{"$ref":"https://www.cert.ssi.gouv.fr/openapi.json","affected_systems":[{"description":"Microsoft Windows XP 64-Bit Edition version 2003 ;","product":{"name":"Windows","vendor":{"name":"Microsoft","scada":false}}},{"description":"Microsoft Windows XP ;","product":{"name":"Windows","vendor":{"name":"Microsoft","scada":false}}},{"description":"Microsoft Windows Server 2003 ;","product":{"name":"Windows","vendor":{"name":"Microsoft","scada":false}}},{"description":"Microsoft Windows XP 64-Bit Edition Service Pack 1 ;","product":{"name":"Windows","vendor":{"name":"Microsoft","scada":false}}},{"description":"Microsoft Windows XP Service Pack 1 ;","product":{"name":"Windows","vendor":{"name":"Microsoft","scada":false}}},{"description":"Microsoft Windows Server 2003 64-Bit Edition.","product":{"name":"Windows","vendor":{"name":"Microsoft","scada":false}}}],"affected_systems_content":null,"content":"## Description\n\nUn d\u00e9bordement de pile est pr\u00e9sent dans la biblioth\u00e8que zipfldr.dll\npermettant la manipulation des r\u00e9pertoires compress\u00e9s.  \nUn utilisateur mal intentionn\u00e9 peut, via l'utilisation d'un r\u00e9pertoire\ncompress\u00e9 contenant un fichier habilement constitu\u00e9, r\u00e9aliser un d\u00e9ni de\nservice ou ex\u00e9cuter du code arbitraire sur la plate-forme vuln\u00e9rable.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l'\u00e9diteur pour l'obtention des\ncorrectifs (cf. section Documentation).\n","cves":[],"links":[],"reference":"CERTA-2004-AVI-338","revisions":[{"description":"version initiale.","revision_date":"2004-10-13T00:00:00.000000"}],"risks":[{"description":"Ex\u00e9cution de code arbitraire \u00e0 distance"},{"description":"D\u00e9ni de service"}],"summary":"Une vuln\u00e9rabilit\u00e9 dans la gestion des r\u00e9pertoires compress\u00e9s permet \u00e0 un\nutilisateur mal intentionn\u00e9 de r\u00e9aliser un d\u00e9ni de service ou d'ex\u00e9cuter\ndu code arbitraire \u00e0 distance.\n","title":"Vuln\u00e9rabilit\u00e9 des r\u00e9pertoires compress\u00e9s sous Windows","vendor_advisories":[{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Microsoft MS04-034 du 12 octobre 2004","url":"http://www.microsoft.com/technet/security/bulletin/MS04-034.mspx"}]}