<?xml version="1.0" encoding="UTF-8"?>
<oval_definitions xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows windows-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#independent independent-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5 oval-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-common-5 oval-common-schema.xsd" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:oval="http://oval.mitre.org/XMLSchema/oval-common-5" xmlns:oval-def="http://oval.mitre.org/XMLSchema/oval-definitions-5">
  <generator>
    <oval:product_name>The OVAL Repository</oval:product_name>
    <oval:schema_version>5.4</oval:schema_version>
    <oval:timestamp>2008-09-06T09:08:00.542-04:00</oval:timestamp>
  </generator>
  <definitions>
    <definition id="oval:org.mitre.oval:def:748" version="1" class="patch">
      <metadata>
        <title>patch IE7-KB928090-WindowsServer2003-x64-enu.exe should be installed</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Internet Explorer 7</product>
        </affected>
        <reference source="VENDOR" ref_id="IE7-KB928090-WindowsServer2003-x64-enu.exe"/>
        <description>The patch IE7-KB928090-WindowsServer2003-x64-enu.exe that addresses the vulnerabilities discussed in Microsoft Security Bulletin MS07-016 should be installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-03-05T09:00:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <status_change date="2007-03-05T09:00:00">DRAFT</status_change>
            <status_change date="2007-03-21T16:17:26.559-04:00">INTERIM</status_change>
            <status_change date="2007-04-10T13:44:28.424-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:org.mitre.oval:def:720" comment="Microsoft Windows XP Professional x64 Edition SP1 is installed"/>
        <extend_definition definition_ref="oval:org.mitre.oval:def:627" comment="Internet Explorer 7 is installed"/>
        <criteria operator="OR">
          <criterion test_ref="oval:org.mitre.oval:tst:3721" comment="the version of Iexplore.exe is less than 7.0.6000.16414"/>
          <criterion test_ref="oval:org.mitre.oval:tst:3876" comment="the version of Mshtml.dll is less than 7.0.6000.16414"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:718" version="1" class="patch">
      <metadata>
        <title>patch IE7-KB928090-WindowsServer2003-x64-enu.exe should be installed</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Internet Explorer 7</product>
        </affected>
        <reference source="VENDOR" ref_id="IE7-KB928090-WindowsServer2003-x64-enu.exe"/>
        <description>The patch IE7-KB928090-WindowsServer2003-x64-enu.exe that addresses the vulnerabilities discussed in Microsoft Security Bulletin MS07-016 should be installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-03-05T09:00:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <status_change date="2007-03-05T09:00:00">DRAFT</status_change>
            <status_change date="2007-03-21T16:17:24.794-04:00">INTERIM</status_change>
            <status_change date="2007-04-10T13:44:27.752-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:org.mitre.oval:def:730" comment="Microsoft Windows Server 2003 (x64) is installed"/>
        <extend_definition definition_ref="oval:org.mitre.oval:def:627" comment="Internet Explorer 7 is installed"/>
        <criteria operator="OR">
          <criterion test_ref="oval:org.mitre.oval:tst:3721" comment="the version of Iexplore.exe is less than 7.0.6000.16414"/>
          <criterion test_ref="oval:org.mitre.oval:tst:3876" comment="the version of Mshtml.dll is less than 7.0.6000.16414"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:684" version="2" class="patch">
      <metadata>
        <title>patch IE7-KB929969-WindowsXP-x86-enu.exe should be installed</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Internet Explorer 7</product>
        </affected>
        <reference source="VENDOR" ref_id="IE7-KB929969-WindowsXP-x86-enu.exe"/>
        <description>The patch IE7-KB929969-WindowsXP-x86-enu.exe that addresses the vulnerabilities discussed in Microsoft Security Bulletin MS07-004 should be installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-03-05T09:00:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <status_change date="2007-03-05T09:00:00">DRAFT</status_change>
            <status_change date="2007-03-21T16:17:24.132-04:00">INTERIM</status_change>
            <status_change date="2007-04-10T13:44:27.264-04:00">ACCEPTED</status_change>
            <modified comment="Changed object reference to refer to the registry instead of a hard-coded path" date="2008-04-14T13:12:00.428-04:00">
              <contributor organization="GFI Software">Clifford Farrugia</contributor>
            </modified>
            <status_change date="2008-04-14T13:14:45.283-04:00">INTERIM</status_change>
            <status_change date="2008-05-05T04:00:26.337-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:org.mitre.oval:def:754" comment="Microsoft Windows XP (x86) SP2 is installed"/>
        <extend_definition definition_ref="oval:org.mitre.oval:def:627" comment="Internet Explorer 7 is installed"/>
        <criterion test_ref="oval:org.mitre.oval:tst:3946" comment="the version of Vgx.dll is less than 7.0.6000.16386"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:679" version="2" class="patch">
      <metadata>
        <title>IE7-KB929969-WindowsServer2003-ia64-enu.exe should be installed</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Internet Explorer 7</product>
        </affected>
        <reference source="VENDOR" ref_id="IE7-KB929969-WindowsServer2003-ia64-enu.exe"/>
        <description>The patch IE7-KB929969-WindowsServer2003-ia64-enu.exe that addresses the vulnerabilities discussed in Microsoft Security Bulletin MS07-004 should be installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-03-05T09:00:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <status_change date="2007-03-05T09:00:00">DRAFT</status_change>
