{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [],
  "affected_systems_content": "\u003cp\u003eVersions d\u0027Apple iTunes ant\u00e9rieures \u00e0  la version 4.8 pour Windows ou Mac OS X.\u003c/p\u003e",
  "content": "## Description\n\nSelon Apple, une vuln\u00e9rabilit\u00e9 de type d\u00e9bordement de m\u00e9moire est\npr\u00e9sente dans iTunes. En incitant l\u0027utilisateur \u00e0 ouvir un fichier MPEG4\nhabilement constitu\u00e9, un individu mal intentionn\u00e9 peut exploiter cette\nvuln\u00e9rabilit\u00e9 pour ex\u00e9cuter du code arbitraire sur une plate-forme\nvuln\u00e9rable.\n\n## Solution\n\nLa version 4.8 d\u0027iTunes corrige cette vuln\u00e9rabilit\u00e9.\n",
  "cves": [],
  "initial_release_date": "2005-05-10T00:00:00",
  "last_revision_date": "2005-05-10T00:00:00",
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 d\u0027Apple du 09 mai 2005  :",
      "url": "http://docs.info.apple.com/article.html?artnum=301596"
    }
  ],
  "reference": "CERTA-2005-AVI-160",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2005-05-10T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    }
  ],
  "summary": null,
  "title": "Vuln\u00e9rabilit\u00e9 d\u0027iTunes",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 #301596 d\u0027Apple",
      "url": null
    }
  ]
}