{"$ref":"https://www.cert.ssi.gouv.fr/openapi.json","affected_systems":[{"description":"Altiris Deployment Solution versions 6.9.x ;","product":{"name":"N/A","vendor":{"name":"Symantec","scada":false}}},{"description":"Altiris Notification Server versions 6.0.x ;","product":{"name":"N/A","vendor":{"name":"Symantec","scada":false}}},{"description":"Symantec Management Platform versions 7.0.x.","product":{"name":"N/A","vendor":{"name":"Symantec","scada":false}}}],"affected_systems_content":null,"content":"## Description\n\nUne vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans le contr\u00f4le ActiveX\nAeXNSPkgDLLib.dll livr\u00e9 avec les produits Altiris Deployment Solution,\nAltiris Notification Server et Symantec Management Platform.\nL'exploitation de cette vuln\u00e9rabilit\u00e9, via une page Web ou un message\n\u00e9lectronique sp\u00e9cifique, permet l'ex\u00e9cution de code arbitraire \u00e0\ndistance.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l'\u00e9diteur pour l'obtention des\ncorrectifs (cf. section Documentation).\n","cves":[{"name":"CVE-2009-0328","url":"https://www.cve.org/CVERecord?id=CVE-2009-0328"}],"links":[],"reference":"CERTA-2009-AVI-396","revisions":[{"description":"version initiale.","revision_date":"2009-09-23T00:00:00.000000"}],"risks":[{"description":"Ex\u00e9cution de code arbitraire \u00e0 distance"}],"summary":"Une vuln\u00e9rabilit\u00e9 dans certains produits <span\nclass=\"textit\">Symantec</span> permet d'ex\u00e9cuter du code arbitraire \u00e0\ndistance.\n","title":"Vuln\u00e9rabilit\u00e9 dans Symantec Altiris","vendor_advisories":[{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Symantec SYM09-013 du 22 septembre 2009","url":"http://www.symantec.com/business/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&suid=20090922_00"}]}