server 2008 is installed" test_ref="oval:org.mitre.oval:tst:7697"/>
                <criterion comment="a version of Windows for the x86 architecture is installed" test_ref="oval:org.mitre.oval:tst:3823"/>
                <criterion comment="The version of Windows is 6.0" test_ref="oval:gov.nist.fdcc.patch:tst:1152630"/>
            </criteria>
        </definition>
        <definition id="oval:org.mitre.oval:def:4873" version="2" class="inventory">
            <metadata>
                <title>Microsoft Windows Vista (32-bit) Service Pack 1 is installed</title>
                <affected family="windows">
                    <platform>Microsoft Windows Vista</platform>
                </affected>
                <reference source="CPE" ref_id="cpe:/o:microsoft:windows_vista::sp1:x86"/>
                <description>The operating system installed on the system is Microsoft Windows Vista (32-bit) Service Pack 1</description>
                <oval_repository>
                    <dates>
                        <submitted date="2008-03-26T10:44:02">
                            <contributor organization="Secure Elements, Inc.">Sudhir Gandhe</contributor>
                        </submitted>
                        <status_change date="2008-03-26T16:27:29.495-04:00">DRAFT</status_change>
                        <modified comment="Changed the CPE reference" date="2008-04-04T11:17:00.108-04:00">
                            <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
                        </modified>
                        <status_change date="2008-04-21T04:00:20.428-04:00">INTERIM</status_change>
                        <status_change date="2008-05-12T04:00:14.497-04:00">ACCEPTED</status_change>
                        <modified comment="Replaced negation of test for x64 with a test for x86" date="2009-10-19T10:26:00.749-05:00">
                            <contributor organization="National Institute of Standards and Technology">Andrew Buttner</contributor>
                        </modified>
                        <status_change date="2009-10-19T10:26:00.749-05:00">INTERIM</status_change>
                    </dates>
                    <status>INTERIM</status>
                </oval_repository>
            </metadata>
            <criteria>
                <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/>
                <criterion comment="Windows Vista is installed" test_ref="oval:org.mitre.oval:tst:7914"/>
                <criterion comment="a version of Windows for the x86 architecture is installed" test_ref="oval:org.mitre.oval:tst:3823"/>
                <criterion comment="Win2K/XP/2003/Vista service pack 1 is installed" test_ref="oval:org.mitre.oval:tst:2843"/>
            </criteria>
        </definition>
        <definition id="oval:org.mitre.oval:def:5254" version="1" class="inventory">
            <metadata>
                <title>Microsoft Windows Vista (64-bit) SP1 is installed</title>
                <affected family="windows">
                    <platform>Microsoft Windows Vista</platform>
                </affected>
                <reference source="CPE" ref_id="cpe:/o:microsoft:windows_vista::sp1:x64"/>
                <description>The operating system installed on the system is Microsoft Windows Vista (64-bit) SP1</description>
                <oval_repository>
                    <dates>
                        <submitted date="2008-03-26T10:44:02">
                            <contributor organization="Secure Elements, Inc.">Sudhir Gandhe</contributor>
                        </submitted>
                        <status_change date="2008-03-26T16:27:29.700-04:00">DRAFT</status_change>
                        <modified comment="Changed the CPE reference" date="2008-04-04T11:17:00.236-04:00">
                            <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
                        </modified>
                        <status_change date="2008-04-21T04:00:21.267-04:00">INTERIM</status_change>
                        <status_change date="2008-05-12T04:00:14.836-04:00">ACCEPTED</status_change>
                    </dates>
                    <status>ACCEPTED</status>
                </oval_repository>
            </metadata>
            <criteria>
                <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/>
                <criterion comment="Windows Vista is installed" test_ref="oval:org.mitre.oval:tst:7914"/>
                <criterion comment="a version of Windows for the x64 architecture is installed" test_ref="oval:org.mitre.oval:tst:3653"/>
                <criterion comment="Win2K/XP/2003/Vista service pack 1 is installed" test_ref="oval:org.mitre.oval:tst:2843"/>
            </criteria>
        </definition>
        <definition id="oval:org.mitre.oval:def:5356" version="2" class="inventory">
            <metadata>
                <title>Microsoft Windows Server 2008 (64-bit) is installed</title>
                <affected family="windows">
                    <platform>Microsoft Windows Server 2008</platform>
                </affected>
                <reference source="CPE" ref_id="cpe:/o:microsoft:windows_2008::sp1:x64"/>
                <description>The operating system installed on the system is Microsoft Windows Server 2008 (64-bit)</description>
                <oval_repository>
                    <dates>
                        <submitted date="2008-03-26T10:44:02">
                            <contributor organization="Secure Elements, Inc.">Sudhir Gandhe</contributor>
                        </submitted>
                        <status_change date="2008-03-26T16:27:25.493-04:00">DRAFT</status_change>
                        <modified comment="Changed the CPE reference" date="2008-04-04T11:17:00.340-04:00">
                            <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
                        </modified>
                        <status_change date="2008-04-21T04:00:21.761-04:00">INTERIM</status_change>
                        <status_change date="2008-05-12T04:00:15.160-04:00">ACCEPTED</status_change>
                        <modified comment="Added a test for the OS version" date="2009-10-19T10:26:00.749-05:00">
                            <contributor organization="National Institute of Standards and Technology">Andrew Buttner</contributor>
                        </modified>
                        <status_change date="2009-10-19T10:26:00.749-05:00">INTERIM</status_change>
                    </dates>
                    <status>INTERIM</status>
                </oval_repository>
            </metadata>
            <criteria>
                <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/>
                <criterion comment="Windows Server 2008 is installed" test_ref="oval:org.mitre.oval:tst:7697"/>
                <criterion comment="a version of Windows for the x64 architecture is installed" test_ref="oval:org.mitre.oval:tst:3653"/>
                <criterion comment="The version of Windows is 6.0" test_ref="oval:gov.nist.fdcc.patch:tst:1152630"/>
            </criteria>
        </definition>
        <definition id="oval:org.mitre.oval:def:5653" version="3" class="inventory">
            <metadata>
                <title>Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed</title>
                <affected family="windows">
                    <platform>Microsoft Windows Server 2008</platform>
                </affected>
                <reference source="CPE" ref_id="cpe:/o:microsoft:windows_2008::sp2:x86"/>
                <description>The operating system installed on the system is Microsoft Windows Server 2008 (32-bit) Service Pack 2</description>
                <oval_repository>
                    <dates>
                        <submitted date="2009-05-04T16:00:00">
                            <contributor organization="Gideon Technologies, Inc.">Dragos Prisaca</contributor>
                        </submitted>
                        <status_change date="2009-05-07T11:17:37.121-04:00">DRAFT</status_change>
                        <status_change date="2009-05-25T04:01:42.700-04:00">INTERIM</status_change>
                        <status_change date="2009-06-22T04:00:24.249-04:00">ACCEPTED</status_change>
                        <modified comment="Changed registry check for amd64 to be a case insensitive equals" date="2009-09-04T10:48:00.140-05:00">
                            <contributor organization="Hewlett-Packard">Todd Dolinsky</contributor>
                        </modified>
                        <status_change date="2009-09-07T04:00:26.467-04:00">INTERIM</status_change>
                        <status_change date="2009-09-28T04:00:07.133-04:00">ACCEPTED</status_change>
                        <modified comment="Replaced negation of test for x64 with a test for x86 and added a test for the OS version" date="2009-10-19T10:26:00.749-05:00">
                            <contributor organization="National Institute of Standards and Technology">Andrew Buttner</contributor>
                        </modified>
                        <status_change date="2009-10-19T10:26:00.749-05:00">INTERIM</status_change>
                    </dates>
                    <status>INTERIM</status>
                </oval_repository>
            </metadata>
            <criteria>
                <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/>
                <criterion comment="Windows Server 2008 is installed" test_ref="oval:org.mitre.oval:tst:7697"/>
                <criterion comment="a version of Windows for the x86 architecture is installed" test_ref="oval:org.mitre.oval:tst:3823"/>
                <criterion comment="Win2K/XP/2003/Vista/2008 Service Pack 2 is installed" test_ref="oval:org.mitre.oval:tst:3019"/>
                <criterion comment="The version of Windows is 6.0" test_ref="oval:gov.nist.fdcc.patch:tst:1152630"/>
            </criteria>
        </definition>
        <definition id="oval:org.mitre.oval:def:5667" version="2" class="inventory">
            <metadata>
                <title>Microsoft Windows Server 2008 (ia-64) is installed</title>
                <affected family="windows">
                    <platform>Microsoft Windows Server 2008</platform>
                </affected>
                <reference source="CPE" ref_id="cpe:/o:microsoft:windows_2008::sp1:itanium"/>
                <description>The operating system installed on the system is Microsoft Windows Server 2008 Itanium Edition</description>
                <oval_repository>
                    <dates>
                        <submitted date="2008-07-08T14:18:00">
                            <contributor organization="Secure Elements, Inc.">Jeff Ito</contributor>
                        </submitted>
                        <status_change date="2008-07-11T10:55:58.360-04:00">DRAFT</status_change>
                        <status_change date="2008-07-28T04:00:20.824-04:00">INTERIM</status_change>
                        <status_change date="2008-08-18T04:00:47.533-04:00">ACCEPTED</status_change>
                        <modified comment="Added a test for the OS version" date="2009-10-19T10:26:00.749-05:00">
                            <contributor organization="National Institute of Standards and Technology">Andrew Buttner</contributor>
                        </modified>
                        <status_change date="2009-10-19T10:26:00.749-05:00">INTERIM</status_change>
                    </dates>
                    <status>INTERIM</status>
                </oval_repository>
            </metadata>
            <criteria>
                <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/>
                <criterion comment="Windows Server 2008 is installed" test_ref="oval:org.mitre.oval:tst:7697"/>
                <criterion comment="a version of Windows for the ia64 architecture is installed" test_ref="oval:org.mitre.oval:tst:2747"/>
