{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "X.org XFS versions 1.0.4 et ant\u00e9rieures.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nDeux vuln\u00e9rabilit\u00e9s, existant dans X.Org XFS, permettent l\u0027ex\u00e9cution de\ncode arbitraire \u00e0 distance par un individu malveillant :\n\n-   la premi\u00e8re des vuln\u00e9rabilit\u00e9s permet un d\u00e9bordement d\u0027entier via la\n    fonction build_range() ;\n-   pour la seconde, un nombre arbitraire de bits permet un d\u00e9passement\n    de m\u00e9moire dans la fonction swap_char2b().\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 des \u00e9diteurs pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2007-4568",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-4568"
    },
    {
      "name": "CVE-2007-4990",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-4990"
    }
  ],
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Sun du 06 novembre 2007:",
      "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103114-1"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 SUSE du 12 octobre 2007:",
      "url": "http://www.novell.com/linux/security/advisories/2007_54_xorg.html"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 HP-UX du 14 janvier 2008:",
      "url": "http://h20000.ww2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01323725"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Mandriva du 06 novembre 2007:",
      "url": "http://www.mandriva.com/en/security/advisories?name=MDKSA-2007:210"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Gentoo du 12 octobre 2007:",
      "url": "http://www.gentoo.org/security/en/glsa/glsa-200710-11.xml"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 de iDefense du 02 octobre 2007 :",
      "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=602"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Debian du 09 octobre 2007:",
      "url": "http://www.debian.org/security/2007/dsa-1385"
    }
  ],
  "reference": "CERTA-2007-AVI-424",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2007-10-04T00:00:00.000000"
    },
    {
      "description": "ajout de la r\u00e9f\u00e9rence CVE et des r\u00e9f\u00e9rences aux bulletins de s\u00e9curit\u00e9 Mandriva, Gentoo, SUSE et Sun.",
      "revision_date": "2007-11-07T00:00:00.000000"
    },
    {
      "description": "ajout de la r\u00e9f\u00e9rence au bulletin de s\u00e9curit\u00e9 HP-UX.",
      "revision_date": "2008-01-16T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans X.Org XFS\npermettant l\u0027ex\u00e9cution de code arbitraire \u00e0 distance.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans X.Org",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 de X.Org du 02 octobre 2007",
      "url": "http://lists.freedesktop.org/archives/xorg-announce/2007-October/000416.html"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "IBM AIX 5.3.",
      "product": {
        "name": "AIX",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "IBM AIX 5.2 ;",
      "product": {
        "name": "AIX",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nDe multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 identifi\u00e9es dans IBM AIX :\n\n-   Des vuln\u00e9rabilit\u00e9s permettent \u00e0 un individu malveillant l\u0027ex\u00e9cution\n    locale ou \u00e0 distance de code arbitraire avec des privil\u00e8ges\n    d\u0027administration ;\n-   une vuln\u00e9rabilit\u00e9 permet une atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es et\n    un contournement de la politique de s\u00e9curit\u00e9.\n\n## Contournement provisoire\n\nDes correctifs temporaires ont \u00e9t\u00e9 mis \u00e0 disposition par IBM pour\ncertaines des vuln\u00e9rabilit\u00e9s. Ces correctifs peuvent parfois avoir\ncertains effets de bord, il est recommand\u00e9 de les tester avant un\nd\u00e9ploiement sur des syst\u00e8mes en production.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de IBM pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2007-4568",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-4568"
    },
    {
      "name": "CVE-2007-4621",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-4621"
    },
    {
      "name": "CVE-2007-4622",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-4622"
    },
    {
      "name": "CVE-2007-4990",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-4990"
    }
  ],
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 IBM IZ05487 du 24 octobre 2007 :",
      "url": "http://www-1.ibm.com/support/docview.wss?uid=isg1IZ05487"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 IBM IZ04832 du 18 octobre 2007 :      http://www-1.ibm.com/support/docview.wss?uid=isg1IZ0432",
      "url": "http://www-1.ibm.com/support/docview.wss?uid=isg1IZ04832"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 IBM IZ05349 du 25 octobre 2007 :",
      "url": "http://www-1.ibm.com/support/docview.wss?uid=isg1IZ05349"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 IBM IZ05065 du 25 octobre 2007 :",
      "url": "http://www-1.ibm.com/support/docview.wss?uid=isg1IZ05065"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 IBM IZ05971 du 18 octobre 2007 :",
      "url": "http://www-1.ibm.com/support/docview.wss?uid=isg1IZ05971"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 IBM IZ03060 du 29 octobre 2007 :",
      "url": "http://www-1.ibm.com/support/docview.wss?uid=isg1IZ03060"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 IBM IZ05066 du 25 octobre 2007 :",
      "url": "http://www-1.ibm.com/support/docview.wss?uid=isg1IZ05066"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 IBM IZ05129 du 25 octobre 2007 :",
      "url": "http://www-1.ibm.com/support/docview.wss?uid=isg1IZ05129"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 IBM IZ03061 du 25 octobre 2007 :",
      "url": "http://www-1.ibm.com/support/docview.wss?uid=isg1IZ03061"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 IBM IZ05017 du 29 octobre 2007 :",
      "url": "http://www-1.ibm.com/support/docview.wss?uid=isg1IZ05017"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 IBM IZ03055 du 25 octobre 2007 :",
      "url": "http://www-1.ibm.com/support/docview.wss?uid=isg1IZ03055"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 IBM IZ05877 du 18 octobre 2007 :",
      "url": "http://www-1.ibm.com/support/docview.wss?uid=isg1IZ05877"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 IBM IZ03054 du 29 octobre 2007 :",
      "url": "http://www-1.ibm.com/support/docview.wss?uid=isg1IZ03054"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 IBM IZ06001 du 29 octobre 2007 :",
      "url": "http://www-1.ibm.com/support/docview.wss?uid=isg1IZ06001"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 IBM IZ05488 du 24 octobre 2007 :",
      "url": "http://www-1.ibm.com/support/docview.wss?uid=isg1IZ05488"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 IBM IZ06648 du 29 octobre 2007 :",
      "url": "http://www-1.ibm.com/support/docview.wss?uid=isg1IZ06648"
