{"$ref":"https://www.cert.ssi.gouv.fr/openapi.json","affected_systems":[{"description":"Microsoft Windows 98 ;","product":{"name":"Windows","vendor":{"name":"Microsoft","scada":false}}},{"description":"Microsoft Windows Me ;","product":{"name":"Windows","vendor":{"name":"Microsoft","scada":false}}},{"description":"Microsoft Windows NT 4.0 Terminal Server Edition ;","product":{"name":"Windows","vendor":{"name":"Microsoft","scada":false}}},{"description":"Microsoft Windows 98 Second Edition ;","product":{"name":"Windows","vendor":{"name":"Microsoft","scada":false}}},{"description":"Microsoft Windows NT 4.0 ;","product":{"name":"Windows","vendor":{"name":"Microsoft","scada":false}}},{"description":"Microsoft Windows 2000 ;","product":{"name":"Windows","vendor":{"name":"Microsoft","scada":false}}},{"description":"Microsoft Windows XP.","product":{"name":"Windows","vendor":{"name":"Microsoft","scada":false}}}],"affected_systems_content":null,"content":"## Description\n\nWindows Script Engine est un composant de Windows qui interpr\u00e8te et\nex\u00e9cute les scripts \u00e9crits dans les langages tels que JScript, VBscript,\n...  \n\nUn d\u00e9bordement de m\u00e9moire dans la biblioth\u00e8que qui g\u00e8re les programmes\nde type JSscript (JScript.dll) permet \u00e0 un utilisateur mal intentionn\u00e9\nd'ex\u00e9cuter du code arbitraire sur la machine de sa victime, par le biais\nd'une page web ou d'un m\u00e9l au format HTML.\n\n## Contournement provisoire\n\nD\u00e9sactiver l'ex\u00e9cution de scripts dans les navigateurs et les clients de\ncourrier.\n\n## Solution\n\nAppliquer le correctif fourni par Microsoft (cf. section Documentation).\n","cves":[],"links":[{"title":"Avis de s\u00e9curit\u00e9 Microsoft :","url":"http://www.microsoft.com/technet/security/bulletin/MS03-008.asp"}],"reference":"CERTA-2003-AVI-054","revisions":[{"description":"version initiale.","revision_date":"2003-03-20T00:00:00.000000"}],"risks":[{"description":"Ex\u00e9cution de code arbitraire"}],"summary":"Une vuln\u00e9rabilit\u00e9 de Windows Script Engine permet l'ex\u00e9cution de code\narbitraire.\n","title":"Vuln\u00e9rabilit\u00e9 de Windows Script Engine","vendor_advisories":[{"published_at":null,"title":"Avis de s\u00e9curit\u00e9 Microsoft MS03-008","url":null}]}