                <criterion comment="The version of Windows is 6.0" test_ref="oval:gov.nist.fdcc.patch:tst:1152630"/>
            </criteria>
        </definition>
        <definition id="oval:org.mitre.oval:def:5950" version="1" class="inventory">
            <metadata>
                <title>Microsoft Windows 7 x64 Edition is installed</title>
                <affected family="windows">
                    <platform>Microsoft Windows 7</platform>
                </affected>
                <reference source="CPE" ref_id="cpe:/o:microsoft:windows_7:::x64"/>
                <description>The operating system installed on the system is Microsoft Windows 7 x64 Edition</description>
                <oval_repository>
                    <dates>
                        <submitted date="2009-09-08T11:27:37.975-04:00">
                            <contributor organization="Hewlett-Packard">Pai Peng</contributor>
                        </submitted>
                        <status_change date="2009-09-08T20:49:38.713-04:00">DRAFT</status_change>
                        <status_change date="2009-09-28T04:00:13.304-04:00">INTERIM</status_change>
                    </dates>
                    <status>INTERIM</status>
                </oval_repository>
            </metadata>
            <criteria>
                <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/>
                <criterion comment="Windows 7 is installed" test_ref="oval:org.mitre.oval:tst:10792"/>
                <criterion comment="a version of Windows for the x64 architecture is installed" test_ref="oval:org.mitre.oval:tst:3653"/>
            </criteria>
        </definition>
        <definition id="oval:org.mitre.oval:def:6124" version="3" class="inventory">
            <metadata>
                <title>Microsoft Windows Vista (32-bit) Service Pack 2 is installed</title>
                <affected family="windows">
                    <platform>Microsoft Windows Vista</platform>
                </affected>
                <reference source="CPE" ref_id="cpe:/o:microsoft:windows_vista::sp2:x86"/>
                <description>The operating system installed on the system is Microsoft Windows Vista (32-bit) Service Pack 2</description>
                <oval_repository>
                    <dates>
                        <submitted date="2009-05-04T16:00:00">
                            <contributor organization="Gideon Technologies, Inc.">Dragos Prisaca</contributor>
                        </submitted>
                        <modified comment="Updated comment to include Vista and Server 2008" date="2009-05-07T10:32:00.713-04:00">
                            <contributor organization="Gideon Technologies, Inc.">Dragos Prisaca</contributor>
                        </modified>
                        <status_change date="2009-05-07T11:17:28.873-04:00">DRAFT</status_change>
                        <status_change date="2009-05-25T04:02:00.040-04:00">INTERIM</status_change>
                        <status_change date="2009-06-22T04:00:28.642-04:00">ACCEPTED</status_change>
                        <modified comment="Changed registry check for amd64 to be a case insensitive equals" date="2009-09-04T10:48:00.140-05:00">
                            <contributor organization="Hewlett-Packard">Todd Dolinsky</contributor>
                        </modified>
                        <status_change date="2009-09-07T04:00:27.692-04:00">INTERIM</status_change>
                        <status_change date="2009-09-28T04:00:15.275-04:00">ACCEPTED</status_change>
                        <modified comment="Replaced negation of test for x64 with a test for x86" date="2009-10-19T10:26:00.749-05:00">
                            <contributor organization="National Institute of Standards and Technology">Andrew Buttner</contributor>
                        </modified>
                        <status_change date="2009-10-19T10:26:00.749-05:00">INTERIM</status_change>
                    </dates>
                    <status>INTERIM</status>
                </oval_repository>
            </metadata>
            <criteria>
                <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/>
                <criterion comment="Windows Vista is installed" test_ref="oval:org.mitre.oval:tst:7914"/>
                <criterion comment="a version of Windows for the x86 architecture is installed" test_ref="oval:org.mitre.oval:tst:3823"/>
                <criterion comment="Win2K/XP/2003/Vista/2008 Service Pack 2 is installed" test_ref="oval:org.mitre.oval:tst:3019"/>
            </criteria>
        </definition>
        <definition id="oval:org.mitre.oval:def:6165" version="2" class="inventory">
            <metadata>
                <title>Microsoft Windows 7 (32-bit) is installed</title>
                <affected family="windows">
                    <platform>Microsoft Windows 7</platform>
                </affected>
                <reference source="CPE" ref_id="cpe:/o:microsoft:windows_7:::x86"/>
                <description>The operating system installed on the system is Microsoft Windows 7 (32-bit)</description>
                <oval_repository>
                    <dates>
                        <submitted date="2009-09-08T11:27:37.975-04:00">
                            <contributor organization="Hewlett-Packard">Pai Peng</contributor>
                        </submitted>
                        <status_change date="2009-09-08T20:49:38.394-04:00">DRAFT</status_change>
                        <status_change date="2009-09-28T04:00:16.403-04:00">INTERIM</status_change>
                        <status_change date="2009-10-19T04:00:10.283-04:00">ACCEPTED</status_change>
                        <modified comment="Replaced negation of test for x64 with a test for x86" date="2009-10-19T10:26:00.749-05:00">
                            <contributor organization="National Institute of Standards and Technology">Andrew Buttner</contributor>
                        </modified>
                        <status_change date="2009-10-19T10:26:00.749-05:00">INTERIM</status_change>
                    </dates>
                    <status>INTERIM</status>
                </oval_repository>
            </metadata>
            <criteria>
                <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/>
                <criterion comment="Windows 7 is installed" test_ref="oval:org.mitre.oval:tst:10792"/>
                <criterion comment="a version of Windows for the x86 architecture is installed" test_ref="oval:org.mitre.oval:tst:3823"/>
            </criteria>
        </definition>
        <definition id="oval:gov.nist.fdcc.patch:def:11580" version="1" class="inventory">
            <metadata>
                <title>Microsoft .NET Framework 2.0 Service Pack 1 is installed</title>
                <affected family="windows">
                    <platform>Microsoft Windows XP</platform>
                    <platform>Microsoft Windows Server 2003</platform>
                    <platform>Microsoft Windows Vista</platform>
                    <platform>Microsoft Windows Server 2008</platform>
                    <product>.NET Framework</product>
                </affected>
                <description>Microsoft .NET Framework 2.0 Service Pack 1 is installed</description>
            </metadata>
            <criteria operator="AND">
                <criterion comment="Mscorlib.dll version is greater than or equal to 2.0.50727.1433" test_ref="oval:gov.nist.fdcc.patch:tst:115800"/>
                <criterion comment="Mscorlib.dll version is less than 2.0.50727.3053" test_ref="oval:gov.nist.fdcc.patch:tst:115801"/>
            </criteria>
        </definition>
        <definition id="oval:gov.nist.fdcc.patch:def:11581" version="1" class="inventory">
            <metadata>
                <title>Microsoft .NET Framework 2.0 Service Pack 2, or later, is installed</title>
                <affected family="windows">
                    <platform>Microsoft Windows XP</platform>
                    <platform>Microsoft Windows Server 2003</platform>
                    <platform>Microsoft Windows Vista</platform>
                    <platform>Microsoft Windows Server 2008</platform>
                    <product>.NET Framework</product>
                </affected>
                <description>Microsoft .NET Framework 2.0 Service Pack 2, or later, is installed</description>
            </metadata>
            <criteria operator="AND">
                <criterion comment="Mscorlib.dll version is greater than or equal to 2.0.50727.3053" test_ref="oval:gov.nist.fdcc.patch:tst:115802"/>
            </criteria>
        </definition>
        <definition id="oval:gov.nist.fdcc.patch:def:11582" version="1" class="inventory">
            <metadata>
                <title>Microsoft .NET Framework 3.5 (Gold) is installed</title>
                <affected family="windows">
                    <platform>Microsoft Windows XP</platform>
                    <platform>Microsoft Windows Server 2003</platform>
                    <platform>Microsoft Windows Vista</platform>
                    <platform>Microsoft Windows Server 2008</platform>
                    <product>.NET Framework</product>
                </affected>
                <description>Microsoft .NET Framework 3.5 (Gold) is installed</description>
            </metadata>
            <criteria operator="AND">
                <criterion comment="Mscorlib.dll version is greater than or equal to 3.5.21022.8" test_ref="oval:gov.nist.fdcc.patch:tst:115803"/>
                <criterion comment="Mscorlib.dll version is less than 3.5.30729.1" test_ref="oval:gov.nist.fdcc.patch:tst:115804"/>
            </criteria>
        </definition>
        <definition id="oval:gov.nist.fdcc.patch:def:11583" version="1" class="inventory">
            <metadata>
                <title>Microsoft .NET Framework 3.5 Service Pack 1, or later, is installed</title>
                <affected family="windows">
                    <platform>Microsoft Windows XP</platform>
                    <platform>Microsoft Windows Server 2003</platform>
                    <platform>Microsoft Windows Vista</platform>
                    <platform>Microsoft Windows Server 2008</platform>
                    <product>.NET Framework</product>
                </affected>
                <description>Microsoft .NET Framework 3.5 Service Pack 1, or later, is installed</description>
            </metadata>
            <criteria operator="AND">
                <criterion comment="Mscorlib.dll version is greater than or equal to 3.5.30729.1" test_ref="oval:gov.nist.fdcc.patch:tst:115805"/>
            </criteria>
        </definition>
    </definitions>
    <!-- ==================================================================================================== -->
    <!-- ============================================  TESTS  =============================================== -->
    <!-- ==================================================================================================== -->
    <tests>
        <registry_test id="oval:org.mitre.oval:tst:10792" version="1" comment="Windows 7 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
            <object object_ref="oval:org.mitre.oval:obj:5590"/>
            <state state_ref="oval:org.mitre.oval:ste:5027"/>
