{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Internet Explorer 6 sur Microsoft Windows Server 2003 ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Windows 98, Microsoft Windows 98 SE et Microsoft Windows Millenium Edition ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Internet Explorer 5.01 Service Pack 3 sur Microsoft 2000 Service Pack 3 ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Internet Explorer 6 Service Pack 1 sur Microsoft Windows 2000 Service Pack 3, Microsoft Windows 2000 Service Pack 4 et Microsoft Windows XP Service Pack 1 ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Windows Server 2003 ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Windows XP Service Pack 1 et Service Pack 2.",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Internet Explorer 6 sur Microsoft Windows Server 2003 pour syst\u00e8mes Itanium et Microsoft Windows XP 64-Bit Edition Version 2003 (Itanium) ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Internet Explorer 6 sur Microsoft Windows XP Service Pack 2.",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Windows 2000 Service Pack 3 et Service Pack 4 ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Windows XP 64-Bit Edition Version 2003 (Itanium) ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Windows Server 2003 pour syst\u00e8mes Itanium ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Internet Explorer 6 Service Pack 1 sur Microsoft Windows 98, Microsoft Windows 98 SE et Microsoft Windows Millenium Edition ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Internet Explorer 5.5 Service Pack 2 sur Microsoft Millenium Edition ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Internet Explorer 5.01 Service Pack 3 sur Microsoft 2000 Service Pack 4 ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Internet Explorer 6 Service Pack 1 sur Microsoft Windows XP 64-Bit Edition Service Pack 1 (Itanium) ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Windows XP 64-Bit Edition Service Pack 1 (Itanium) ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Description\n\n-   Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans le traitement des objets\n    DHTML par Internet Explorer. Un utilisateur mal intentionn\u00e9 peut,\n    par le biais d\u0027une page web ou d\u0027un message \u00e9lectronique\n    malicieusement constitu\u00e9s, ex\u00e9cuter du code arbitraire \u00e0 distance.\n-   Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans le traitement de certains\n    liens r\u00e9ticulaires (URL) par Internet Explorer. Un utilisateur mal\n    intentionn\u00e9 peut, par le biais d\u0027un site web ou d\u0027un message\n    \u00e9lectronique malicieusement constitu\u00e9s, ex\u00e9cuter du code arbitraire\n    \u00e0 distance.\n-   Sous Internet Explorer, un gestionnaire d\u0027acc\u00e8s (Content Advisor),\n    accessible depuis l\u0027onglet Contenu (onglet Content pour les versions\n    anglaises) des options Internet du navigateur, permet de r\u00e9aliser le\n    filtrage de contenu des sites web. Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9\n    d\u00e9couverte dans ce gestionnaire d\u0027acc\u00e8s. Un utilisateur mal\n    intentionn\u00e9 peut, par le biais d\u0027un fichier .rat malicieusement\n    constitu\u00e9, ex\u00e9cuter du code arbitraire \u00e0 distance.\n\n## Solution\n\nAppliquer le correctif tel que d\u00e9crit dans le bulletin de s\u00e9curit\u00e9\nMicrosoft MS05-020 (cf. Documentation).\n",
  "cves": [],
  "initial_release_date": "2005-04-13T00:00:00",
  "last_revision_date": "2005-04-13T00:00:00",
  "links": [
    {
      "title": "R\u00e9f\u00e9rence CVE CAN-2005-0555 :",
      "url": "http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-0555"
    },
    {
      "title": "R\u00e9f\u00e9rence CVE CAN-2005-0553 :",
      "url": "http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-0553"
    },
    {
      "title": "R\u00e9f\u00e9rence CVE CAN-2005-0554 :",
      "url": "http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-0554"
    }
  ],
  "reference": "CERTA-2005-AVI-134",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2005-04-13T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    }
  ],
  "summary": "Trois vuln\u00e9rabilit\u00e9s affectant Internet Explorer permettent l\u0027ex\u00e9cution\nde code arbitraire \u00e0 distance.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Internet Explorer",
  "vendor_advisories": [
    {
      "published_at": "2005-04-12",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft MS05-020",
      "url": "http://www.microsoft.com/technet/security/bulletin/MS05-020.mspx"
    }
  ]
}