{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [],
  "affected_systems_content": "\u003cp\u003eKDE version 3.2.3 et versions  ant\u00e9rieures.\u003c/p\u003e",
  "content": "## Description\n\nDe multiples vuln\u00e9rabilit\u00e9s dans KDE permettent \u00e0 un utilisateur mal\nintentionn\u00e9 d\u0027usurper des frames, domaines..., de contourner la\npolitique de s\u00e9curit\u00e9, de cr\u00e9er des d\u00e9nis de service ou d\u0027ex\u00e9cuter du\ncode arbitraire \u00e0 distance.\n\n## Solution\n\n-   Mettre \u00e0 jour KDE en version 3.3 ;\n\n-   des correctifs pour KDE 3.0.5b, 3.1.5 et 3.2.3 sont disponibles \u00e0\n    l\u0027adresse suivante :\n\n        ftp://ftp.kde.org/pub/kde/security_patches\n\n-   selon sa distribution, se r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de\n    l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section\n    Documentation).\n",
  "cves": [],
  "initial_release_date": "2004-09-01T00:00:00",
  "last_revision_date": "2004-09-01T00:00:00",
  "links": [
    {
      "title": "Bulletins de s\u00e9curit\u00e9 KDE du 11 ao\u00fbt 2004 :",
      "url": "http://www.kde.org/info/security/advisory-20040811-1.txt"
    },
    {
      "title": "Mise \u00e0 jour de s\u00e9curit\u00e9 du paquetage NetBSD kdebase3 :",
      "url": "ftp://ftp.netbsd.org/pub/NetBSD/packages/pkgsrc/x11/kdebase3/README.html"
    },
    {
      "title": "Bulletins de s\u00e9curit\u00e9 KDE du 11 ao\u00fbt 2004 :",
      "url": "http://www.kde.org/info/security/advisory-20040811-2.txt"
    },
    {
      "title": "Site Internet de KDE :",
      "url": "http://www.kde.org"
    },
    {
      "title": "Mise \u00e0 jour de s\u00e9curit\u00e9 du paquetage NetBSD kdelibs3 :",
      "url": "ftp://ftp.netbsd.org/pub/NetBSD/packages/pkgsrc/x11/kdelibs3/README.html"
    },
    {
      "title": "Bulletins de s\u00e9curit\u00e9 KDE du 11 ao\u00fbt 2004 :",
      "url": "http://www.kde.org/info/security/advisory-20040811-3.txt"
    }
  ],
  "reference": "CERTA-2004-AVI-288",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2004-09-01T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "D\u00e9ni de service"
    },
    {
      "description": "Usurpations"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    }
  ],
  "summary": null,
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans KDE",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9",
      "url": "http://www.vuxml.org/openbsd/"
    }
  ]
}