{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Microsoft Windows Server 2003 ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Windows 2000 Service Pack 3 et Service Pack 4 ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Windows Server 2003 pour les syst\u00e8mes Itanium.",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Windows XP 64-Bit Edition Version 2003 (Itanium) ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Windows XP Service Pack 1 et Service Pack 2 ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Windows XP 64-Bit Edition Service Pack 1 (Itanium) ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nUne vuln\u00e9rabilit\u00e9 affectant les \u00e9v\u00e9nements de type \u00ab glisser-d\u00e9poser \u00bb\n(drag and drop) sous Windows permet le t\u00e9l\u00e9chargement d\u0027un fichier\nex\u00e9cutable sur le syst\u00e8me \u00e0 l\u0027insu de l\u0027utilisateur. L\u0027exploitation de\ncette vuln\u00e9rabilit\u00e9, par le biais d\u0027un site web malicieusement\nconstitu\u00e9, permet l\u0027ex\u00e9cution de code arbitraire \u00e0 distance.\n\n## Solution\n\nAppliquer le correctif de Microsoft tel qu\u0027indiqu\u00e9 dans le bulletin de\ns\u00e9curit\u00e9 Microsoft MS05-008 du 08 f\u00e9vrier 2005 (voir section\nDocumentation).\n",
  "cves": [],
  "initial_release_date": "2005-02-09T00:00:00",
  "last_revision_date": "2005-02-09T00:00:00",
  "links": [],
  "reference": "CERTA-2005-AVI-054",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2005-02-09T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    }
  ],
  "summary": null,
  "title": "Vuln\u00e9rabilit\u00e9 de l\u0027interpr\u00e9teur de commandes Windows",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft MS05-008 du 08 f\u00e9vrier 2005",
      "url": "http://www.microsoft.com/technet/security/bulletin/ms05-008.mspx"
    }
  ]
}