{"$ref":"https://www.cert.ssi.gouv.fr/openapi.json","affected_systems":[{"description":"Microsoft Windows XP ;","product":{"name":"Windows","vendor":{"name":"Microsoft","scada":false}}},{"description":"Microsoft Windows XP 64-Bit Edition.","product":{"name":"Windows","vendor":{"name":"Microsoft","scada":false}}},{"description":"Microsoft Windows 2000 Service Pack 2, Service Pack 3, Service Pack 4 ;","product":{"name":"Windows","vendor":{"name":"Microsoft","scada":false}}},{"description":"Microsoft Windows XP Service Pack 1 ;","product":{"name":"Windows","vendor":{"name":"Microsoft","scada":false}}}],"affected_systems_content":null,"content":"## Description\n\nUne vuln\u00e9rabilit\u00e9 de type d\u00e9bordement de m\u00e9moire est pr\u00e9sente dans une\nfonction de gestion de journaux mise en oeuvre dans le service\nWorkstation Service (WKSSVC.DLL). En exploitant cette vuln\u00e9rabilit\u00e9, un\nutilisateur mal intentionn\u00e9 peut r\u00e9aliser un d\u00e9ni de service ou ex\u00e9cuter\ndu code arbitraire \u00e0 distance avec les privil\u00e8ges SYSTEM.\n\n## Contournement provisoire\n\n-   D\u00e9sactiver Windows Workstation Service (tout service d\u00e9pendant de\n    Windows Workstation Service ne fonctionnera plus, tel le partage de\n    fichiers par exemple).\n-   Filtrer les ports TCP et UDP 138,139 et 445.\n\n## Solution\n\nAppliquer le correctif fourni par Microsoft :\n\n    http://www.microsoft.com/technet/security/bulletin/MS03-049.asp\n","cves":[],"links":[{"title":"Avis de s\u00e9curit\u00e9 du CERT/CC CA-2003-28 :","url":"http://www.cert.org/advisories/CA-2003-28.html"},{"title":"Avis de s\u00e9curit\u00e9 de Eeye AD20031111 :","url":"http://www.eeye.com/html/Research/Advisories/AD20031111.html"}],"reference":"CERTA-2003-AVI-185","revisions":[{"description":"version initiale.","revision_date":"2003-11-12T00:00:00.000000"}],"risks":[{"description":"Ex\u00e9cution de code arbitraire \u00e0 distance"},{"description":"D\u00e9ni de service"}],"summary":"Une vuln\u00e9rabilit\u00e9 dans le service Windows Workstation Service permet \u00e0\nun utilisateur mal intentionn\u00e9 de r\u00e9aliser un d\u00e9ni de service ou\nd'ex\u00e9cuter du code arbitraire \u00e0 distance.\n","title":"Vuln\u00e9rabilit\u00e9 dans Windows Workstation Service","vendor_advisories":[{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Microsoft MS03-049","url":"http://www.microsoft.com/technet/security/bulletin/MS03-049.asp"}]}