            <status_change date="2007-03-21T16:17:23.989-04:00">INTERIM</status_change>
            <status_change date="2007-04-10T13:44:27.086-04:00">ACCEPTED</status_change>
            <modified comment="Changed object reference to refer to the registry instead of a hard-coded path" date="2008-04-14T13:12:00.428-04:00">
              <contributor organization="GFI Software">Clifford Farrugia</contributor>
            </modified>
            <status_change date="2008-04-14T13:14:44.874-04:00">INTERIM</status_change>
            <status_change date="2008-05-05T04:00:26.024-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR">
          <extend_definition definition_ref="oval:org.mitre.oval:def:396" comment="Microsoft Windows Server 2003 (ia64) Gold is installed"/>
          <extend_definition definition_ref="oval:org.mitre.oval:def:1205" comment="Microsoft Windows Server 2003 (ia64) SP1 is installed"/>
        </criteria>
        <extend_definition definition_ref="oval:org.mitre.oval:def:627" comment="Internet Explorer 7 is installed"/>
        <criterion test_ref="oval:org.mitre.oval:tst:3946" comment="the version of Vgx.dll is less than 7.0.6000.16386"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:396" version="2" class="inventory">
      <metadata>
        <title>Microsoft Windows Server 2003 (ia64) Gold is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/o:microsoft:windows_2003::gold:itanium"/>
        <description>A version of Microsoft Windows Server 2003 (ia64) Gold is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-03-05T09:00:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <status_change date="2007-03-05T09:00:00">DRAFT</status_change>
            <status_change date="2007-03-21T16:17:18.086-04:00">INTERIM</status_change>
            <status_change date="2007-04-10T13:44:26.147-04:00">ACCEPTED</status_change>
            <modified comment="Changed the CPE reference" date="2008-04-04T11:17:00.401-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2008-04-04T11:26:52.428-04:00">INTERIM</status_change>
            <status_change date="2008-04-21T04:00:18.926-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/>
        <criterion comment="a version of Microsoft Windows Server 2003 is installed" test_ref="oval:org.mitre.oval:tst:4"/>
        <criterion comment="a version of Windows for the ia64 architecture is installed" test_ref="oval:org.mitre.oval:tst:2747"/>
        <criterion negate="true" comment="Win2K/XP/2003 is patched" test_ref="oval:org.mitre.oval:tst:2437"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:347" version="1" class="patch">
      <metadata>
        <title>patch IE7-KB928090-WindowsServer2003-x86-enu.exe should be installed</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Internet Explorer 7</product>
        </affected>
        <reference source="VENDOR" ref_id="IE7-KB928090-WindowsServer2003-x86-enu.exe"/>
        <description>The patch IE7-KB928090-WindowsServer2003-x86-enu.exe that addresses the vulnerabilities discussed in Microsoft Security Bulletin MS07-016 should be installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-03-05T09:00:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <status_change date="2007-03-05T09:00:00">DRAFT</status_change>
            <status_change date="2007-03-21T16:17:16.987-04:00">INTERIM</status_change>
            <status_change date="2007-04-10T13:44:25.971-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:org.mitre.oval:def:565" comment="Microsoft Windows Server 2003 (x86) SP1 is installed"/>
        <extend_definition definition_ref="oval:org.mitre.oval:def:627" comment="Internet Explorer 7 is installed"/>
        <criteria operator="OR">
          <criterion test_ref="oval:org.mitre.oval:tst:3721" comment="the version of Iexplore.exe is less than 7.0.6000.16414"/>
          <criterion test_ref="oval:org.mitre.oval:tst:3876" comment="the version of Mshtml.dll is less than 7.0.6000.16414"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:289" version="2" class="patch">
      <metadata>
        <title>patch IE7-KB929969-WindowsServer2003-x86-enu.exe should be installed</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Internet Explorer 7</product>
        </affected>
        <reference source="VENDOR" ref_id="IE7-KB929969-WindowsServer2003-x86-enu.exe"/>
        <description>The patch IE7-KB929969-WindowsServer2003-x86-enu.exe that addresses the vulnerabilities discussed in Microsoft Security Bulletin MS07-004 should be installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-03-05T09:00:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <status_change date="2007-03-05T09:00:00">DRAFT</status_change>
            <status_change date="2007-03-21T16:17:14.690-04:00">INTERIM</status_change>
            <status_change date="2007-04-10T13:44:25.251-04:00">ACCEPTED</status_change>
            <modified comment="Changed object reference to refer to the registry instead of a hard-coded path" date="2008-04-14T13:12:00.428-04:00">
              <contributor organization="GFI Software">Clifford Farrugia</contributor>
            </modified>
            <status_change date="2008-04-14T13:14:45.473-04:00">INTERIM</status_change>
            <status_change date="2008-05-05T04:00:19.395-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR">
          <extend_definition definition_ref="oval:org.mitre.oval:def:165" comment="Microsoft Windows Server 2003 (x86) Gold is installed"/>
          <extend_definition definition_ref="oval:org.mitre.oval:def:565" comment="Microsoft Windows Server 2003 (x86) SP1 is installed"/>
        </criteria>
        <extend_definition definition_ref="oval:org.mitre.oval:def:627" comment="Internet Explorer 7 is installed"/>
        <criterion test_ref="oval:org.mitre.oval:tst:3946" comment="the version of Vgx.dll is less than 7.0.6000.16386"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:565" version="2" class="inventory">
