{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "SAP Internet Graphics Service (IGS) version 6.40 et versions ant\u00e9rieures ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "SAP",
          "scada": false
        }
      }
    },
    {
      "description": "SAP Internet Graphics Service (IGS) version 7.00 et versions ant\u00e9rieures.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "SAP",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nDeux vuln\u00e9rabilit\u00e9s de type d\u00e9bordement de m\u00e9moire, caus\u00e9es par une\nerreur dans le traitement des adresses r\u00e9ticulaires (URL), permettent \u00e0\nun utilisateur distant mal intentionn\u00e9 de provoquer un d\u00e9ni de service\nou d\u0027ex\u00e9cuter du code arbitraire via une requ\u00eate HTTP sp\u00e9cialement\nconstruite.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [],
  "initial_release_date": "2006-08-11T00:00:00",
  "last_revision_date": "2006-08-11T00:00:00",
  "links": [],
  "reference": "CERTA-2006-AVI-352",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2006-08-11T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    }
  ],
  "summary": "Deux vuln\u00e9rabilit\u00e9s dans SAP Internet Graphics Service permettent \u00e0 un\nutilisateur distant mal intentionn\u00e9 d\u0027ex\u00e9cuter du code arbitraire \u00e0\ndistance ou de provoquer un d\u00e9ni de service \u00e9galement \u00e0 distance.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans SAP Internet Graphics Service",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletins de s\u00e9curit\u00e9 CYBSEC du 10 ao\u00fbt 2006",
      "url": "http://www.cybsec.com/vuln/CYBSEC-Security_Pre-Advisory_SAP_IGS_Remote_Buffer_Overflow.pdf"
    }
  ]
}