<?xml version="1.0" encoding="UTF-8"?>
<oval_definitions xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-definitions-5 oval-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#macos macos-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#independent independent-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-common-5 oval-common-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#unix unix-definitions-schema.xsd" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:oval="http://oval.mitre.org/XMLSchema/oval-common-5" xmlns:oval-def="http://oval.mitre.org/XMLSchema/oval-definitions-5">
  <generator>
    <oval:product_name>The OVAL Repository</oval:product_name>
    <oval:schema_version>5.8</oval:schema_version>
    <oval:timestamp>2015-09-03T09:41:42.366-04:00</oval:timestamp>
  </generator>
  <definitions>
    <definition id="oval:org.mitre.oval:def:15988" version="5" class="inventory">
      <metadata>
        <title>Adobe AIR is installed</title>
        <affected family="macos">
          <platform>Apple Mac OS X</platform>
          <product>Adobe AIR</product>
        </affected>
        <reference ref_id="cpe:/a:adobe:adobe_air" source="CPE"/>
        <description>Adobe AIR is installed on the system</description>
        <oval_repository>
          <dates>
            <submitted date="2012-12-20T15:35:55.661-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </submitted>
            <status_change date="2012-12-27T16:56:34.874-05:00">DRAFT</status_change>
            <status_change date="2013-01-14T04:01:48.712-05:00">INTERIM</status_change>
            <status_change date="2013-02-04T04:00:26.869-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:15988 - added product &quot;Adobe Air&quot; to def:15988 (inventory)" date="2013-06-27T13:19:00.589-04:00">
              <contributor organization="ALTX-SOFT">Sergey Artykhov</contributor>
            </modified>
            <status_change date="2013-06-27T13:34:28.973-04:00">INTERIM</status_change>
            <status_change date="2013-07-15T04:00:08.845-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <criterion comment="Adobe AIR is installed" test_ref="oval:org.mitre.oval:tst:80554"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:12551" version="5" class="inventory">
      <metadata>
        <title>Apple Mac OS X 10.6.0 (Snow Leopard) is installed</title>
        <affected family="macos">
          <platform>Apple Mac OS X</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/o:apple:mac_os_x:10.6.0"/>
        <description>The operating system installed on the system is Apple Mac OS X 10.6.0 (Snow Leopard).</description>
        <oval_repository>
          <dates>
            <submitted date="2011-02-03T13:00:00">
              <contributor organization="The MITRE Corporation">Dan Haynes</contributor>
            </submitted>
            <status_change date="2011-02-15T14:24:54.776-05:00">DRAFT</status_change>
            <status_change date="2011-03-07T04:00:10.291-05:00">INTERIM</status_change>
            <status_change date="2011-03-28T04:00:08.823-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:12551 - Modifications vary from minor OVAL title/description changes to suggesting an alternative CPE name to use." date="2011-09-28T11:29:00.976-04:00">
              <contributor organization="The MITRE Corporation">David Rothenberg</contributor>
            </modified>
            <status_change date="2011-09-28T11:33:32.218-04:00">INTERIM</status_change>
            <status_change date="2011-10-17T04:00:10.456-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="The Installed Operating System is Part of the Mac OS Family" test_ref="oval:org.mitre.oval:tst:42186"/>
        <criterion comment="Apple Mac OS X 10.6 (Snow Leopard) is Installed" test_ref="oval:org.mitre.oval:tst:41991"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:12412" version="7" class="inventory">
      <metadata>
        <title>Adobe Flash Player 10 is Installed</title>
        <affected family="macos">
          <platform>Apple Mac OS X</platform>
          <product>Adobe Flash Player</product>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:adobe:flash_player:10"/>
        <description>Adobe Flash Player 10 has been installed on the system</description>
        <oval_repository>
          <dates>
            <submitted date="2011-02-03T13:00:00">
              <contributor organization="The MITRE Corporation">Nate Przybyszewski</contributor>
            </submitted>
            <status_change date="2011-02-15T14:24:56.518-05:00">DRAFT</status_change>
            <status_change date="2011-03-07T04:00:08.403-05:00">INTERIM</status_change>
            <status_change date="2011-03-28T04:00:06.907-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:ste:12364 - New Adobe Flash/AIR Vulnerability Definitions for Mac OS X platform. Updated definitions to check plist rather than BOM." date="2012-12-27T16:50:00.676-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2012-12-27T18:58:26.206-05:00">INTERIM</status_change>