        </registry_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115471" version="1" comment="Win32k.sys version is less than 5.1.2600.3521" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:gov.nist.fdcc.patch:obj:115471"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115471"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115472" version="1" comment="Win32k.sys version is less than 5.1.2600.5756" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:gov.nist.fdcc.patch:obj:115471"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115472"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115473" version="1" comment="Win32k.sys version is less than 5.2.3790.4456" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:gov.nist.fdcc.patch:obj:115471"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115473"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115474" version="1" comment="Win32k.sys version is less than 6.0.6001.18211" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:gov.nist.fdcc.patch:obj:115471"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115474"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115475" version="1" comment="Win32k.sys version is less than 6.0.6001.22372" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:gov.nist.fdcc.patch:obj:115471"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115475"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115481" version="1" comment="Schannel.sys version is less than 5.1.2600.3487" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:gov.nist.fdcc.patch:obj:115481"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115481"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115482" version="1" comment="Schannel.sys version is less than 5.1.2600.5721" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:gov.nist.fdcc.patch:obj:115481"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115482"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115483" version="1" comment="Schannel.sys version is less than 5.2.3790.4458" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:gov.nist.fdcc.patch:obj:115481"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115483"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115484" version="1" comment="Schannel.sys version is less than 6.0.6001.18175" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:gov.nist.fdcc.patch:obj:115481"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115484"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115485" version="1" comment="Schannel.sys version is less than 6.0.6001.22372" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:gov.nist.fdcc.patch:obj:115481"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115485"/>
        </file_test>
        <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fccc.patch:tst:57914" version="1" comment="Windows XP is installed" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:5590"/>
            <state state_ref="oval:gov.nist.fccc.patch:ste:53828"/>
        </registry_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115201" version="1" comment="Gdi32.dll version is less than 5.1.2600.3466" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:gov.nist.fdcc.patch:obj:115201"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115201"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115202" version="1" comment="Gdi32.dll version is less than 5.1.2600.5698" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:gov.nist.fdcc.patch:obj:115201"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115202"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115203" version="1" comment="Gdi32.dll version is less than 5.2.3790.4396" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:gov.nist.fdcc.patch:obj:115201"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115203"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115221" version="1" comment="Explorer.exe version is less than 6.0.6001.18164" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:gov.nist.fdcc.patch:obj:115221"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115221"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115222" version="1" comment="Explorer.exe version is less than 6.0.6001.22298" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:gov.nist.fdcc.patch:obj:115221"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115222"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115231" version="1" comment="Wmnetmgr.dll version is less than 9.0.0.3268" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:gov.nist.fdcc.patch:obj:115234"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115235"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115232" version="1" comment="Wmnetmgr.dll version is less than 10.0.0.3703" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:gov.nist.fdcc.patch:obj:115234"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115236"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115233" version="1" comment="Wmnetmgr.dll version is less than 11.0.5721.5251" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:gov.nist.fdcc.patch:obj:115234"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115237"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115234" version="1" comment="Wmnetmgr.dll version is less than 11.0.6001.7001" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:gov.nist.fdcc.patch:obj:115234"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115238"/>
        </file_test>
        <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115235" version="2" comment="Windows Media Player 9 is installed" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:gov.nist.fdcc.patch:obj:115231"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115231"/>
        </registry_test>
        <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115236" version="2" comment="Windows Media Player 10 is installed" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:gov.nist.fdcc.patch:obj:115232"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115232"/>
        </registry_test>
        <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115237" version="1" comment="PlayerVersion is greater than 11.0.0.0" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:gov.nist.fdcc.patch:obj:115233"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115233"/>
        </registry_test>
        <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115238" version="1" comment="PlayerVersion is less than 12.0.0.0" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:gov.nist.fdcc.patch:obj:115233"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115234"/>
        </registry_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115251" version="1" comment="Srv.sys version is less than 5.1.2600.3491" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:gov.nist.fdcc.patch:obj:115251"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115251"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115252" version="1" comment="Srv.sys version is less than 5.1.2600.5725" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:gov.nist.fdcc.patch:obj:115251"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115252"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115253" version="1" comment="Srv.sys version is less than 5.2.3790.4425" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:gov.nist.fdcc.patch:obj:115251"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115253"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115254" version="1" comment="Srv.sys version is greater than 6.0.6001.18000" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:gov.nist.fdcc.patch:obj:115251"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115254"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115255" version="1" comment="Srv.sys version is less than 6.0.6001.18185" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:gov.nist.fdcc.patch:obj:115251"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115255"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115256" version="1" comment="Srv.sys version is greater than 6.0.6001.22000" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:gov.nist.fdcc.patch:obj:115251"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115256"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115257" version="1" comment="Srv.sys version is less than 6.0.6001.22331" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:gov.nist.fdcc.patch:obj:115251"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115257"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115258" version="1" comment="Mshtml.dll version is greater than or equal to 7.0.6001.18000" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:gov.nist.fdcc.patch:obj:115241"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115258"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115259" version="1" comment="Mshtml.dll version is greater than or equal to 7.0.6001.22000" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:gov.nist.fdcc.patch:obj:115241"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115259"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115260" version="1" comment="Explorer.exe version is greater than or equal to 6.0.6001.18000" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:gov.nist.fdcc.patch:obj:115221"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115254"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115261" version="1" comment="Explorer.exe version is greater than or equal to 6.0.6001.22000" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:gov.nist.fdcc.patch:obj:115221"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115256"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115264" version="1" comment="Mrxsmb10.sys version is greater than or equal to 6.0.6001.18000" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:6575"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115254"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115265" version="1" comment="Mrxsmb10.sys version is greater than or equal to 6.0.6001.22000" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:6575"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115256"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115266" version="1" comment="The version of Rmcast.sys is greater than or equal to 6.0.6001.18000." check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:org.mitre.oval:obj:41"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115254"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115267" version="1" comment="The version of Rmcast.sys is less than 6.0.6001.18069." check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:org.mitre.oval:obj:41"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115261"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115268" version="1" comment="The version of Rmcast.sys is greater than or equal to 6.0.6001.22000." check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:org.mitre.oval:obj:41"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115256"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115269" version="1" comment="The version of Rmcast.sys is less than 6.0.6001.22176." check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:org.mitre.oval:obj:41"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115262"/>
        </file_test>
        <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115270" version="3" comment="Windows Mail is installed" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:1809"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115260"/>
        </registry_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115281" version="1" comment="the version of Bthport.sys is less than 5.2.3790.4274" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:org.mitre.oval:obj:5807"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115281"/>
        </file_test>
        <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115300" version="1" comment="a version of Microsoft Windows XP is installed" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:123"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115263"/>
        </registry_test>
        <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115302" version="1" comment="IIS registry entry exists" check_existence="all_exist" check="at least one">
            <object object_ref="oval:gov.nist.fdcc.patch:obj:115261"/>
