<?xml version="1.0" encoding="UTF-8"?>
<oval_definitions xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-definitions-5 oval-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#windows windows-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-common-5 oval-common-schema.xsd" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:oval="http://oval.mitre.org/XMLSchema/oval-common-5" xmlns:oval-def="http://oval.mitre.org/XMLSchema/oval-definitions-5">
  <generator>
    <oval:product_name>The OVAL Repository</oval:product_name>
    <oval:schema_version>5.4</oval:schema_version>
    <oval:timestamp>2015-09-03T06:35:47.219-04:00</oval:timestamp>
  </generator>
  <definitions>
    <definition id="oval:org.mitre.oval:def:961" version="2" class="vulnerability" deprecated="true">
      <metadata>
        <title>Microsoft Data Access Components SQL-DMO Buffer Overflow (Test 1)</title>
        <affected family="windows">
          <platform>Microsoft Windows 95</platform>
          <platform>Microsoft Windows 98</platform>
          <platform>Microsoft Windows ME</platform>
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Data Access Components 2.5</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0353" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0353"/>
        <description>Buffer overflow in a component of SQL-DMO for Microsoft Data Access Components (MDAC) 2.5 through 2.7 allows remote attackers to execute arbitrary code via a long response to a broadcast request to UDP port 1434.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-05-04T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </submitted>
            <status_change date="2004-05-25T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-06-16T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-02-28T12:00:00.000-04:00" comment="split out the MDAC and file version tests from the compound test">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-03-02T08:52:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-03-23T08:09:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Deprecating duplicate definition for CVE-2003-0353" date="2010-05-05T12:00:00.000-05:00">
              <contributor organization="Symantec Corporation">Josh Turpin</contributor>
            </modified>
            <status_change date="2010-05-05T12:00:00.000-05:00">DEPRECATED</status_change>
          </dates>
          <status>DEPRECATED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Microsoft Data Access Components 2.5 is installed" test_ref="oval:org.mitre.oval:tst:2576"/>
        <criterion comment="File %windir%\System32\odbcbcp.dll is less than 3.70.11.40" test_ref="oval:org.mitre.oval:tst:1396"/>
        <criterion comment="Patch Q823718 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:1395"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:553" version="2" class="vulnerability">
      <metadata>
        <title>Microsoft Data Access Components 2.6 Broadcast Response Buffer Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows 95</platform>
          <platform>Microsoft Windows 98</platform>
          <platform>Microsoft Windows ME</platform>
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Data Access Components 2.6</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0903" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0903"/>
        <description>Buffer overflow in a component of Microsoft Data Access Components (MDAC) 2.5 through 2.8 allows remote attackers to execute arbitrary code via a malformed UDP response to a broadcast request.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-01-13T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </submitted>
            <status_change date="2004-03-09T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-03-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="set datatype to int" date="2007-10-25T16:45:00.717-04:00">
              <contributor organization="Opsware, Inc.">Jeff Cheng</contributor>
            </modified>
            <status_change date="2007-10-25T16:57:26.904-04:00">INTERIM</status_change>
            <status_change date="2007-11-13T12:01:19.427-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Microsoft Data Access Components 2.6 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2717"/>
        <criterion comment="the version of odbcbcp.dll is less than 2000.80.747.0" negate="false" test_ref="oval:org.mitre.oval:tst:2564"/>
        <criterion comment="the version of sqlsrv32.dll is less than 2000.80.747.0" negate="false" test_ref="oval:org.mitre.oval:tst:2563"/>
        <criterion comment="the patch q832483 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:2573"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:525" version="2" class="vulnerability">
      <metadata>
        <title>Microsoft Data Access Components 2.5 Broadcast Response Buffer Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows 95</platform>
          <platform>Microsoft Windows 98</platform>
          <platform>Microsoft Windows ME</platform>
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Data Access Components 2.5</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0903" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0903"/>
        <description>Buffer overflow in a component of Microsoft Data Access Components (MDAC) 2.5 through 2.8 allows remote attackers to execute arbitrary code via a malformed UDP response to a broadcast request.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-01-13T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </submitted>
            <status_change date="2004-03-09T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-03-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="set datatype to int" date="2007-10-25T16:45:00.717-04:00">
              <contributor organization="Opsware, Inc.">Jeff Cheng</contributor>