      <metadata>
        <title>Microsoft Windows Server 2003 SP1 (x86) is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/o:microsoft:windows_2003::sp1:x86"/>
        <description>A version of Microsoft Windows Server 2003 Service Pack 1 (x86) is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-07-25T12:05:33">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-07-27T20:15:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-09-27T12:29:31.197-04:00">INTERIM</status_change>
            <status_change date="2006-10-16T15:58:44.696-04:00">ACCEPTED</status_change>
            <modified comment="Changed the CPE reference" date="2008-04-04T11:17:00.371-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2008-04-04T11:28:41.395-04:00">INTERIM</status_change>
            <status_change date="2008-04-21T04:00:23.334-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/>
        <criterion comment="a version of Microsoft Windows Server 2003 is installed" test_ref="oval:org.mitre.oval:tst:4"/>
        <criterion comment="a version of Windows for the x86 architecture is installed" test_ref="oval:org.mitre.oval:tst:3823"/>
        <criterion comment="Win2K/XP/2003/Vista service pack 1 is installed" test_ref="oval:org.mitre.oval:tst:2843"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:165" version="2" class="inventory">
      <metadata>
        <title>Microsoft Windows Server 2003 (x86) Gold is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/o:microsoft:windows_2003::gold:x86"/>
        <description>A version of Microsoft Windows Server 2003 (x86) Gold is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-07-25T12:05:33">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-07-27T20:15:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-09-27T12:28:51.952-04:00">INTERIM</status_change>
            <status_change date="2006-10-16T15:57:23.741-04:00">ACCEPTED</status_change>
            <modified comment="Changed the CPE reference" date="2008-04-04T11:17:00.247-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2008-04-04T11:23:42.269-04:00">INTERIM</status_change>
            <status_change date="2008-04-21T04:00:13.099-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/>
        <criterion comment="a version of Microsoft Windows Server 2003 is installed" test_ref="oval:org.mitre.oval:tst:4"/>
        <criterion comment="a version of Windows for the x86 architecture is installed" test_ref="oval:org.mitre.oval:tst:3823"/>
        <criterion negate="true" comment="Win2K/XP/2003 is patched" test_ref="oval:org.mitre.oval:tst:2437"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:286" version="2" class="patch">
      <metadata>
        <title>patch IE7-KB929969-WindowsServer2003-x64-enu.exe should be installed</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Internet Explorer 7</product>
        </affected>
        <reference source="VENDOR" ref_id="IE7-KB929969-WindowsServer2003-x64-enu.exe"/>
        <description>The patch IE7-KB929969-WindowsServer2003-x64-enu.exe that addresses the vulnerabilities discussed in Microsoft Security Bulletin MS07-004 should be installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-03-05T09:00:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <status_change date="2007-03-05T09:00:00">DRAFT</status_change>
            <status_change date="2007-03-21T16:17:14.535-04:00">INTERIM</status_change>
            <status_change date="2007-04-10T13:44:25.006-04:00">ACCEPTED</status_change>
            <modified comment="Changed object reference to refer to the registry instead of a hard-coded path" date="2008-04-14T13:12:00.428-04:00">
              <contributor organization="GFI Software">Clifford Farrugia</contributor>
            </modified>
            <status_change date="2008-04-14T13:14:44.635-04:00">INTERIM</status_change>
            <status_change date="2008-05-05T04:00:19.104-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:org.mitre.oval:def:720" comment="Microsoft Windows XP Professional x64 Edition SP1 is installed"/>
        <extend_definition definition_ref="oval:org.mitre.oval:def:627" comment="Internet Explorer 7 is installed"/>
        <criterion test_ref="oval:org.mitre.oval:tst:3946" comment="the version of Vgx.dll is less than 7.0.6000.16386"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:720" version="2" class="inventory">
      <metadata>
        <title>Microsoft Windows XP Professional x64 Edition SP1 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/o:microsoft:windows_xp::sp1:x64"/>
        <description>A version of Microsoft Windows XP Professional x64 Edition Service Pack 1 is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-03-05T09:00:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <status_change date="2007-03-05T09:00:00">DRAFT</status_change>
            <status_change date="2007-03-21T16:17:24.909-04:00">INTERIM</status_change>
            <status_change date="2007-04-10T13:44:27.909-04:00">ACCEPTED</status_change>
            <modified comment="Changed the CPE reference" date="2008-04-04T11:17:00.527-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2008-04-04T11:28:52.548-04:00">INTERIM</status_change>
            <status_change date="2008-04-21T04:00:23.716-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/>
        <criterion comment="a version of Microsoft Windows XP is installed" test_ref="oval:org.mitre.oval:tst:3"/>
        <criterion comment="a version of Windows for the x64 architecture is installed" test_ref="oval:org.mitre.oval:tst:3653"/>
        <criterion comment="Win2K/XP/2003/Vista service pack 1 is installed" test_ref="oval:org.mitre.oval:tst:2843"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:283" version="1" class="patch">
      <metadata>
