{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "AVG Anti-Virus Professional ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "AVG Anti-Virus Free Edition 7.x ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "AVG Antivirus Server.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nDeux erreurs ont \u00e9t\u00e9 identifi\u00e9es dans AVG Antivirus :\n\n-   la premi\u00e8re concerne la mise en \u0153uvre de l\u0027analyse des fichiers au\n    format RAR et permettrait de provoquer un d\u00e9ni de service de\n    l\u0027application vuln\u00e9rable ;\n-   la seconde est relative \u00e0 un manque de contr\u00f4le sur un appel syst\u00e8me\n    mis \u00e0 disposition par le pilote AVG7CORE.SYS. Elle permettrait \u00e0 un\n    utilisateur local d\u0027\u00e9craser des zones arbitraires de m\u00e9moire en\n    espace noyau.\n\n## Solution\n\nLa version 7.5 build 476 de AVG Antivirus corrige le probl\u00e8me :\n\n    http://free.grisoft.com/doc/downloads-products/us/frt/0?prd=aff\n\n    http://www.grisoft.com/doc/31/us/crp/0?prd=avw\n",
  "cves": [],
  "initial_release_date": "2007-07-12T00:00:00",
  "last_revision_date": "2007-07-12T00:00:00",
  "links": [
    {
      "title": "Site de AVG Antivirus :",
      "url": "http://www.grisoft.com"
    },
    {
      "title": "Note de sortie de la version 7.5 build 476 de AVG    Antivirus :",
      "url": "http://free.grisoft.com/doc/29919/us/frt/0"
    }
  ],
  "reference": "CERTA-2007-AVI-307",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2007-07-12T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire"
    },
    {
      "description": "D\u00e9ni de service"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "Plusieurs vuln\u00e9rabilit\u00e9s pr\u00e9sentes dans AVG Antivirus permettent \u00e0 un\nutilisateur local d\u0027\u00e9lever ses privil\u00e8ges, de provoquer un d\u00e9ni de\nservice ou d\u0027ex\u00e9cuter du code arbitraire.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s de AVG Antivirus",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Note de sortie de la version 7.5 build 476 de AVG Antivirus",
      "url": null
    }
  ]
}