{"$ref":"https://www.cert.ssi.gouv.fr/openapi.json","affected_systems":[{"description":"Microsoft Windows Vista SP1 et SP2 (32bits et x64) ;","product":{"name":"Windows","vendor":{"name":"Microsoft","scada":false}}},{"description":"Microsoft Windows XP Pro x64 SP2 ;","product":{"name":"Windows","vendor":{"name":"Microsoft","scada":false}}},{"description":"Microsoft Windows Server 2008 (32bits, x64 et Itanium) ;","product":{"name":"Windows","vendor":{"name":"Microsoft","scada":false}}},{"description":"Microsoft Windows XP SP ;","product":{"name":"Windows","vendor":{"name":"Microsoft","scada":false}}},{"description":"Microsoft Windows Server 2003 SP2 (32bits, x64 et Itanium) ;","product":{"name":"Windows","vendor":{"name":"Microsoft","scada":false}}},{"description":"Microsoft Windows Server 2008 R2 (x64 et Itanium) ;","product":{"name":"Windows","vendor":{"name":"Microsoft","scada":false}}},{"description":"Microsoft Windows 7 SP1 (32bits et x64).","product":{"name":"Windows","vendor":{"name":"Microsoft","scada":false}}},{"description":"Microsoft Windows 7 (32bits et x64) ;","product":{"name":"Windows","vendor":{"name":"Microsoft","scada":false}}},{"description":"Microsoft Windows Server 2008 R2 SP1 (x64 et Itanium) ;","product":{"name":"Windows","vendor":{"name":"Microsoft","scada":false}}},{"description":"Microsoft Windows Server 2008 SP2 (32bits, x64 et Itanium) ;","product":{"name":"Windows","vendor":{"name":"Microsoft","scada":false}}}],"affected_systems_content":null,"content":"## Description\n\nUne vuln\u00e9rabilit\u00e9 dans Microsoft Windows Ancillary Function Driver (AFD)\ndue \u00e0 une entr\u00e9e non valid\u00e9e dans le noyau Windows a \u00e9t\u00e9 corrig\u00e9e. Elle\npermet \u00e0 un utilisateur malintentionn\u00e9 disposant d'un compte sur la\nmachine vuln\u00e9rable d'\u00e9lever ses privil\u00e8ges au moyen d'un ex\u00e9cutable\nsp\u00e9cialement con\u00e7u.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l'\u00e9diteur pour l'obtention des\ncorrectifs (cf. section Documentation).\n","cves":[{"name":"CVE-2011-1249","url":"https://www.cve.org/CVERecord?id=CVE-2011-1249"}],"links":[],"reference":"CERTA-2011-AVI-354","revisions":[{"description":"version initiale.","revision_date":"2011-06-15T00:00:00.000000"}],"risks":[{"description":"\u00c9l\u00e9vation de privil\u00e8ges"}],"summary":"Une vuln\u00e9rabilit\u00e9 dans <span class=\"textit\">Microsoft Windows Ancillary\nFunction Driver</span> (AFD) a \u00e9t\u00e9 corrig\u00e9e et permet \u00e0 un utilisateur\nmalintentionn\u00e9 d'\u00e9lever ses privil\u00e8ges.\n","title":"Vuln\u00e9rabilit\u00e9 dans le composant AFD de Microsoft","vendor_advisories":[{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Microsoft MS11-046 du 14 juin 2011","url":"http://www.microsoft.com/technet/security/Bulletin/MS11-046.mspx"}]}