{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "BitDefendre Online Scanner.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "ESET",
          "scada": false
        }
      }
    },
    {
      "description": "BitDefender for ISA Server ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "ESET",
          "scada": false
        }
      }
    },
    {
      "description": "BitDefender Internet Security ;",
      "product": {
        "name": "Internet Security",
        "vendor": {
          "name": "ESET",
          "scada": false
        }
      }
    },
    {
      "description": "BitDefender for MS Exchange 2003 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "ESET",
          "scada": false
        }
      }
    },
    {
      "description": "BitDefender Mail Protection for Entreprises ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "ESET",
          "scada": false
        }
      }
    },
    {
      "description": "BitDefender for MS Exchange 5.5 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "ESET",
          "scada": false
        }
      }
    },
    {
      "description": "BitDefender Antivirus Plus ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "ESET",
          "scada": false
        }
      }
    },
    {
      "description": "BitDefender for MS Exchange 2000 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "ESET",
          "scada": false
        }
      }
    },
    {
      "description": "BitDefender Antivirus ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "ESET",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nUne vuln\u00e9rabilit\u00e9 de type d\u00e9passement d\u0027entier dans le traitement des\nfichiers ex\u00e9cutables au format PE permet \u00e0 un utilisateur distant\nmalintentionn\u00e9 d\u0027ex\u00e9cuter du code arbitraire par le biais d\u0027un fichier\nsp\u00e9cialement con\u00e7u. Cette vuln\u00e9rabilit\u00e9 est pr\u00e9sente au niveau du moteur\nd\u0027analyse antivirus de BitDefender (cevakrnl.xmd).\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [],
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 BitDefender 323 du 15 d\u00e9cembre 2006 :",
      "url": "http://bitdefender.com/KB323-en-cevakrnl.xmd-vulnerability.html"
    }
  ],
  "reference": "CERTA-2006-AVI-558",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2006-12-18T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 affectant les produits BitDefender permet \u00e0 un\nutilisateur d\u0027ex\u00e9cuter du code arbitraire \u00e0 distance.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans BitDefender",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 BitDefender du 15 d\u00e9cembre 2006",
      "url": null
    }
  ]
}