{"$ref":"https://www.cert.ssi.gouv.fr/openapi.json","affected_systems":[{"description":"Symantec Endpoint Protection 12.0","product":{"name":"N/A","vendor":{"name":"Symantec","scada":false}}},{"description":"Symantec Endpoint Protection 11.0","product":{"name":"N/A","vendor":{"name":"Symantec","scada":false}}},{"description":"Symantec Endpoint Protection 12.1","product":{"name":"N/A","vendor":{"name":"Symantec","scada":false}}}],"affected_systems_content":null,"content":"## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l'\u00e9diteur pour l'obtention des\ncorrectifs (cf. section Documentation).\n","cves":[{"name":"CVE-2012-4348","url":"https://www.cve.org/CVERecord?id=CVE-2012-4348"},{"name":"CVE-2012-4349","url":"https://www.cve.org/CVERecord?id=CVE-2012-4349"}],"links":[],"reference":"CERTA-2012-AVI-728","revisions":[{"description":"version initiale.","revision_date":"2012-12-12T00:00:00.000000"}],"risks":[{"description":"Ex\u00e9cution de code arbitraire \u00e0 distance"},{"description":"Ex\u00e9cution de code arbitraire"}],"summary":"Deux vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans <span class=\"textit\">Symantec\nEndpoint Protection</span>. La premi\u00e8re permet \u00e0 un utilisateur non\nautoris\u00e9 ayant acc\u00e8s \u00e0 la console d'ex\u00e9cuter du code arbitraire avec le\nniveau de droits de l'application. La seconde permet \u00e0 un utilisateur en\nlocal d'ex\u00e9cuter du code arbitraire.\n","title":"Vuln\u00e9rabilit\u00e9s dans Symantec Endpoint Protection","vendor_advisories":[{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Symantec SYM12-019 du 10 d\u00e9cembre 2012","url":"http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20121210_00"}]}