{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [],
  "affected_systems_content": "\u003cp\u003eMcAfee ePolicy Orchestrator version  3.6.1 et version ant\u00e9rieures.\u003c/p\u003e",
  "content": "## Description\n\nUne vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte au niveau d\u0027une contr\u00f4leur ActiveX\nutilis\u00e9 par le logiciel ePolicy Orchestrator de McAfee. La mauvaise\ngestion de certaines m\u00e9thodes malform\u00e9es permet \u00e0 un utilisateur\nmalintentionn\u00e9 d\u0027ex\u00e9cuter des commande sarbitraires \u00e0 distance \u00e0 partir\nd\u0027une page Internet sp\u00e9cialement construite.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [],
  "initial_release_date": "2007-03-16T00:00:00",
  "last_revision_date": "2007-03-16T00:00:00",
  "links": [
    {
      "title": "Correctifs :",
      "url": "http://mysupport.mcafee.com/eservice_enu/start.swe"
    },
    {
      "title": "Bulletin de mise \u00e0 jour de McAfee du 13 mars 2007 :",
      "url": "http://knowledge.mcafee.com/article/25/612495_f.SAL_Public.html"
    }
  ],
  "reference": "CERTA-2007-AVI-134",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2007-03-16T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 permettant l\u0027ex\u00e9cution de code arbitraire \u00e0 distance\ndans la console de gestion ePolicy Orchestrator de McAfee a \u00e9t\u00e9\nd\u00e9couverte.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9 du logiciel McAfee ePolicy Orchestrator",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de mise \u00e0 jour McAfee du 13 mars 2007",
      "url": null
    }
  ]
}