            <status_change date="2013-01-14T04:00:16.201-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:12412 - Added &quot;Adobe Flash Player&quot; as an affected product" date="2013-06-28T13:55:00.222-04:00">
              <contributor organization="ALTX-SOFT">Sergey Artykhov</contributor>
            </modified>
            <status_change date="2013-06-28T13:56:27.130-04:00">INTERIM</status_change>
            <status_change date="2013-07-15T04:00:06.010-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Adobe Flash Player version 10 is installed" test_ref="oval:org.mitre.oval:tst:42145"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:12391" version="3" class="inventory">
      <metadata>
        <title>Apple Mac OS X 10.6.1 is Installed</title>
        <affected family="macos">
          <platform>Apple Mac OS X</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/o:apple:mac_os_x:10.6.1"/>
        <description>The operating system installed on the system is Apple Mac OS X 10.6.1.</description>
        <oval_repository>
          <dates>
            <submitted date="2011-02-03T13:00:00">
              <contributor organization="The MITRE Corporation">Nate Przybyszewski</contributor>
            </submitted>
            <status_change date="2011-02-15T14:24:55.576-05:00">DRAFT</status_change>
            <status_change date="2011-03-07T04:00:08.223-05:00">INTERIM</status_change>
            <status_change date="2011-03-28T04:00:06.698-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="The Installed Operating System is Part of the Mac OS Family" test_ref="oval:org.mitre.oval:tst:42186"/>
        <criterion comment="Apple Mac OS X 10.6.1 is Installed" test_ref="oval:org.mitre.oval:tst:42077"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:12319" version="7" class="inventory">
      <metadata>
        <title>Adobe Flash Player is Installed</title>
        <affected family="macos">
          <platform>Apple Mac OS X</platform>
          <product>Adobe Flash Player</product>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:adobe:flash_player"/>
        <description>Adobe Flash Player has been installed on the system</description>
        <oval_repository>
          <dates>
            <submitted date="2011-02-03T13:00:00">
              <contributor organization="The MITRE Corporation">Nate Przybyszewski</contributor>
            </submitted>
            <status_change date="2011-02-15T14:24:56.319-05:00">DRAFT</status_change>
            <status_change date="2011-03-07T04:00:07.711-05:00">INTERIM</status_change>
            <status_change date="2011-03-28T04:00:06.235-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:12319 - New Adobe Flash/AIR Vulnerability Definitions for Mac OS X platform. Updated definitions to check plist rather than BOM." date="2012-12-27T16:50:00.676-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2012-12-27T18:58:26.572-05:00">INTERIM</status_change>
            <status_change date="2013-01-14T04:00:14.974-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:12319 - Added &quot;Adobe Flash Player&quot; to def:12319 (inventory)" date="2013-06-27T13:34:00.140-04:00">
              <contributor organization="ALTX-SOFT">Sergey Artykhov</contributor>
            </modified>
            <status_change date="2013-06-27T13:40:45.671-04:00">INTERIM</status_change>
            <status_change date="2013-07-15T04:00:05.276-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criterion comment="The Bill of Materials (BOM) file for Adobe Flash Player is present" test_ref="oval:org.mitre.oval:tst:42437"/>
        <criterion comment="Flash Player plugin exists" test_ref="oval:org.mitre.oval:tst:80635"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11637" version="3" class="inventory">
      <metadata>
        <title>Apple Security Update 2010-006 is Installed</title>
        <affected family="macos">
          <platform>Apple Mac OS X</platform>
        </affected>
        <description>Apple Security Update 2010-006 has been installed on the system</description>
        <oval_repository>
          <dates>
            <submitted date="2011-02-03T13:00:00">
              <contributor organization="The MITRE Corporation">Nate Przybyszewski</contributor>
            </submitted>
            <status_change date="2011-02-15T14:24:55.773-05:00">DRAFT</status_change>
            <status_change date="2011-03-07T04:00:05.491-05:00">INTERIM</status_change>
            <status_change date="2011-03-28T04:00:03.607-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="The Bill of Materials (BOM) file for the Apple Security Update 2010-006 is present" test_ref="oval:org.mitre.oval:tst:42443"/>
      </criteria>
    </definition>
  </definitions>
  <tests>
    <file_test id="oval:org.mitre.oval:tst:80554" version="1" comment="Adobe AIR is installed" check_existence="only_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:23603"/>
    </file_test>