        </registry_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115304" version="1" comment="Mshtml.dll version is greater than or equal to 7.0.6000.20000" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:gov.nist.fdcc.patch:obj:115241"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115284"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115305" version="1" comment="Mshtml.dll version is less than 7.0.6001.22278" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:222"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115285"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115306" version="1" comment="Netapi32.dll version is greater than or equal to  6.0.6001.18000" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:160"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115254"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115307" version="1" comment="Netapi32.dll version is greater than or equal to  6.0.6001.22000" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:160"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115256"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115308" version="1" comment="Gdi32.dll version is greater than or equal to 6.0.6001.18000" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:279"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115254"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115309" version="1" comment="Gdi32.dll version is greater than or equal to 6.0.6001.22000" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:279"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115256"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115310" version="1" comment="Gdi32.dll version is less than 6.0.6001.22291" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:279"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115286"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115311" version="1" comment="Mshtml.dll version is less than 7.0.6001.18148" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:org.mitre.oval:obj:222"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115287"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115320" version="1" comment="Msdtcprx.dll version is less than 2001.12.4414.320" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:gov.nist.fdcc.patch:obj:115265"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115299"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115321" version="1" comment="Ntoskrnl.exe version is less than 5.1.2600.3520" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:org.mitre.oval:obj:335"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115300"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115322" version="1" comment="Msdtcprx.dll version is less than 2001.12.4414.706" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:gov.nist.fdcc.patch:obj:115265"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115301"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115323" version="1" comment="Ntoskrnl.exe version is less than 5.1.2600.5755" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:org.mitre.oval:obj:335"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115302"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115324" version="1" comment="Msdtcprx.dll version is less than 2001.12.4720.4340" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:gov.nist.fdcc.patch:obj:115265"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115303"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115325" version="1" comment="Ntoskrnl.exe version is less than 5.2.3790.4478" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:org.mitre.oval:obj:335"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115304"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115326" version="1" comment="Msdtcprx.dll version is greater than or equal to 2001.12.6931.18000" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:gov.nist.fdcc.patch:obj:115265"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115295"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115327" version="1" comment="Ntoskrnl.exe version is greater than or equal to 6.0.6001.18000" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:org.mitre.oval:obj:335"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115254"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115328" version="1" comment="Msdtcprx.dll version is less than 2001.12.6931.18085" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:gov.nist.fdcc.patch:obj:115265"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115299"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115329" version="1" comment="Ntoskrnl.exe version is less than 6.0.6001.18226" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:org.mitre.oval:obj:335"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115297"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115330" version="1" comment="Msdtcprx.dll version is greater than or equal to 2001.12.6931.22000" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:gov.nist.fdcc.patch:obj:115265"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115299"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115331" version="1" comment="Ntoskrnl.exe version is greater than or equal to 6.0.6001.22000" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:org.mitre.oval:obj:335"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115256"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115332" version="1" comment="Msdtcprx.dll version is less than 2001.12.6931.22197" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:gov.nist.fdcc.patch:obj:115265"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115300"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115333" version="1" comment="Ntoskrnl.exe version is less than 6.0.6001.22389" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:org.mitre.oval:obj:335"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115298"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115334" version="1" comment="Winhttp.dll version is less than 5.1.2600.3494" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:gov.nist.fdcc.patch:obj:115266"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115305"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115335" version="1" comment="Winhttp.dll version is less than 5.1.2600.5727" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:gov.nist.fdcc.patch:obj:115266"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115306"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115336" version="1" comment="Winhttp.dll version is less than 5.2.3790.4427" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:gov.nist.fdcc.patch:obj:115266"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115307"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115337" version="1" comment="Winhttp.dll version is greater than or equal to 6.0.6001.18000" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:gov.nist.fdcc.patch:obj:115266"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115254"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115338" version="2" comment="Winhttp.dll version is less than 6.0.6001.18178" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:gov.nist.fdcc.patch:obj:115266"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115308"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115339" version="1" comment="Winhttp.dll version is greater than or equal to 6.0.6001.22000" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:gov.nist.fdcc.patch:obj:115266"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115256"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115340" version="1" comment="Winhttp.dll version is less than 6.0.6001.22323" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:gov.nist.fdcc.patch:obj:115266"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115309"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115521" version="1" comment="Mshtml.dll version is less than 7.0.6000.16825" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:org.mitre.oval:obj:222"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115521"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115522" version="1" comment="Mshtml.dll version is less than 7.0.6000.21015" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:org.mitre.oval:obj:222"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115522"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115523" version="1" comment="Mshtml.dll version is less than 7.0.6001.18226" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:org.mitre.oval:obj:222"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115523"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115524" version="1" comment="Mshtml.dll version is less than 7.0.6001.22389" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:org.mitre.oval:obj:222"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115524"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115541" version="1" comment="Kernel32.dll version is less than 5.1.2600.3541" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:org.mitre.oval:obj:1549"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115541"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115542" version="1" comment="Kernel32.dll version is less than 5.1.2600.5781" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:org.mitre.oval:obj:1549"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115542"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115543" version="1" comment="Kernel32.dll version is less than 5.2.3790.4480" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:org.mitre.oval:obj:1549"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115543"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115544" version="1" comment="Kernel32.dll version is greater than or equal to 6.0.6001.18000" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:org.mitre.oval:obj:1549"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115544"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115545" version="1" comment="Kernel32.dll version is less than 6.0.6001.18215" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:org.mitre.oval:obj:1549"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115545"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115546" version="1" comment="Kernel32.dll version is greater than or equal to 6.0.6001.22000" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:org.mitre.oval:obj:1549"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115546"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115547" version="1" comment="Kernel32.dll version is less than 6.0.6001.22376" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:org.mitre.oval:obj:1549"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115547"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115577" version="1" comment="Schannel.dll version is greater than or equal to 6.0.6001.18000" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:gov.nist.fdcc.patch:obj:115481"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115254"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115578" version="1" comment="Schannel.dll version is greater than or equal to 6.0.6001.22000" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:gov.nist.fdcc.patch:obj:115481"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115256"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115593" version="1" comment="Rpcrt4.dll version is less than 5.1.2600.3555" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:org.mitre.oval:obj:2619"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115593"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115594" version="1" comment="Rpcrt4.dll version is less than 5.2.3790.4502" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:org.mitre.oval:obj:2619"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115594"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115595" version="1" comment="Rpcrt4.dll