            </modified>
            <status_change date="2007-10-25T16:57:27.859-04:00">INTERIM</status_change>
            <status_change date="2007-11-13T12:01:18.770-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Microsoft Data Access Components 2.5 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2576"/>
        <criterion comment="the version of odbcbcp.dll is less than 3.70.11.46" negate="false" test_ref="oval:org.mitre.oval:tst:2575"/>
        <criterion comment="the version of sqlsrv32.dll is less than 3.70.11.46" negate="false" test_ref="oval:org.mitre.oval:tst:2574"/>
        <criterion comment="the patch q832483 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:2573"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:3573" version="5" class="vulnerability">
      <metadata>
        <title>Microsoft Data Access Components 2.1 Remote Data Services Buffer Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows 95</platform>
          <platform>Microsoft Windows 98</platform>
          <platform>Microsoft Windows NT</platform>
          <product>Microsoft Data Access Components 2.1</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-1142" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1142"/>
        <description>Heap-based buffer overflow in the Remote Data Services (RDS) component of Microsoft Data Access Components (MDAC) 2.1 through 2.6, and Internet Explorer 5.01 through 6.0, allows remote attackers to execute code via a malformed HTTP request to the Data Stub.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-08-24T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </submitted>
            <status_change date="2004-08-25T12:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-09-09T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-09-29T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-02-28T12:00:00.000-04:00" comment="removed the test for windows NT and added a test for Microsoft Data Access Components 2.1 since this definition is dependent on the Microsoft Data Access Components version and not the platform">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2005-03-02T08:52:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-03-23T08:09:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Fixed title." date="2007-03-02T18:58:00.105-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-03-02T18:59:08.122-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:17:17.458-04:00">ACCEPTED</status_change>
            <modified comment="set datatype to int" date="2007-10-25T16:45:00.220-04:00">
              <contributor organization="Opsware, Inc.">Jeff Cheng</contributor>
            </modified>
            <status_change date="2007-10-25T16:54:19.864-04:00">INTERIM</status_change>
            <status_change date="2007-11-13T12:01:14.142-05:00">ACCEPTED</status_change>
            <modified comment="References registry value for Common Files directory due to multilingual support" date="2008-04-14T11:07:00.270-04:00">
              <contributor organization="GFI Software">Clifford Farrugia</contributor>
            </modified>
            <status_change date="2008-04-14T12:27:04.626-04:00">INTERIM</status_change>
            <status_change date="2008-05-05T04:00:20.879-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Microsoft Data Access Components 2.1 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:403"/>
        <criterion comment="the version of msadco.dll is less than 2.12.5118.0" negate="false" test_ref="oval:org.mitre.oval:tst:402"/>
        <criterion comment="Patch Q329414 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:2715"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:294" version="5" class="vulnerability">
      <metadata>
        <title>Microsoft Data Access Components 2.6 Remote Data Services Buffer Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows 95</platform>
          <platform>Microsoft Windows 98</platform>
          <platform>Microsoft Windows ME</platform>
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Data Access Components 2.6</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-1142" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1142"/>
        <description>Heap-based buffer overflow in the Remote Data Services (RDS) component of Microsoft Data Access Components (MDAC) 2.1 through 2.6, and Internet Explorer 5.01 through 6.0, allows remote attackers to execute code via a malformed HTTP request to the Data Stub.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-08-24T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </submitted>
            <status_change date="2004-08-25T12:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-09-09T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-09-29T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-02-28T12:00:00.000-04:00" comment="removed the test for windows NT and added a test for Microsoft Data Access Components 2.6 since this definition is dependent on the Microsoft Data Access Components version and not the platform">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2005-03-02T08:52:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-03-23T08:09:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Standardized title." date="2007-03-02T19:00:00.375-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-03-02T19:01:00.393-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:17:15.008-04:00">ACCEPTED</status_change>
            <modified comment="set datatype to int" date="2007-10-25T16:45:00.220-04:00">
              <contributor organization="Opsware, Inc.">Jeff Cheng</contributor>
            </modified>
            <status_change date="2007-10-25T16:54:19.542-04:00">INTERIM</status_change>
            <status_change date="2007-11-13T12:01:10.176-05:00">ACCEPTED</status_change>