        <title>patch IE7-KB928090-WindowsXP-x86-enu.exe should be installed</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Internet Explorer 7</product>
        </affected>
        <reference source="VENDOR" ref_id="IE7-KB928090-WindowsXP-x86-enu.exe"/>
        <description>The patch IE7-KB928090-WindowsXP-x86-enu.exe that addresses the vulnerabilities discussed in Microsoft Security Bulletin MS07-016 should be installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-03-05T09:00:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <status_change date="2007-03-05T09:00:00">DRAFT</status_change>
            <status_change date="2007-03-21T16:17:14.388-04:00">INTERIM</status_change>
            <status_change date="2007-04-10T13:44:24.822-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:org.mitre.oval:def:754" comment="Microsoft Windows XP (x86) SP2 is installed"/>
        <extend_definition definition_ref="oval:org.mitre.oval:def:627" comment="Internet Explorer 7 is installed"/>
        <criteria operator="OR">
          <criterion test_ref="oval:org.mitre.oval:tst:3721" comment="the version of Iexplore.exe is less than 7.0.6000.16414"/>
          <criterion test_ref="oval:org.mitre.oval:tst:3876" comment="the version of Mshtml.dll is less than 7.0.6000.16414"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:754" version="2" class="inventory">
      <metadata>
        <title>Microsoft Windows XP (x86) SP2 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/o:microsoft:windows_xp::sp2:x86"/>
        <description>A version of Microsoft Windows XP (x86) Service Pack 2 is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-03-05T09:00:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <status_change date="2007-03-05T09:00:00">DRAFT</status_change>
            <status_change date="2007-03-21T16:17:26.869-04:00">INTERIM</status_change>
            <status_change date="2007-04-10T13:44:28.583-04:00">ACCEPTED</status_change>
            <modified comment="Changed the CPE reference" date="2008-04-04T11:17:00.434-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2008-04-04T11:29:22.458-04:00">INTERIM</status_change>
            <status_change date="2008-04-21T04:00:24.359-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/>
        <criterion comment="a version of Microsoft Windows XP is installed" test_ref="oval:org.mitre.oval:tst:3"/>
        <criterion comment="a version of Windows for the x86 architecture is installed" test_ref="oval:org.mitre.oval:tst:3823"/>
        <criterion comment="Win2K/XP/2003 service pack 2 is installed" test_ref="oval:org.mitre.oval:tst:3019"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:282" version="1" class="patch">
      <metadata>
        <title>patch IE7-KB928090-WindowsServer2003-ia64-enu.exe should be installed</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Internet Explorer 7</product>
        </affected>
        <reference source="VENDOR" ref_id="IE7-KB928090-WindowsServer2003-ia64-enu.exe"/>
        <description>The patch IE7-KB928090-WindowsServer2003-ia64-enu.exe that addresses the vulnerabilities discussed in Microsoft Security Bulletin MS07-016 should be installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-03-05T09:00:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <status_change date="2007-03-05T09:00:00">DRAFT</status_change>
            <status_change date="2007-03-21T16:17:14.196-04:00">INTERIM</status_change>
            <status_change date="2007-04-10T13:44:24.645-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:org.mitre.oval:def:1205" comment="Microsoft Windows Server 2003 (ia64) SP1 is installed"/>
        <extend_definition definition_ref="oval:org.mitre.oval:def:627" comment="Internet Explorer 7 is installed"/>
        <criteria operator="OR">
          <criterion test_ref="oval:org.mitre.oval:tst:3721" comment="the version of Iexplore.exe is less than 7.0.6000.16414"/>
          <criterion test_ref="oval:org.mitre.oval:tst:3876" comment="the version of Mshtml.dll is less than 7.0.6000.16414"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1205" version="2" class="inventory">
      <metadata>
        <title>Microsoft Windows Server 2003 (ia64) SP1 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/o:microsoft:windows_2003::sp1:itanium"/>
        <description>A version of Microsoft Windows Server 2003 (ia64) Service Pack 1 is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-03-05T09:00:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <status_change date="2007-03-05T09:00:00">DRAFT</status_change>
            <status_change date="2007-03-21T16:16:45.596-04:00">INTERIM</status_change>
            <status_change date="2007-04-10T13:44:19.196-04:00">ACCEPTED</status_change>
            <modified comment="Changed the CPE reference" date="2008-04-04T11:17:00.275-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2008-04-04T11:22:23.300-04:00">INTERIM</status_change>
            <status_change date="2008-04-21T04:00:10.886-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/>
        <criterion comment="a version of Microsoft Windows Server 2003 is installed" test_ref="oval:org.mitre.oval:tst:4"/>
        <criterion comment="a version of Windows for the ia64 architecture is installed" test_ref="oval:org.mitre.oval:tst:2747"/>
        <criterion comment="Win2K/XP/2003/Vista service pack 1 is installed" test_ref="oval:org.mitre.oval:tst:2843"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1946" version="1" class="patch">
      <metadata>
        <title>patch 	Windows6.0-KB925902-x64.msu should be installed</title>
        <affected family="windows">
          <platform>Microsoft Windows Vista</platform>
        </affected>
        <reference source="VENDOR" ref_id=" Windows6.0-KB925902-x64.msu"/>
        <description>The patch Windows6.0-KB925902-x64.msu that addresses the vulnerabilities discussed in Microsoft Security Bulletin MS07-017 should be installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-04-11T12:15:00.000-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </submitted>