version is less than 5.1.2600.5795" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:org.mitre.oval:obj:2619"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115595"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115596" version="1" comment="Rpcrt4.dll version is greater than or equal to 6.0.6001.18000" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:2619"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115254"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115597" version="1" comment="Rpcrt4.dll version is less than 6.0.6001.18247" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:org.mitre.oval:obj:2619"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115597"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115598" version="1" comment="Rpcrt4.dll version is greater than or equal to 6.0.6001.22000" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:2619"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115256"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115599" version="1" comment="Rpcrt4.dll version is less than 6.0.6001.22417" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:org.mitre.oval:obj:2619"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115599"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115600" version="1" comment="Rpcrt4.dll version is greater than or equal to 6.0.6002.18000" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:2619"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115589"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115601" version="1" comment="Rpcrt4.dll version is less than 6.0.6002.18024" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:org.mitre.oval:obj:2619"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115601"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115602" version="1" comment="Rpcrt4.dll version is greater than or equal to 6.0.6002.22000" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:2619"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115591"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115603" version="1" comment="Rpcrt4.dll version is less than 6.0.6002.22120" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:org.mitre.oval:obj:2619"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115603"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115651" version="1" comment="Mshtml.dll version is less than 7.0.6000.16915" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:org.mitre.oval:obj:222"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115651"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115652" version="1" comment="Mshtml.dll version is less than 7.0.6000.21115" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:org.mitre.oval:obj:222"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115652"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115650" version="1" comment="Mshtml.dll version is greater than or equal to 7.0.6000.16915" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:222"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115650"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:1156599" version="1" comment="Mshtml.dll version is greater than or equal to 7.0.6000.21115" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:222"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:1156599"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115653" version="1" comment="Mshtml.dll version is less than 7.0.6001.18319" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:org.mitre.oval:obj:222"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115653"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115654" version="1" comment="Mshtml.dll version is less than 7.0.6001.22508" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:org.mitre.oval:obj:222"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115654"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115655" version="1" comment="Mshtml.dll version is less than 7.0.6002.18100" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:org.mitre.oval:obj:222"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115655"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115656" version="1" comment="Mshtml.dll version is less than 7.0.6002.22212" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:org.mitre.oval:obj:222"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115656"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115657" version="1" comment="Mshtml.dll version is greater than or equal to 7.0.6002.18000" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:222"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115657"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115658" version="1" comment="Mshtml.dll version is greater than or equal to 7.0.6002.22000" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:222"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115658"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115660" version="1" comment="Localspl.dll version is greater than or equal to 6.0.6002.22000" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:gov.nist.fdcc.patch:obj:115661"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115660"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115661" version="1" comment="Localspl.dll version is less than 5.1.2600.3569" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:gov.nist.fdcc.patch:obj:115661"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115661"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115662" version="1" comment="Localspl.dll version is less than 5.2.3790.4509" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:gov.nist.fdcc.patch:obj:115661"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115662"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115663" version="1" comment="Localspl.dll version is less than 5.1.2600.5809" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:gov.nist.fdcc.patch:obj:115661"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115663"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:1156631" version="1" comment="Localspl.dll version is less than 6.0.6001.18247" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:gov.nist.fdcc.patch:obj:115661"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:1156631"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115664" version="1" comment="Localspl.dll version is less than 6.0.6001.22417" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:gov.nist.fdcc.patch:obj:115661"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115664"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115665" version="1" comment="Localspl.dll version is less than 6.0.6002.18024" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:gov.nist.fdcc.patch:obj:115661"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115665"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115666" version="1" comment="Localspl.dll version is less than 6.0.6002.22120" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:gov.nist.fdcc.patch:obj:115661"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115666"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115667" version="1" comment="Localspl.dll version is greater than or equal to 6.0.6001.18000" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:gov.nist.fdcc.patch:obj:115661"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115254"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115668" version="1" comment="Localspl.dll version is greater than or equal to 6.0.6001.22000" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:gov.nist.fdcc.patch:obj:115661"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115256"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115669" version="1" comment="Localspl.dll version is greater than or equal to 6.0.6002.18000" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:gov.nist.fdcc.patch:obj:115661"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115589"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:30" version="1" comment="Microsoft XML Core Services 4 is installed." check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:191"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:49" version="2" comment="Microsoft XML Core Services 5 is installed." check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:47"/>
        </file_test>
        <family_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:org.mitre.oval:tst:99" version="1" comment="the installed operating system is part of the Microsoft Windows family" check_existence="at_least_one_exists" check="only one">
            <object object_ref="oval:org.mitre.oval:obj:99"/>
            <state state_ref="oval:org.mitre.oval:ste:99"/>
        </family_test>
        <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:164" version="1" comment="IIS Minor Version equals 0" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:938"/>
            <state state_ref="oval:org.mitre.oval:ste:165"/>
        </registry_test>
        <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:170" version="1" comment="IIS Major Version equals 6" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:1754"/>
            <state state_ref="oval:org.mitre.oval:ste:195"/>
        </registry_test>
        <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:178" version="1" comment="Internet Explorer 7 is installed" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:247"/>
            <state state_ref="oval:org.mitre.oval:ste:115"/>
        </registry_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:179" version="1" comment="Microsoft XML Core Services 3 is installed." check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:3"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:182" version="1" comment="Microsoft XML Core Services 6 is installed." check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:190"/>
        </file_test>
        <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:786" version="2" check_existence="at_least_one_exists" comment="Windows Media Player 9 is installed" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:593"/>
            <state state_ref="oval:org.mitre.oval:ste:705"/>
        </registry_test>
        <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:833" version="2" comment="Windows Media Player 10 is installed" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:630"/>
            <state state_ref="oval:org.mitre.oval:ste:746"/>
        </registry_test>
        <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:1357" version="1" comment="IIS 5.1 Minor Version" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:938"/>
            <state state_ref="oval:org.mitre.oval:ste:1219"/>
        </registry_test>
        <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:1633" version="2" comment="Outlook Express 6 for Windows XP/2003 is installed" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:566"/>
            <state state_ref="oval:org.mitre.oval:ste:1485"/>
        </registry_test>
        <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:2333" version="2" comment="Internet Explorer 6 (any patch level) is installed" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:247"/>
            <state state_ref="oval:org.mitre.oval:ste:2185"/>
        </registry_test>
        <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:2747" version="1" comment="a version of Windows for the ia64 architecture is installed" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:1576"/>
            <state state_ref="oval:org.mitre.oval:ste:2568"/>
        </registry_test>
        <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:2838" version="1" comment="Windows XP is installed" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:419"/>
            <state state_ref="oval:org.mitre.oval:ste:2657"/>
