{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Microsoft Windows 2000 Service Pack 3 \u0026 4 ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Windows Server 2003 ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Windows XP 64-bit Edition Service Pack 1 ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Windows Server 2003 XP 64-bit Edition.",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Windows XP Service Pack 1 ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Windows XP 64-bit version 2003 ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nLe service d\u0027indexation de Microsoft pr\u00e9sente une vuln\u00e9rabilit\u00e9 lors de\nla validation des requ\u00eates. Au moyen d\u0027une requ\u00eate malicieusement\ncontitut\u00e9e, un utilisateur mal intentionn\u00e9 peut ex\u00e9cuter \u00e0 distance sur\nle syst\u00e8me vuln\u00e9rable, du code arbitraire avec les privil\u00e8ges de la\nvictime. L\u0027exploitation de cette vuln\u00e9rabilit\u00e9 peut \u00e9galement aboutir \u00e0\nun d\u00e9ni de service.\n\n## Solution\n\nSe r\u00e9ferer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. Docuementation).\n",
  "cves": [],
  "initial_release_date": "2005-01-12T00:00:00",
  "last_revision_date": "2005-01-12T00:00:00",
  "links": [],
  "reference": "CERTA-2005-AVI-012",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2005-01-12T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire"
    },
    {
      "description": "D\u00e9ni de service"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 d\u00e9couverte dans le service d\u0027indexation de Microsoft\npermet \u00e0 un utilisateur mal intentionn\u00e9 d\u0027ex\u00e9cuter du code arbitraire \u00e0\ndistance pouvant se traduire par un d\u00e9ni de service.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans le service d\u0027indexation",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft MS05-003",
      "url": "http://www.microsoft.com/technet/security/bulletin/MS05-003.mspx"
    }
  ]
}