            <status_change date="2007-04-11T12:15:00.000-04:00">DRAFT</status_change>
            <status_change date="2007-04-30T08:18:48.140-04:00">INTERIM</status_change>
            <status_change date="2007-05-23T15:05:34.969-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <extend_definition definition_ref="oval:org.mitre.oval:def:2041" comment="Microsoft Windows Vista x64 Edition is installed"/>
        <criterion test_ref="oval:org.mitre.oval:tst:3182" comment="the version of user32.dll is less than 6.0.6000.16438"/>
        <criterion test_ref="oval:org.mitre.oval:tst:3310" comment="the version of win32k.sys is less than 6.0.6000.16438"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1815" version="1" class="patch">
      <metadata>
        <title>patch Windows6.0-KB930178-x64.msu should be installed</title>
        <affected family="windows">
          <platform>Microsoft Windows Vista</platform>
        </affected>
        <reference source="VENDOR" ref_id="Windows6.0-KB930178-x64.msu"/>
        <description>The patch Windows6.0-KB930178-x64.msu that addresses the vulnerabilities discussed in Microsoft Security Bulletin MS07-021 should be installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-04-11T12:15:00.000-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </submitted>
            <status_change date="2007-04-11T12:15:00.000-04:00">DRAFT</status_change>
            <status_change date="2007-04-30T08:18:47.781-04:00">INTERIM</status_change>
            <status_change date="2007-05-23T15:05:32.521-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <extend_definition definition_ref="oval:org.mitre.oval:def:2041" comment="Microsoft Windows Vista x64 Edition is installed"/>
        <criterion test_ref="oval:org.mitre.oval:tst:4022" comment="the version of csrsrv.dll is less than 6.0.6000.16445"/>
        <criterion test_ref="oval:org.mitre.oval:tst:4046" comment="the version of winsrv.dll is less than 6.0.6000.16445"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2041" version="2" class="inventory">
      <metadata>
        <title>Microsoft Windows Vista x64 Edition is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows Vista</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/o:microsoft:windows_vista:::x64"/>
        <description>The operating system installed on the system is Microsoft Windows Vista x64 Edition</description>
        <oval_repository>
          <dates>
            <submitted date="2007-04-11T11:27:37.975-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </submitted>
            <status_change date="2007-04-11T11:27:37.975-04:00">DRAFT</status_change>
            <status_change date="2007-04-30T08:18:48.676-04:00">INTERIM</status_change>
            <status_change date="2007-05-23T15:05:38.024-04:00">ACCEPTED</status_change>
            <modified comment="Vista test updated because of the conflictions with Server 2008" date="2008-03-26T10:51:02.210-04:00">
              <contributor organization="Secure Elements, Inc.">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2008-03-31T04:00:20.760-04:00">INTERIM</status_change>
            <modified comment="Changed the CPE reference" date="2008-04-04T11:17:00.142-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2008-04-21T04:00:15.809-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/>
        <criterion comment="Windows Vista is installed" test_ref="oval:org.mitre.oval:tst:7914"/>
        <criterion comment="a version of Windows for the x64 architecture is installed" test_ref="oval:org.mitre.oval:tst:3653"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1804" version="1" class="patch">
      <metadata>
        <title>patch 	Windows6.0-KB925902-x86.msu should be installed</title>
        <affected family="windows">
          <platform>Microsoft Windows Vista</platform>
        </affected>
        <reference source="VENDOR" ref_id="Windows6.0-KB930178-x86.msu"/>
        <description>The patch Windows6.0-KB925902-x86.msu that addresses the vulnerabilities discussed in Microsoft Security Bulletin MS07-017 should be installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-04-11T12:15:00.000-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </submitted>
            <status_change date="2007-04-11T12:15:00.000-04:00">DRAFT</status_change>
            <status_change date="2007-04-30T08:18:47.623-04:00">INTERIM</status_change>
            <status_change date="2007-05-23T15:05:32.111-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <extend_definition definition_ref="oval:org.mitre.oval:def:1282" comment="Microsoft Windows Vista (32-bit) is installed"/>
        <criterion test_ref="oval:org.mitre.oval:tst:3182" comment="the version of user32.dll is less than 6.0.6000.16438"/>
        <criterion test_ref="oval:org.mitre.oval:tst:3310" comment="the version of win32k.sys is less than 6.0.6000.16438"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1469" version="1" class="patch">
      <metadata>
        <title>patch Windows6.0-KB930178-x86.msu should be installed</title>
        <affected family="windows">
          <platform>Microsoft Windows Vista</platform>
        </affected>
        <reference source="VENDOR" ref_id="Windows6.0-KB930178-x86.msu"/>
        <description>The patch Windows6.0-KB930178-x86.msu that addresses the vulnerabilities discussed in Microsoft Security Bulletin MS07-021 should be installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-04-11T12:15:00.000-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </submitted>
            <status_change date="2007-04-11T12:15:00.000-04:00">DRAFT</status_change>
            <status_change date="2007-04-30T08:18:46.710-04:00">INTERIM</status_change>
