{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Microsoft Windows Messenger 5.0 ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Windows MSN Messenger 6.1, 6.2 ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Windows 98, 98 (SE), Millennium Edition (ME).",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Windows Media Player 9.x (hors Windows XP SP2) ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nPNG (\"Portable Network Graphics\") est un format d\u0027image utilis\u00e9 par\nplusieurs application Windows telles la messagerie instantan\u00e9e (MSN\nmessenger) ou l\u0027outil Media Player.\n\nPlusieurs vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes lors du traitement de\nfichiers au format PNG. Au moyen d\u0027un fichier PNG habilement constitu\u00e9,\nun utilisateur mal intentionn\u00e9 peut r\u00e9aliser l\u0027ex\u00e9cution de code\narbitraire \u00e0 travers l\u0027application vuln\u00e9rable sur la plate-forme client.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs.\n",
  "cves": [],
  "initial_release_date": "2005-02-09T00:00:00",
  "last_revision_date": "2005-02-09T00:00:00",
  "links": [
    {
      "title": "Bulletin de securit\u00e9 de Microsoft MS05-009 du 08 f\u00e9vrier    2005:",
      "url": "http://www.microsoft.com/technet/security/bulletin/MS05-009.mspx"
    }
  ],
  "reference": "CERTA-2005-AVI-053",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2005-02-09T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    }
  ],
  "summary": null,
  "title": "Vuln\u00e9rabilit\u00e9 dans le traitements des images PNG pour plusieurs applications Microsoft",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 MS05-009 de Microsoft",
      "url": null
    }
  ]
}