        </registry_test>
        <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:2843" version="1" comment="Win2K/XP/2003/Vista service pack 1 is installed" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:717"/>
            <state state_ref="oval:org.mitre.oval:ste:2662"/>
        </registry_test>
        <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:3019" version="1" comment="Win2K/XP/2003 service pack 2 is installed" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:717"/>
            <state state_ref="oval:org.mitre.oval:ste:2827"/>
        </registry_test>
        <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:3081" version="1" comment="IIS major version equals 5" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:1754"/>
            <state state_ref="oval:org.mitre.oval:ste:2886"/>
        </registry_test>
        <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:3203" version="1" comment="PlayerVersion is greater than 11.0.0.0" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:2581"/>
            <state state_ref="oval:org.mitre.oval:ste:3577"/>
        </registry_test>
        <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:3653" version="2" comment="a version of Windows for the x64 architecture is installed" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:1576"/>
            <state state_ref="oval:org.mitre.oval:ste:3180"/>
        </registry_test>
        <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:3823" version="1" comment="a version of Windows for the x86 architecture is installed" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:1576"/>
            <state state_ref="oval:org.mitre.oval:ste:3649"/>
        </registry_test>
        <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:3839" version="2" comment="Microsoft Office 2007 is installed" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:1826"/>
            <state state_ref="oval:org.mitre.oval:ste:3218"/>
        </registry_test>
        <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:4192" version="1" comment="PlayerVersion is less than 12.0.0.0" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:2581"/>
            <state state_ref="oval:org.mitre.oval:ste:3702"/>
        </registry_test>
        <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:6736" version="1" comment="DirectX 9.0c Installed" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:499"/>
            <state state_ref="oval:org.mitre.oval:ste:3244"/>
        </registry_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:7093" version="1" comment="the version of Bthport.sys is less than 5.1.2600.3351" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:org.mitre.oval:obj:5807"/>
            <state state_ref="oval:org.mitre.oval:ste:3064"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:7491" version="1" comment="the version of Bthport.sys is less than 6.0.6001.18064" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:org.mitre.oval:obj:5807"/>
            <state state_ref="oval:org.mitre.oval:ste:3472"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:7565" version="1" comment="The version of Rmcast.sys is less than 5.1.2600.5598." check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:org.mitre.oval:obj:41"/>
            <state state_ref="oval:org.mitre.oval:ste:3613"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:7634" version="1" comment="The version of Rmcast.sys is less than 5.2.3790.4290." check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:org.mitre.oval:obj:41"/>
            <state state_ref="oval:org.mitre.oval:ste:2994"/>
        </file_test>
        <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:7697" version="1" comment="Windows Server 2008 is installed" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:5590"/>
            <state state_ref="oval:org.mitre.oval:ste:3207"/>
        </registry_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:7725" version="1" comment="the version of Quartz.dll is less than 6.5.2600.5596" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:704"/>
            <state state_ref="oval:org.mitre.oval:ste:3466"/>
        </file_test>
        <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:7734" version="1" comment="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{40F23EB7-B397-4285-8F3C-AACE4FA40309}!Compatibility Flags is not equal to 0x00000400" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:5016"/>
            <state state_ref="oval:org.mitre.oval:ste:3992"/>
        </registry_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:7805" version="1" comment="Bthport.sys does not exist" check_existence="none_exist" check="all">
            <object object_ref="oval:org.mitre.oval:obj:5807"/>
        </file_test>
        <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:7814" version="1" comment="Win2K/XP/2003 service pack 3 is installed" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:717"/>
            <state state_ref="oval:org.mitre.oval:ste:3794"/>
        </registry_test>
        <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:7914" version="1" comment="Windows Vista is installed" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:5590"/>
            <state state_ref="oval:org.mitre.oval:ste:3828"/>
        </registry_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:7926" version="1" comment="the version of Quartz.dll is less than 6.5.2600.3367" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:704"/>
            <state state_ref="oval:org.mitre.oval:ste:3505"/>
        </file_test>
        <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:7937" version="1" comment="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{40F23EB7-B397-4285-8F3C-AACE4FA40309}!Compatibility Flags does not exist" check_existence="none_exist" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:5016"/>
        </registry_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:8009" version="1" comment="the version of Bthport.sys is less than 5.1.2600.5580" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:org.mitre.oval:obj:5807"/>
            <state state_ref="oval:org.mitre.oval:ste:3991"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:8024" version="1" comment="the version of Quartz.dll is less than 6.5.3790.4283" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:704"/>
            <state state_ref="oval:org.mitre.oval:ste:3845"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:8091" version="1" comment="The version of Rmcast.sys is less than 5.1.2600.3369." check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:org.mitre.oval:obj:41"/>
            <state state_ref="oval:org.mitre.oval:ste:3114"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:8092" version="1" comment="the version of Quartz.dll is less than 6.6.6001.18063" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:704"/>
            <state state_ref="oval:org.mitre.oval:ste:3168"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:8200" version="1" comment="the version of Ipsecsvc.dll is less than 2001.12.4720.4282" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:org.mitre.oval:obj:6432"/>
            <state state_ref="oval:org.mitre.oval:ste:4318"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:8248" version="1" comment="the version of Ipsecsvc.dll is less than 6.0.2900.5579" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:385"/>
            <state state_ref="oval:org.mitre.oval:ste:4213"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:8469" version="1" comment="Wmex.dll version is less than 9.0.0.3359" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:6278"/>
            <state state_ref="oval:org.mitre.oval:ste:4350"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:8573" version="1" comment="Mrxsmb.sys version is less than 5.1.2600.3467" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:326"/>
            <state state_ref="oval:org.mitre.oval:ste:4409"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:8577" version="1" comment="Mshtml.dll version is less than 7.0.6000.16735" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:222"/>
            <state state_ref="oval:org.mitre.oval:ste:4336"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:8587" version="1" comment="Wmex.dll version is greater than or equal to  10.0.0.0" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:6278"/>
            <state state_ref="oval:org.mitre.oval:ste:3902"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:8612" version="1" comment="Win32k.sys version is less than 5.1.2600.3446" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:org.mitre.oval:obj:570"/>
            <state state_ref="oval:org.mitre.oval:ste:4286"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:8662" version="1" comment="Wmpeffects.dll version is less than 11.0.6001.7002" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:org.mitre.oval:obj:6244"/>
            <state state_ref="oval:org.mitre.oval:ste:4325"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:8780" version="1" comment="Wmex.dll version is greater than or equal to  9.0.0.0" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:6278"/>
            <state state_ref="oval:org.mitre.oval:ste:4304"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:8808" version="1" comment="Mrxsmb10.sys version is less than 6.0.6001.18130" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:6575"/>
            <state state_ref="oval:org.mitre.oval:ste:4589"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:8857" version="1" comment="Win32spl.dll version is less than 5.2.3790.4371" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:6595"/>
            <state state_ref="oval:org.mitre.oval:ste:4397"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:8858" version="1" comment="Wmex.dll version is less than to  10.0.0.0" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:6278"/>
            <state state_ref="oval:org.mitre.oval:ste:4334"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:8887" version="1" comment="Wmex.dll version is less than to  10.0.0.0" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:6278"/>
            <state state_ref="oval:org.mitre.oval:ste:4042"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:8902" version="1" comment="Mshtml.dll version is less than 6.0.3790.4357" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:222"/>
            <state state_ref="oval:org.mitre.oval:ste:4118"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:8911" version="1" comment="the version of Ipsecsvc.dll is less than 6.0.6001.18094" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:5597"/>
            <state state_ref="oval:org.mitre.oval:ste:4307"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:8928" version="1" comment="Win32k.sys version is less than 6.0.6001.18141" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:org.mitre.oval:obj:570"/>
            <state state_ref="oval:org.mitre.oval:ste:4443"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:8951" version="1" comment="the version of Ipsecsvc.dll is less than 6.0.2900.3350" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:385"/>
            <state state_ref="oval:org.mitre.oval:ste:4126"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:8968" version="1" comment="the version of Ipsecsvc.dll is less than 2001.12.6931.18057" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:org.mitre.oval:obj:6432"/>
            <state state_ref="oval:org.mitre.oval:ste:4368"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:9011" version="1" comment="Win32spl.dll version is less than 6.0.6001.18119" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:6595"/>
            <state state_ref="oval:org.mitre.oval:ste:4104"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:9013" version="1" comment="the version of Ipsecsvc.dll is less than 2001.12.4414.320" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:org.mitre.oval:obj:6432"/>