            <status_change date="2007-05-23T15:05:28.265-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <extend_definition definition_ref="oval:org.mitre.oval:def:1282" comment="Microsoft Windows Vista (32-bit) is installed"/>
        <criterion test_ref="oval:org.mitre.oval:tst:3645" comment="the version of csrsrv.dll is less than 6.0.5600.20522"/>
        <criterion test_ref="oval:org.mitre.oval:tst:3303" comment="the version of winsrv.dll is less than 6.0.5600.20522"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1282" version="2" class="inventory">
      <metadata>
        <title>Microsoft Windows Vista (32-bit) is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows Vista</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/o:microsoft:windows_vista:::x86"/>
        <description>The operating system installed on the system is Microsoft Windows Vista (32-bit)</description>
        <oval_repository>
          <dates>
            <submitted date="2007-04-11T11:27:37.975-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </submitted>
            <status_change date="2007-04-11T12:15:00.000-04:00">DRAFT</status_change>
            <status_change date="2007-04-30T08:18:46.566-04:00">INTERIM</status_change>
            <status_change date="2007-05-23T15:05:26.800-04:00">ACCEPTED</status_change>
            <modified comment="Vista test updated because of the conflictions with Server 2008" date="2008-03-26T10:51:02.210-04:00">
              <contributor organization="Secure Elements, Inc.">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2008-03-31T04:00:20.410-04:00">INTERIM</status_change>
            <modified comment="Changed the CPE reference" date="2008-04-04T11:17:00.749-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2008-04-21T04:00:11.683-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/>
        <criterion comment="Windows Vista is installed" test_ref="oval:org.mitre.oval:tst:7914"/>
        <criterion negate="true" comment="a version of Windows for the x64 architecture is installed" test_ref="oval:org.mitre.oval:tst:3653"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1162" version="2" class="patch">
      <metadata>
        <title>patch IE7-KB929969-WindowsServer2003-x64-enu.exe should be installed</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Internet Explorer 7</product>
        </affected>
        <reference source="VENDOR" ref_id="IE7-KB929969-WindowsServer2003-x64-enu.exe"/>
        <description>The patch IE7-KB929969-WindowsServer2003-x64-enu.exe that addresses the vulnerabilities discussed in Microsoft Security Bulletin MS07-004 should be installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-03-05T09:00:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <status_change date="2007-03-05T09:00:00">DRAFT</status_change>
            <status_change date="2007-03-21T16:16:43.545-04:00">INTERIM</status_change>
            <status_change date="2007-04-10T13:44:19.014-04:00">ACCEPTED</status_change>
            <modified comment="Changed object reference to refer to the registry instead of a hard-coded path" date="2008-04-14T13:12:00.428-04:00">
              <contributor organization="GFI Software">Clifford Farrugia</contributor>
            </modified>
            <status_change date="2008-04-14T13:14:45.090-04:00">INTERIM</status_change>
            <status_change date="2008-05-05T04:00:08.272-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:org.mitre.oval:def:730" comment="Microsoft Windows Server 2003 (x64) is installed"/>
        <extend_definition definition_ref="oval:org.mitre.oval:def:627" comment="Internet Explorer 7 is installed"/>
        <criterion test_ref="oval:org.mitre.oval:tst:3946" comment="the version of Vgx.dll is less than 7.0.6000.16386"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:730" version="2" class="inventory">
      <metadata>
        <title>Microsoft Windows Server 2003 (x64) is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/o:microsoft:windows_2003:::x64"/>
        <description>A version of Microsoft Windows Server 2003 (x64) is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-03-05T09:00:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <status_change date="2007-03-05T09:00:00">DRAFT</status_change>
            <status_change date="2007-03-21T16:17:25.745-04:00">INTERIM</status_change>
            <status_change date="2007-04-10T13:44:28.055-04:00">ACCEPTED</status_change>
            <modified comment="Changed the CPE reference" date="2008-04-04T11:17:00.114-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2008-04-04T11:29:06.138-04:00">INTERIM</status_change>
            <status_change date="2008-04-21T04:00:24.051-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/>
        <criterion comment="a version of Microsoft Windows Server 2003 is installed" test_ref="oval:org.mitre.oval:tst:4"/>
        <criterion comment="a version of Windows for the x64 architecture is installed" test_ref="oval:org.mitre.oval:tst:3653"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:627" version="1" class="inventory">
      <metadata>
        <title>Microsoft Internet Explorer 7 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Vista</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:ie:7"/>
        <description>A version of Microsoft Internet Explorer 7 is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-01-09T06:00:00">
              <contributor organization="Secure Elements, Inc.">Sudhir Gandhe</contributor>
            </submitted>
            <status_change date="2007-01-11T15:30:00-04:00">DRAFT</status_change>
            <status_change date="2007-02-20T13:40:49.320-05:00">INTERIM</status_change>
            <modified comment="Added Microsoft Windows Vista to the list of affected platforms." date="2007-03-05T09:10:00.104-05:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2007-03-21T16:17:23.092-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <criterion comment="Internet Explorer 7 is installed" test_ref="oval:org.mitre.oval:tst:178"/>