    <uname_test id="oval:org.mitre.oval:tst:41991" version="1" comment="Apple Mac OS X 10.6 (Snow Leopard) is Installed" check_existence="only_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:2759"/>
      <state state_ref="oval:org.mitre.oval:ste:11420"/>
    </uname_test>
    <plist_test id="oval:org.mitre.oval:tst:42145" version="2" comment="Adobe Flash Player version 10 is installed" check_existence="only_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#macos">
      <object object_ref="oval:org.mitre.oval:obj:15971"/>
      <state state_ref="oval:org.mitre.oval:ste:12364"/>
    </plist_test>
    <family_test id="oval:org.mitre.oval:tst:42186" version="1" comment="The Installed Operating System is Part of the Mac OS Family" check_existence="only_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:org.mitre.oval:obj:99"/>
      <state state_ref="oval:org.mitre.oval:ste:12279"/>
    </family_test>
    <plist_test id="oval:org.mitre.oval:tst:42077" version="1" comment="Apple Mac OS X 10.6.1 is Installed" check_existence="only_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#macos">
      <object object_ref="oval:org.mitre.oval:obj:15516"/>
      <state state_ref="oval:org.mitre.oval:ste:12366"/>
    </plist_test>
    <file_test id="oval:org.mitre.oval:tst:80635" version="1" comment="Flash Player plugin exists" check_existence="only_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:24235"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:42437" version="1" comment="The Bill of Materials (BOM) file for Adobe Flash Player is present" check_existence="only_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:14974"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:42443" version="1" comment="The Bill of Materials (BOM) file for the Apple Security Update 2010-006 is present" check_existence="only_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:15526"/>
    </file_test>
  </tests>
  <objects>
    <file_object id="oval:org.mitre.oval:obj:23603" version="1" comment="The Adobe AIR installer plist file" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/Applications/Utilities/Adobe AIR Application Installer.app/Contents</path>
      <filename>Info.plist</filename>
    </file_object>
    <uname_object id="oval:org.mitre.oval:obj:2759" version="1" comment="The single uname object." xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix"/>
    <plist_object id="oval:org.mitre.oval:obj:15971" version="1" comment="The Adobe Flash Player package version plist object." xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#macos">
      <key>PackageVersion</key>
      <filepath>/private/var/db/receipts/com.adobe.pkg.FlashPlayer.plist</filepath>
    </plist_object>
    <family_object id="oval:org.mitre.oval:obj:99" version="1" comment="This is the default family object. Only one family object should exist." xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent"/>
    <plist_object id="oval:org.mitre.oval:obj:15516" version="1" comment="The OSX product version plist object." xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#macos">
      <key>ProductVersion</key>
      <filepath>/System/Library/CoreServices/SystemVersion.plist</filepath>
    </plist_object>
    <file_object id="oval:org.mitre.oval:obj:24235" version="1" comment="Flash Player plugin plist file" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/Library/Internet Plug-Ins/Flash Player.plugin/Contents</path>
      <filename>Info.plist</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:14974" version="1" comment="The Adobe Flash bill of materials (BOM) file" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/private/var/db/receipts</path>
      <filename>com.adobe.pkg.FlashPlayer.bom</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:15526" version="1" comment="The Apple Security Update 2010-006 bill of materials (BOM) file" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/private/var/db/receipts</path>
      <filename>com.apple.pkg.update.security.2010.006.snowleopard.bom</filename>
    </file_object>
  </objects>
  <states>
    <uname_state id="oval:org.mitre.oval:ste:11420" version="1" comment="The OS name is 'Darwin' and the OS release is '10.6.0'." xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <os_name>Darwin</os_name>
      <os_release>10.6.0</os_release>
    </uname_state>
    <plist_state id="oval:org.mitre.oval:ste:12364" version="2" comment="The value is greater than or equal to 10" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#macos">
      <value operation="pattern match">^10\..*$</value>
    </plist_state>
    <family_state id="oval:org.mitre.oval:ste:12279" version="1" comment="The operating system is part of the Mac OS family." xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <family>macos</family>
    </family_state>
    <plist_state id="oval:org.mitre.oval:ste:12366" version="1" comment="The OS release is '10.6.1'." xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#macos">
      <value datatype="version">10.6.1</value>
    </plist_state>
  </states>
</oval_definitions>