            <state state_ref="oval:org.mitre.oval:ste:4129"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:9019" version="1" comment="the version of Ipsecsvc.dll is less than 2001.12.4414.706" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:org.mitre.oval:obj:6432"/>
            <state state_ref="oval:org.mitre.oval:ste:3371"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:9030" version="1" comment="Wmex.dll version is less than 10.0.0.3817" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:6278"/>
            <state state_ref="oval:org.mitre.oval:ste:4058"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:9036" version="1" comment="Wmpeffects.dll version is less than 11.0.5721.5252" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:org.mitre.oval:obj:6244"/>
            <state state_ref="oval:org.mitre.oval:ste:4176"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:9051" version="1" comment="the version of Ipsecsvc.dll is less than 6.0.6001.18049" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:385"/>
            <state state_ref="oval:org.mitre.oval:ste:3770"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:9058" version="1" comment="Netapi32.dll version is less than 5.2.3790.4392" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:160"/>
            <state state_ref="oval:org.mitre.oval:ste:4375"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:9071" version="1" comment="msxml3.dll version is less than 8.100.1048.0" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:3"/>
            <state state_ref="oval:org.mitre.oval:ste:4400"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:9090" version="1" comment="Netapi32.dll version is less than 6.0.6001.22288" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:160"/>
            <state state_ref="oval:org.mitre.oval:ste:4418"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:9099" version="1" comment="Mshtml.dll version is less than 6.0.2900.5659" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:222"/>
            <state state_ref="oval:org.mitre.oval:ste:4193"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:9112" version="1" comment="Win32k.sys version is less than 5.2.3790.4375" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:org.mitre.oval:obj:570"/>
            <state state_ref="oval:org.mitre.oval:ste:4340"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:9140" version="1" comment="Netapi32.dll version is less than 6.0.6001.18157" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:160"/>
            <state state_ref="oval:org.mitre.oval:ste:4117"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:9185" version="1" comment="the version of Ipsecsvc.dll is less than 6.0.3790.4325" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:385"/>
            <state state_ref="oval:org.mitre.oval:ste:3939"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:9234" version="1" comment="msxml5.dll version is less than 5.20.1087.0" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:47"/>
            <state state_ref="oval:org.mitre.oval:ste:4389"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:9266" version="1" comment="Netapi32.dll version is less than 5.1.2600.5694" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:160"/>
            <state state_ref="oval:org.mitre.oval:ste:4450"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:9281" version="1" comment="Win32spl.dll version is less than 5.1.2600.3435" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:6595"/>
            <state state_ref="oval:org.mitre.oval:ste:4186"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:9293" version="1" comment="Win32k.sys version is less than 5.1.2600.5676" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:org.mitre.oval:obj:570"/>
            <state state_ref="oval:org.mitre.oval:ste:4331"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:9308" version="1" comment="Mrxsmb.sys version is less than 5.1.2600.5700" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:326"/>
            <state state_ref="oval:org.mitre.oval:ste:4094"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:9314" version="1" comment="Netapi32.dll version is less than 5.1.2600.3462" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:160"/>
            <state state_ref="oval:org.mitre.oval:ste:4200"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:9320" version="1" comment="Mshtml.dll version is less than 6.0.2900.3429" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:222"/>
            <state state_ref="oval:org.mitre.oval:ste:4439"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:9352" version="1" comment="Win32spl.dll version is less than 5.1.2600.5664" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:6595"/>
            <state state_ref="oval:org.mitre.oval:ste:4312"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:9476" version="1" comment="Mrxsmb.sys version is less than 5.2.3790.4369" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:326"/>
            <state state_ref="oval:org.mitre.oval:ste:4438"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:9477" version="1" comment="Mrxsmb10.sys version is less than 6.0.6001.22252" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:6575"/>
            <state state_ref="oval:org.mitre.oval:ste:4578"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:9510" version="1" comment="gdi32.dll version is less than 6.0.6001.18159" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:org.mitre.oval:obj:279"/>
            <state state_ref="oval:org.mitre.oval:ste:4482"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:9530" version="1" comment="msxml6.dll version is less than 6.20.1099.0" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:190"/>
            <state state_ref="oval:org.mitre.oval:ste:4631"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:9539" version="1" comment="msxml4.dll version is less than 4.20.9870.0" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:191"/>
            <state state_ref="oval:org.mitre.oval:ste:4636"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:9758" version="1" comment="the version of Wmp.dll is less than 10.0.0.4074" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:592"/>
            <state state_ref="oval:org.mitre.oval:ste:5384"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:9769" version="1" comment="the version of Wmp.dll is less than 11.0.5721.5268" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:592"/>
            <state state_ref="oval:org.mitre.oval:ste:5244"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:9966" version="1" comment="the version of Msoe.dll is less than 6.0.2900.3598" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:gov.nist.fdcc.patch:obj:115257"/>
            <state state_ref="oval:org.mitre.oval:ste:5305"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:10001" version="1" comment="the version of Mswebdvd.dll is less than 6.5.2600.5857" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:org.mitre.oval:obj:7106"/>
            <state state_ref="oval:org.mitre.oval:ste:5240"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:10003" version="1" comment="the version of Wmp.dll is less than 11.0.6002.18065" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:592"/>
            <state state_ref="oval:org.mitre.oval:ste:5276"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:10010" version="1" comment="the version of Wmp.dll is less than 9.0.0.4507" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:592"/>
            <state state_ref="oval:org.mitre.oval:ste:5269"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:10183" version="1" comment="the version of Wmp.dll is less than 9.0.0.3271" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:592"/>
            <state state_ref="oval:org.mitre.oval:ste:5202"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:10251" version="1" comment="the version of Spwmp.dll is greater than or equal 6.0.6001.22000" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:6937"/>
            <state state_ref="oval:org.mitre.oval:ste:4709"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:10291" version="1" comment="the version of Wwmp.dll is less than 10.0.0.4006" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:559"/>
            <state state_ref="oval:org.mitre.oval:ste:4958"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:10297" version="1" comment="the version of Msoe.dll is less than 6.0.2900.5843" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:gov.nist.fdcc.patch:obj:115257"/>
            <state state_ref="oval:org.mitre.oval:ste:5369"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:10473" version="1" comment="the version of Spwmp.dll is greater than or equal 6.0.6001.18000" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:6937"/>
            <state state_ref="oval:org.mitre.oval:ste:4557"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:10482" version="1" comment="the version of dhtmled.ocx is less than 6.1.0.9247" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:org.mitre.oval:obj:377"/>
            <state state_ref="oval:org.mitre.oval:ste:4967"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:10523" version="1" comment="the version of Wmp.dll is less than 11.0.6001.7007" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:592"/>
            <state state_ref="oval:org.mitre.oval:ste:5058"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:10563" version="1" comment="the version of atl.dll is less than 3.5.2284.2" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:115770"/>
            <state state_ref="oval:org.mitre.oval:ste:4971"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:10588" version="1" comment="the version of Msoe.dll is less than 6.0.3790.4548" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:gov.nist.fdcc.patch:obj:115257"/>
            <state state_ref="oval:org.mitre.oval:ste:5357"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:10624" version="1" comment="the version of Spwmp.dll is greater than or equal 6.0.6002.22000" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:6937"/>
            <state state_ref="oval:org.mitre.oval:ste:4321"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:10648" version="1" comment="the version of Spwmp.dll is greater than or equal 6.0.6002.18000" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:6937"/>
            <state state_ref="oval:org.mitre.oval:ste:4510"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:10694" version="1" comment="the version of Mswebdvd.dll is less than 6.5.3790.4564" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:org.mitre.oval:obj:7106"/>
            <state state_ref="oval:org.mitre.oval:ste:5076"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:10699" version="1" comment="the version of Wmp.dll is less than 11.0.6002.22172" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:592"/>
            <state state_ref="oval:org.mitre.oval:ste:5290"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:10763" version="1" comment="the version of Mswebdvd.dll is less than 6.5.2600.3610" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:org.mitre.oval:obj:7106"/>
            <state state_ref="oval:org.mitre.oval:ste:4422"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:org.mitre.oval:tst:10759" version="1" comment="the version of Wmp.dll is less than 11.0.6001.7114" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:592"/>