      </criteria>
    </definition>
  </definitions>
  <tests>
    <registry_test id="oval:org.mitre.oval:tst:2437" version="2" comment="Win2K/XP/2003 is patched" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:717"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:3823" version="1" comment="a version of Windows for the x86 architecture is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1576"/>
      <state state_ref="oval:org.mitre.oval:ste:3649"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:3019" version="1" comment="Win2K/XP/2003 service pack 2 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:717"/>
      <state state_ref="oval:org.mitre.oval:ste:2827"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:3" version="1" comment="a version of Microsoft Windows XP is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:123"/>
      <state state_ref="oval:org.mitre.oval:ste:3"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:2843" version="1" comment="Win2K/XP/2003/Vista service pack 1 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:717"/>
      <state state_ref="oval:org.mitre.oval:ste:2662"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:2747" version="1" comment="a version of Windows for the ia64 architecture is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1576"/>
      <state state_ref="oval:org.mitre.oval:ste:2568"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:3876" version="1" check="at least one" comment="the version of Mshtml.dll is less than 7.0.6000.16414" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:222"/>
      <state state_ref="oval:org.mitre.oval:ste:3630"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:3721" version="1" check="at least one" comment="the version of Iexplore.exe is less than 7.0.6000.16414" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:16"/>
      <state state_ref="oval:org.mitre.oval:ste:3630"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:4046" version="1" check="at least one" comment="the version of winsrv.dll is less than 6.0.6000.16445" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1382"/>
      <state state_ref="oval:org.mitre.oval:ste:3124"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:4022" version="1" check="at least one" comment="the version of csrsrv.dll is less than 6.0.6000.16445" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:2045"/>
      <state state_ref="oval:org.mitre.oval:ste:3788"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:3310" version="1" check="at least one" comment="the version of win32k.sys is less than 6.0.6000.16438" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:570"/>
      <state state_ref="oval:org.mitre.oval:ste:3279"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:3182" comment="the version of user32.dll is less than 6.0.6000.16438" version="1" check="at least one" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:390"/>
      <state state_ref="oval:org.mitre.oval:ste:3767"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:7914" version="1" comment="Windows Vista is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:5590"/>
      <state state_ref="oval:org.mitre.oval:ste:3828"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:3645" version="1" check="at least one" comment="the version of csrsrv.dll is less than 6.0.5600.20522" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:2045"/>
      <state state_ref="oval:org.mitre.oval:ste:3236"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:3303" version="1" check="at least one" comment="the version of winsrv.dll is less than 6.0.5600.20522" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1382"/>
      <state state_ref="oval:org.mitre.oval:ste:3000"/>
    </file_test>
    <family_test id="oval:org.mitre.oval:tst:99" version="1" comment="the installed operating system is part of the Microsoft Windows family" check_existence="at_least_one_exists" check="only one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:org.mitre.oval:obj:99"/>
      <state state_ref="oval:org.mitre.oval:ste:99"/>
    </family_test>
    <registry_test id="oval:org.mitre.oval:tst:4" version="1" comment="a version of Microsoft Windows Server 2003 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:123"/>
      <state state_ref="oval:org.mitre.oval:ste:4"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:3653" version="2" comment="a version of Windows for the x64 architecture is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1576"/>
      <state state_ref="oval:org.mitre.oval:ste:3180"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:178" version="1" comment="Internet Explorer 7 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:247"/>
      <state state_ref="oval:org.mitre.oval:ste:115"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:3946" version="2" check="at least one" comment="the version of Vgx.dll is less than 7.0.6000.16386" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:308"/>
      <state state_ref="oval:org.mitre.oval:ste:3049"/>
    </file_test>
  </tests>
  <objects>
    <registry_object id="oval:org.mitre.oval:obj:717" version="1" comment="This registry key holds the service pack installed on the host if one is present." xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows NT\CurrentVersion</key>
      <name>CSDVersion</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:222" version="1" comment="The path to the mshtml.dll file in the system root" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200"/>
      <filename>mshtml.dll</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:16" version="0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path>C:\Program Files\Internet Explorer</path>
      <filename>Iexplore.exe</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:570" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200"/>
