{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Internet Explorer 6 pour Microsoft Windows Server 2003 Edition x64 ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Internet Explorer 6 pour Microsoft Windows Server 2003 et Microsoft Windows Server 2003 Service Pack 1 ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Internet Explorer 6 pour Microsoft Windows Server 2003 pour Syst\u00e8mes Itanium et Microsoft Windows Server 2003 Service Pack 1 pour Syst\u00e8mes Itanium ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Internet Explorer 6 Service Pack 1 sur Microsoft Windows 2000 Service Pack 4 ou sur Microsoft Windows XP Service Pack 1 ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Internet Explorer 6 pour Microsoft Windows XP Professional Edition x64 ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Internet Explorer 5.01 Service Pack 4 sur Microsoft Windows 2000 Service Pack 4 ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Internet Explorer 5.5 Service Pack 2 pour Microsoft Windows Millennium Edition.",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Internet Explorer 6 pour Microsoft Windows XP Service Pack 2 ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nIl est possible, via Internet Explorer, d\u0027appeler des objets DCOM\n(Distributed Component Object Model) fournis par la biblioth\u00e8que\nmsdds.dll (Microsoft DDS Library Shape Control). Une vuln\u00e9rabilit\u00e9 dans\ncette biblioth\u00e8que (cf. CERTA-2005-ALE-008) permet \u00e0 un utilisateur mal\nintentionn\u00e9 d\u0027ex\u00e9cuter du code arbitraire \u00e0 distance par le biais d\u0027un\nsite web malicieusement construit.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention de\ncorrectifs (cf. Documentation).\n",
  "cves": [],
  "initial_release_date": "2005-10-12T00:00:00",
  "last_revision_date": "2005-10-12T00:00:00",
  "links": [
    {
      "title": "Site de l\u0027\u00e9diteur :",
      "url": "http://www.microsoft.com"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft MS05-052 du 11 octobre 2005    :",
      "url": "http://www.microsoft.com/technet/security/Bulletin/MS05-052.mspx"
    },
    {
      "title": "Bulletin d\u0027alerte CERTA-2005-ALE-008 du 19 ao\u00fbt 2005 :",
      "url": "http://www.certa.ssi.gouv.fr/site/CERTA-2005-ALE-008/CERTA-2005-ALE-008.html"
    }
  ],
  "reference": "CERTA-2005-AVI-396",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2005-10-12T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 dans Microsoft Internet Explorer permet \u00e0 un\nutilisateur distant mal intentionn\u00e9 d\u0027ex\u00e9cuter du code arbitraire \u00e0\ndistance.\n",
  "title": "Vuln\u00e9rabilit\u00e9 de Microsoft Internet Explorer",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 MS05-052 du 11 octobre 2005",
      "url": null
    }
  ]
}