{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Microsoft Windows NT 4.0 ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Windows 2000.",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nWindows Media Services est une extention ISAPI (Internet Server API)\npour IIS permettant de d\u00e9livrer des flux audio et vid\u00e9o.\n\n  \n\nAu moyen d\u0027une requ\u00eate judicieusement compos\u00e9e, un utilisateur mal\nintentionn\u00e9 peut exploiter une vuln\u00e9rabilit\u00e9 pr\u00e9sente dans le composant\nnsiislog.dll afin d\u0027ex\u00e9cuter du code arbitraire \u00e0 distance ou provoquer\nun d\u00e9ni de service par arr\u00eat du serveur IIS.\n\n## Solution\n\nAppliquer le correctif fourni par Microsoft :\n\n    http://www.microsoft.com/technet/security/bulletin/MS03-019.asp\n",
  "cves": [],
  "initial_release_date": "2003-05-30T00:00:00",
  "last_revision_date": "2003-05-30T00:00:00",
  "links": [],
  "reference": "CERTA-2003-AVI-093",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2003-05-30T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "D\u00e9ni de service"
    }
  ],
  "summary": null,
  "title": "Vuln\u00e9rabilit\u00e9 de Microsoft Windows Media Services Extension",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 MS03-019 de Microsoft",
      "url": null
    }
  ]
}