{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Symantec Norton AntiVirus et Norton AntiVirus Pro 2001-2004 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Symantec",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Symantec LiveUpdate versions ant\u00e9rieures \u00e0 2.5 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Symantec",
          "scada": false
        }
      }
    },
    {
      "description": "Symantec Norton Internet Security Pro 2001-2004 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Symantec",
          "scada": false
        }
      }
    },
    {
      "description": "Symantec Norton SystemWorks 2001-2004 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Symantec",
          "scada": false
        }
      }
    },
    {
      "description": "Symantec AntiVirus pour Handhelds Retail and Corporate Edition v3.0.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Symantec",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nL\u0027utilitaire de mise \u00e0 jour LiveUpdate est inclus dans de nombreux\nproduits Symantec et permet d\u0027effectuer des mises \u00e0 jour automatiques de\ntous les produits Symantec.\n\nLorsqu\u0027une session interactive LiveUpdate est disponible, un utilisateur\nlocal mal intentionn\u00e9 peut, gr\u00e2ce \u00e0 l\u0027interface graphique, \u00e9lever ses\npropres privil\u00e8ges.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur (cf. section\nDocumentation) pour l\u0027obtention des correctifs.\n",
  "cves": [],
  "initial_release_date": "2004-12-17T00:00:00",
  "last_revision_date": "2004-12-17T00:00:00",
  "links": [],
  "reference": "CERTA-2004-AVI-404",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2004-12-17T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": null,
  "title": "Vuln\u00e9rabilit\u00e9 de LiveUpdate pour les produits Symantec",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 de Symantec",
      "url": "http://securityresponse.symantec.com/avcenter/security/Content/2004.12.13a.html"
    }
  ]
}