      <filename>win32k.sys</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:390" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200"/>
      <filename>user32.dll</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:5590" version="1" comment="This registry key  ProductName" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows NT\CurrentVersion</key>
      <name>ProductName</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:2045" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200"/>
      <filename>csrsrv.dll</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1382" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200"/>
      <filename>winsrv.dll</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:219" version="1" comment="This registry key identifies the system root." xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows NT\CurrentVersion</key>
      <name>SystemRoot</name>
    </registry_object>
    <family_object id="oval:org.mitre.oval:obj:99" version="1" comment="This is the default family object. Only one family object should exist." xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent"/>
    <registry_object id="oval:org.mitre.oval:obj:123" version="1" comment="Registry key that hold the current windows os version" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows NT\CurrentVersion</key>
      <name>CurrentVersion</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:1576" version="1" comment="This registry key identifies the architecture on the system" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SYSTEM\CurrentControlSet\Control\Session Manager\Environment</key>
      <name>PROCESSOR_ARCHITECTURE</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:247" version="1" comment="This registry key identifies the version of internet Explorer" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Internet Explorer</key>
      <name>Version</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:308" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:209"/>
      <filename>vgx.dll</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:281" version="1" comment="The registry key that identifies the location of the common files directory." xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows\CurrentVersion</key>
      <name>CommonFilesDir</name>
    </registry_object>
  </objects>
  <states>
    <registry_state id="oval:org.mitre.oval:ste:3649" version="1" comment="x86 architecture" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>x86</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:2827" version="1" comment="The registry key has a value of Service Pack 2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>Service Pack 2</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:3" version="1" comment="The registry key has a value of 5.1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>5.1</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:2662" version="1" comment="The registry key has a value of Service Pack 1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>Service Pack 1</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:2568" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>ia64</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:3630" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">7.0.6000.16414</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:3124" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.0.6000.16445</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:3788" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.0.6000.16445</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:3279" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.0.6000.16438</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:3767" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.0.6000.16438</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:3828" version="1" comment="The registry key matches with Vista" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">.*[Vv]ista.*</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:3236" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.0.5600.20522</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:3000" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.0.5600.20522</version>
    </file_state>
    <family_state id="oval:org.mitre.oval:ste:99" version="1" comment="Microsoft Windows family" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <family>windows</family>
    </family_state>
    <registry_state id="oval:org.mitre.oval:ste:4" version="1" comment="The registry key has a value of 5.2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>5.2</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:3180" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>amd64</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:115" version="1" comment="The registry key has a value that matches 7.*" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^7\..*$</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:3049" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">7.0.6000.16386</version>
    </file_state>
  </states>
  <variables>
    <local_variable id="oval:org.mitre.oval:var:200" version="1" comment="Windows system 32 directory" datatype="string">
      <concat>
        <object_component item_field="value" object_ref="oval:org.mitre.oval:obj:219"/>
        <literal_component>\System32</literal_component>
      </concat>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:209" datatype="string" comment="Base path to vgx.dll, part of Vector Markup Language (VML) implementation." version="2">
      <concat>
        <object_component item_field="value" object_ref="oval:org.mitre.oval:obj:281"/>
        <literal_component>\Microsoft Shared\VGX</literal_component>
      </concat>
    </local_variable>
  </variables>
</oval_definitions>