            <state state_ref="oval:org.mitre.oval:ste:4811"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115710" version="1" comment="Fontsub.dll version is less than 5.1.2600.3589" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:gov.nist.fdcc.patch:obj:115710"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115710"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115711" version="1" comment="Fontsub.dll version is less than 5.2.3790.4530" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:gov.nist.fdcc.patch:obj:115710"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115711"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115712" version="1" comment="Fontsub.dll version is less than 5.1.2600.5830" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:gov.nist.fdcc.patch:obj:115710"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115712"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115713" version="1" comment="Fontsub.dll version is greater than or equal to 6.0.6001.18000" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:gov.nist.fdcc.patch:obj:115710"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115713"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115714" version="1" comment="Fontsub.dll version is less than 6.0.6001.18272" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:gov.nist.fdcc.patch:obj:115710"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115714"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115715" version="1" comment="Fontsub.dll version is greater than or equal to 6.0.6001.22000" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:gov.nist.fdcc.patch:obj:115710"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115715"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115716" version="1" comment="Fontsub.dll version is less than 6.0.6001.22450" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:gov.nist.fdcc.patch:obj:115710"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115716"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115717" version="1" comment="Fontsub.dll version is greater than or equal to 6.0.6002.18000" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:gov.nist.fdcc.patch:obj:115710"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115717"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115718" version="1" comment="Fontsub.dll version is less than 6.0.6002.18051" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:gov.nist.fdcc.patch:obj:115710"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115718"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115719" version="1" comment="Fontsub.dll version is greater than or equal to 6.0.6002.22000" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:gov.nist.fdcc.patch:obj:115710"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115719"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:1157190" version="1" comment="Fontsub.dll version is less than 6.0.6002.22152" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:gov.nist.fdcc.patch:obj:115710"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:1157190"/>
        </file_test>
        <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115721" version="1" comment="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{0002E531-0000-0000-C000-000000000046}!Compatibility Flags does not exist" check_existence="none_exist" check="at least one">
            <object object_ref="oval:gov.nist.fdcc.patch:obj:115721"/>
        </registry_test>
        <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115722" version="1" comment="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{0002E531-0000-0000-C000-000000000046}!Compatibility Flags is not equal to 0x00000400" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:gov.nist.fdcc.patch:obj:115721"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115722"/>
        </registry_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115780" version="1" comment="System.web.dll version is less than to 2.0.50727.1871" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:org.mitre.oval:obj:115780"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115780"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115781" version="1" comment="System.web.dll version is less than to 2.0.50727.1871" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:org.mitre.oval:obj:115781"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115780"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115782" version="1" comment="System.web.dll version is greater than or equal to 2.0.50727.3601" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:org.mitre.oval:obj:115780"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115782"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115783" version="1" comment="System.web.dll version is less than 2.0.50727.4049" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:org.mitre.oval:obj:115780"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115783"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115784" version="1" comment="System.web.dll version is greater than or equal to 2.0.50727.3601" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:org.mitre.oval:obj:115781"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115782"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115785" version="1" comment="System.web.dll version is less than 2.0.50727.4049" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:org.mitre.oval:obj:115781"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115783"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115786" version="1" comment="System.web.dll version is less than 2.0.50727.3601" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:org.mitre.oval:obj:115780"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115786"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115787" version="1" comment="System.web.dll version is less than 2.0.50727.3601" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:org.mitre.oval:obj:115781"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115786"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115770" version="1" comment="Atl.dll version is less than 3.5.2284.2" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:org.mitre.oval:obj:115770"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115770"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115790" version="1" comment="Avifil32.dll version is less than 5.1.2600.3585" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:org.mitre.oval:obj:115790"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115790"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115791" version="1" comment="Avifil32.dll version is less than 5.1.2600.5827" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:org.mitre.oval:obj:115790"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115791"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115792" version="1" comment="Avifil32.dll version is less than 5.2.3790.4527" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:org.mitre.oval:obj:115790"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115792"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115793" version="1" comment="Avifil32.dll version is greater than or equal to 6.0.6001.18000" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:115790"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115254"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115794" version="1" comment="Avifil32.dll version is less than 6.0.6001.18270" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:org.mitre.oval:obj:115790"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115794"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115795" version="1" comment="Avifil32.dll version is greater than or equal to 6.0.6001.22000" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:115790"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115256"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115796" version="1" comment="Avifil32.dll version is less than 6.0.6001.22447" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:org.mitre.oval:obj:115790"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115796"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115797" version="1" comment="Avifil32.dll version is greater than or equal to 6.0.6002.18000" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:115790"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115589"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115798" version="1" comment="Avifil32.dll version is less than 6.0.6002.18049" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:org.mitre.oval:obj:115790"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115798"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115799" version="1" comment="Avifil32.dll version is greater than or equal to 6.0.6002.22000" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:115790"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115591"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:1157991" version="1" comment="Avifil32.dll version is less than 6.0.6002.22150" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:org.mitre.oval:obj:115790"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:1157991"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115740" version="1" comment="Wkssvc.dll version is less than 5.1.2600.3584" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:org.mitre.oval:obj:115740"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115740"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115741" version="1" comment="Wkssvc.dll version is less than 5.1.2600.5826" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:org.mitre.oval:obj:115740"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115741"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115742" version="1" comment="Wkssvc.dll version is less than 5.2.3790.4530" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:org.mitre.oval:obj:115740"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115742"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115743" version="1" comment="Wkssvc.dll version is greater than or equal to 6.0.6001.18000" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:115740"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115254"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115744" version="1" comment="Wkssvc.dll version is less than 6.0.6001.18270" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:org.mitre.oval:obj:115740"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115744"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115745" version="1" comment="Wkssvc.dll version is greater than or equal to 6.0.6001.22000" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:115740"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115256"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115746" version="1" comment="Wkssvc.dll version is less than 6.0.6001.22447" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:org.mitre.oval:obj:115740"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115746"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115747" version="1" comment="Wkssvc.dll version is greater than or equal to 6.0.6002.18000" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:115740"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115589"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115748" version="1" comment="Wkssvc.dll version is less than 6.0.6002.18049" check_existence="at_least_one_exists" check="all">
            <object object_ref="oval:org.mitre.oval:obj:115740"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115748"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:115749" version="1" comment="Wkssvc.dll version is greater than or equal to 6.0.6002.22000" check_existence="at_least_one_exists" check="at least one">
            <object object_ref="oval:org.mitre.oval:obj:115740"/>
            <state state_ref="oval:gov.nist.fdcc.patch:ste:115591"/>
        </file_test>
        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:gov.nist.fdcc.patch:tst:11