{"$ref":"https://www.cert.ssi.gouv.fr/openapi.json","affected_systems":[{"description":"BizTalk Server 2004 Service Pack 2.","product":{"name":"N/A","vendor":{"name":"N/A","scada":false}}},{"description":"BizTalk Server 2004 Service Pack 1 ;","product":{"name":"N/A","vendor":{"name":"N/A","scada":false}}},{"description":"Platform SDK Redistributable: CAPICOM ;","product":{"name":"Platform","vendor":{"name":"SolarWinds","scada":false}}},{"description":"CAPICOM ;","product":{"name":"N/A","vendor":{"name":"N/A","scada":false}}}],"affected_systems_content":null,"content":"## Description\n\nUne vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans Cryptographic API Component\nObject Model (CAPICOM). Elle affecte le contr\u00f4le ActiveX\nCAPICOM.Certificates. Un utilisateur malintentionn\u00e9 peut, par le biais\nd'un site web ou d'un message \u00e9lectronique habilement constitu\u00e9,\nex\u00e9cuter du code arbitraire \u00e0 distance sur la machine de sa victime.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l'\u00e9diteur pour l'obtention des\ncorrectifs (cf. section Documentation).\n","cves":[{"name":"CVE-2007-0940","url":"https://www.cve.org/CVERecord?id=CVE-2007-0940"}],"links":[],"reference":"CERTA-2007-AVI-208","revisions":[{"description":"version initiale.","revision_date":"2007-05-09T00:00:00.000000"}],"risks":[{"description":"Ex\u00e9cution de code arbitraire \u00e0 distance"}],"summary":"Une vuln\u00e9rabilit\u00e9 dans CAPICOM permet l'ex\u00e9cution de code arbitraire \u00e0\ndistance.\n","title":"Vuln\u00e9rabilit\u00e9 dans CAPICOM","vendor_advisories":[{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Microsoft MS07-028 du 08 mai 2007","url":"http://www.microsoft.com/technet/security/Bulletin/MS07-028.mspx"}]}