{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Ubuntu version 6.06 LTS ;",
      "product": {
        "name": "Ubuntu",
        "vendor": {
          "name": "Ubuntu",
          "scada": false
        }
      }
    },
    {
      "description": "Ubuntu version 7.10 ;",
      "product": {
        "name": "Ubuntu",
        "vendor": {
          "name": "Ubuntu",
          "scada": false
        }
      }
    },
    {
      "description": "Ubuntu version 8.04 LTS ;",
      "product": {
        "name": "Ubuntu",
        "vendor": {
          "name": "Ubuntu",
          "scada": false
        }
      }
    },
    {
      "description": "Ubuntu version 8.10.",
      "product": {
        "name": "Ubuntu",
        "vendor": {
          "name": "Ubuntu",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nUn d\u00e9faut d\u0027avertissement dans KMail lors du suivi d\u0027un lien vers un\nfichier ex\u00e9cutable permet \u00e0 un individu malveillant de contourner la\npolitique de s\u00e9curit\u00e9 par le biais d\u0027un courriel au format HTML\nsp\u00e9cialement construit.\n\nLe CERTA rappelle que la lecture au format HTML des courriers\n\u00e9lectroniques n\u0027est pas recommand\u00e9e.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [],
  "initial_release_date": "2009-03-18T00:00:00",
  "last_revision_date": "2009-03-18T00:00:00",
  "links": [],
  "reference": "CERTA-2009-AVI-106",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2009-03-18T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 de \u003cspan class=\"textit\"\u003eKMail\u003c/span\u003e permet \u00e0 un\nindividu malveillant de contourner la politique de s\u00e9curit\u00e9.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans KMail",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-725-1 du 26 f\u00e9vrier 2009",
      "url": "http://www.ubuntulinux.org/usn/usn-725-1"
    }
  ]
}