            <modified comment="References registry value for Common Files directory due to multilingual support" date="2008-04-14T11:07:00.270-04:00">
              <contributor organization="GFI Software">Clifford Farrugia</contributor>
            </modified>
            <status_change date="2008-04-14T12:27:04.258-04:00">INTERIM</status_change>
            <status_change date="2008-05-05T04:00:19.709-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Microsoft Data Access Components 2.6 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2717"/>
        <criterion comment="the version of msadco.dll is less than 2.62.9119.1" negate="false" test_ref="oval:org.mitre.oval:tst:2716"/>
        <criterion comment="Patch Q329414 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:2715"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2730" version="5" class="vulnerability">
      <metadata>
        <title>Microsoft Data Access Components 2.5 Remote Data Services Buffer Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows 95</platform>
          <platform>Microsoft Windows 98</platform>
          <platform>Microsoft Windows ME</platform>
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Data Access Components 2.5</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-1142" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1142"/>
        <description>Heap-based buffer overflow in the Remote Data Services (RDS) component of Microsoft Data Access Components (MDAC) 2.1 through 2.6, and Internet Explorer 5.01 through 6.0, allows remote attackers to execute code via a malformed HTTP request to the Data Stub.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-08-24T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </submitted>
            <status_change date="2004-08-25T12:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-09-09T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-09-29T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-02-28T12:00:00.000-04:00" comment="removed the test for windows NT and added a test for Microsoft Data Access Components 2.5 since this definition is dependent on the Microsoft Data Access Components version and not the platform">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2005-03-02T08:52:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-03-23T08:09:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Fixed title." date="2007-03-02T18:54:00.290-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-03-02T18:55:52.307-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:17:13.972-04:00">ACCEPTED</status_change>
            <modified comment="set datatype to int" date="2007-10-25T16:45:00.220-04:00">
              <contributor organization="Opsware, Inc.">Jeff Cheng</contributor>
            </modified>
            <status_change date="2007-10-25T16:54:20.160-04:00">INTERIM</status_change>
            <status_change date="2007-11-13T12:01:09.900-05:00">ACCEPTED</status_change>
            <modified comment="References registry value for Common Files directory due to multilingual support" date="2008-04-14T11:07:00.270-04:00">
              <contributor organization="GFI Software">Clifford Farrugia</contributor>
            </modified>
            <status_change date="2008-04-14T12:27:08.969-04:00">INTERIM</status_change>
            <status_change date="2008-05-05T04:00:18.440-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Microsoft Data Access Components 2.5 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2576"/>
        <criterion comment="the version of msadco.dll is less than 2.53.6202.0" negate="false" test_ref="oval:org.mitre.oval:tst:483"/>
        <criterion comment="Patch Q329414 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:2715"/>
      </criteria>
    </definition>
  </definitions>
  <tests>
    <file_test id="oval:org.mitre.oval:tst:1396" version="1" comment="File %windir%\System32\odbcbcp.dll is less than 3.70.11.40" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:878"/>
      <state state_ref="oval:org.mitre.oval:ste:1258"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:1395" version="1" deprecated="true" check="at least one" comment="DEPRECATED: Unused; Patch Q823718 Installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:962"/>
      <state state_ref="oval:org.mitre.oval:ste:1257"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:2564" version="1" check="at least one" comment="the version of odbcbcp.dll is less than 2000.80.747.0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:878"/>
      <state state_ref="oval:org.mitre.oval:ste:2397"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2563" version="1" check="at least one" comment="the version of sqlsrv32.dll is less than 2000.80.747.0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1351"/>
      <state state_ref="oval:org.mitre.oval:ste:2396"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2575" version="1" check="at least one" comment="the version of odbcbcp.dll is less than 3.70.11.46" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:878"/>
      <state state_ref="oval:org.mitre.oval:ste:2408"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2574" version="1" check="at least one" comment="the version of sqlsrv32.dll is less than 3.70.11.46" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1351"/>
      <state state_ref="oval:org.mitre.oval:ste:2407"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:2573" version="2" check="at least one" comment="the patch q832483 is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1464"/>
      <state state_ref="oval:org.mitre.oval:ste:2406"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:403" version="1" check="at least one" comment="Microsoft Data Access Components 2.1 is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:359"/>
