{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [],
  "affected_systems_content": "\u003cUL\u003e    \u003cLI\u003eSonicWall Global VPN Client 3.1.0.556 ;\u003c/LI\u003e    \u003cLI\u003eSonicWall Global VPN Client 4.0.0.810.\u003c/LI\u003e  \u003c/UL\u003e  \u003cP\u003eD\u0027autres versions peuvent \u00eatre affect\u00e9es.\u003c/P\u003e",
  "content": "## Description\n\nUne vuln\u00e9rabilit\u00e9 de type cha\u00eene de format a \u00e9t\u00e9 identifi\u00e9e dans\nSonicWall Global VPN Client, au niveau d\u0027un fichier de configuration.\nUne personne malintentionn\u00e9e peut l\u0027exploiter en incitant un utilisateur\n\u00e0 importer un fichier de configuration sp\u00e9cifiquement construit et ainsi\nex\u00e9cuter du code arbitraire \u00e0 distance.\n\n## Solution\n\nLa version 4.0.0.830 de SonicWall Global VPN Client corrige le probl\u00e8me.\n",
  "cves": [],
  "initial_release_date": "2007-12-05T00:00:00",
  "last_revision_date": "2007-12-05T00:00:00",
  "links": [],
  "reference": "CERTA-2007-AVI-518",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2007-12-05T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 de type cha\u00eene de format permettant l\u0027ex\u00e9cution de\ncode arbitraire \u00e0 distance a \u00e9t\u00e9 identifi\u00e9e dans SonicWall Global VPN\nClient.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans SonicWall Global VPN Client",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 SEC Consult 20071204-0",
      "url": "http://www.sec-consult.com/305.html"
    }
  ]
}