{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Windows Server 2003 ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2003 64-Bit Edition.",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows NT Server 4.0 Terminal Server Edition Service Pack 6 ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows NT Server 4.0 Service Pack 6a ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 2000 Service Pack 3 et 4 ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows XP 64-Bit Edition Service Pack 1 ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows XP Service Pack 1 et 2 ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows XP 64-Bit Edition Version 2003 ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nL\u0027utilitaire WordPad permet de lire et de modifier le contenu de\ncertains types de fichiers, notamment ceux ayant pour extension .wri,\n.doc ou .rtf. Deux vuln\u00e9rabilit\u00e9s dans le convertisseur de format Word\n6.0 en format WordPad permettent \u00e0 un utilisateur mal intentionn\u00e9, par\nle biais d\u0027un fichier ou d\u0027un site web malicieusement constitu\u00e9s,\nd\u0027ex\u00e9cuter du code arbitraire \u00e0 distance.\n\n## Solution\n\nAppliquer le correctif de Microsoft, en fonction de votre syst\u00e8me\nd\u0027exploitation, tel qu\u0027indiqu\u00e9 dans le bulletin de s\u00e9curit\u00e9 MS04-041\n(voir Documentation).\n",
  "cves": [],
  "initial_release_date": "2004-12-15T00:00:00",
  "last_revision_date": "2004-12-15T00:00:00",
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 de Microsoft MS04-041 du 14 d\u00e9cembre    2004 :",
      "url": "http://www.microsoft.com/technet/security/bulletin/MS04-041.mspx"
    }
  ],
  "reference": "CERTA-2004-AVI-392",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2004-12-15T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    }
  ],
  "summary": "Deux vuln\u00e9rabilit\u00e9s dans le convertisseur de format Word 6.0 en format\nWordPad permettent l\u0027ex\u00e9cution de code arbitraire \u00e0 distance.\n",
  "title": "Vuln\u00e9rabilit\u00e9s dans WordPad",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 de Microsoft MS04-041 du 14 d\u00e9cembre 2004",
      "url": null
    }
  ]
}