      <state state_ref="oval:org.mitre.oval:ste:377"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:402" version="2" check="at least one" comment="the version of msadco.dll is less than 2.12.5118.0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:358"/>
      <state state_ref="oval:org.mitre.oval:ste:376"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:2717" version="1" check="at least one" comment="Microsoft Data Access Components 2.6 is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:359"/>
      <state state_ref="oval:org.mitre.oval:ste:2538"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:2716" version="2" check="at least one" comment="the version of msadco.dll is less than 2.62.9119.1" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:358"/>
      <state state_ref="oval:org.mitre.oval:ste:2537"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:483" version="2" check="at least one" comment="the version of msadco.dll is less than 2.53.6202.0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:358"/>
      <state state_ref="oval:org.mitre.oval:ste:446"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:2715" version="2" check="at least one" comment="Patch Q329414 Installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1562"/>
      <state state_ref="oval:org.mitre.oval:ste:2536"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:2576" version="1" comment="Microsoft Data Access Components 2.5 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:359"/>
      <state state_ref="oval:org.mitre.oval:ste:2409"/>
    </registry_test>
  </tests>
  <objects>
    <registry_object id="oval:org.mitre.oval:obj:962" version="1" deprecated="true" comment="DEPRECATED: Unused;" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Updates\DataAccess\Q823718</key>
      <name operation="equals">IsInstalled</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:878" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>odbcbcp.dll</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1351" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>sqlsrv32.dll</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:219" version="1" comment="This registry key identifies the system root." xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows NT\CurrentVersion</key>
      <name>SystemRoot</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:1464" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Updates\DataAccess\Q832483</key>
      <name operation="equals">IsInstalled</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:358" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:212" var_check="all"/>
      <filename>msadco.dll</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:281" version="1" comment="The registry key that identifies the location of the common files directory." xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows\CurrentVersion</key>
      <name>CommonFilesDir</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:1562" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\Q329414</key>
      <name operation="equals">Installed</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:359" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\DataAccess</key>
      <name>FullInstallVer</name>
    </registry_object>
  </objects>
  <states>
    <file_state id="oval:org.mitre.oval:ste:1258" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">3.70.11.40</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:1257" version="1" deprecated="true" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals" datatype="binary">1</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:2397" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">2000.80.747.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2396" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">2000.80.747.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2408" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">3.70.11.46</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2407" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">3.70.11.46</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:2406" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">1</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:377" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^2\.1.*$</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:376" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">2.12.5118.0</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:2538" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^2\.6.*$</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:2537" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">2.62.9119.1</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:446" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">2.53.6202.0</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:2536" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">1</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:2409" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^2\.5.*$</value>
    </registry_state>
  </states>
  <variables>
    <local_variable id="oval:org.mitre.oval:var:200" version="1" comment="Windows System32 directory" datatype="string">
      <concat>
        <object_component item_field="value" object_ref="oval:org.mitre.oval:obj:219"/>
        <literal_component>\System32</literal_component>
      </concat>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:212" version="2" comment="The path to the msadc directory under the the program files directory." datatype="string">
      <concat>
        <object_component item_field="value" object_ref="oval:org.mitre.oval:obj:281"/>
        <literal_component>\System\msadc</literal_component>
      </concat>
    </local_variable>
  </variables>
</oval_definitions>