    }
  ],
  "reference": "CERTA-2007-AVI-464",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2007-10-31T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s dans IBM AIX permettent \u00e0 une personne\nmalveillante d\u0027ex\u00e9cuter du code arbitraire \u00e0 distance, de porter\natteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es et de contourner la politique de\ns\u00e9curit\u00e9.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans IBM AIX",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletins de s\u00e9curit\u00e9 de IBM AIX",
      "url": null
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Apple Mac Os X version 10.4.11 et ant\u00e9rieures ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "Apple Mac Os X version 10.5.2 et ant\u00e9rieures.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nDe multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans le syst\u00e8me\nd\u0027exploitation Apple Mac OS X. L\u0027exploitation de ces vuln\u00e9rabilit\u00e9s\npermet \u00e0 un individu malveillant diverses actions dont ex\u00e9cuter du code\narbitaire \u00e0 distance, effectuer un d\u00e9ni de service, contourner la\npolitique de s\u00e9curit\u00e9, \u00e9lever ses privil\u00e8ges et effectuer une atteinte \u00e0\nla confidentialit\u00e9 des donn\u00e9es.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 Apple 307562 pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2008-0063",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-0063"
    },
    {
      "name": "CVE-2008-0060",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-0060"
    },
    {
      "name": "CVE-2007-3847",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-3847"
    },
    {
      "name": "CVE-2007-6109",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-6109"
    },
    {
      "name": "CVE-2007-1661",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-1661"
    },
    {
      "name": "CVE-2008-0882",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-0882"
    },
    {
      "name": "CVE-2007-6336",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-6336"
    },
    {
      "name": "CVE-2007-2799",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-2799"
    },
    {
      "name": "CVE-2006-3747",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-3747"
    },
    {
      "name": "CVE-2007-5000",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-5000"
    },
    {
      "name": "CVE-2008-1089",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-1089"
    },
    {
      "name": "CVE-2008-0005",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-0005"
    },
    {
      "name": "CVE-2007-4768",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-4768"
    },
    {
      "name": "CVE-2008-0059",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-0059"
    },
    {
      "name": "CVE-2008-1000",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-1000"
    },
    {
      "name": "CVE-2007-1660",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-1660"
    },
    {
      "name": "CVE-2007-4568",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-4568"
    },
    {
      "name": "CVE-2007-3378",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-3378"
    },
    {
      "name": "CVE-2008-0052",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-0052"
    },
    {
      "name": "CVE-2008-0990",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-0990"
    },
    {
      "name": "CVE-2008-0995",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-0995"
    },
    {
      "name": "CVE-2007-0898",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-0898"
    },
    {
      "name": "CVE-2007-5266",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-5266"
    },
    {
      "name": "CVE-2008-0055",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-0055"
    },
    {
      "name": "CVE-2007-1997",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-1997"
    },
    {
      "name": "CVE-2007-1659",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-1659"
    },
    {
      "name": "CVE-2007-6337",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-6337"
    },
    {
      "name": "CVE-2008-0044",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-0044"
    },
    {
      "name": "CVE-2008-0045",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-0045"
    },
    {
      "name": "CVE-2007-5971",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-5971"
    },
    {
      "name": "CVE-2008-0046",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-0046"
    },
    {
      "name": "CVE-2008-0047",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-0047"
    },
    {
      "name": "CVE-2007-6335",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-6335"
    },
    {
      "name": "CVE-2007-5267",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-5267"
    },
    {
      "name": "CVE-2007-3725",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-3725"
    },
    {
      "name": "CVE-2008-0054",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-0054"
    },
    {
      "name": "CVE-2008-0996",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-0996"
    },
    {
      "name": "CVE-2007-5268",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-5268"
    },
    {
      "name": "CVE-2007-6203",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-6203"
    },
    {
      "name": "CVE-2008-0051",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-0051"
    },
    {
      "name": "CVE-2007-3799",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-3799"
    },
    {
      "name": "CVE-2008-0048",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-0048"
    },
    {
      "name": "CVE-2007-1662",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-1662"
    },
    {
      "name": "CVE-2006-3334",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-3334"
    },
    {
      "name": "CVE-2008-0998",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-0998"
    },
    {
      "name": "CVE-2007-0897",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-0897"
    },
    {
      "name": "CVE-2008-0318",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-0318"
    },
    {
      "name": "CVE-2007-6429",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-6429"
    },
    {
      "name": "CVE-2007-4510",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-4510"
    },
    {
      "name": "CVE-2007-5269",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-5269"
    },
    {
      "name": "CVE-2007-5795",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-5795"
    },
    {
      "name": "CVE-2008-0006",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-0006"
    },
    {
      "name": "CVE-2008-0062",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-0062"
    },
    {
      "name": "CVE-2008-0728",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-0728"
    },
    {
      "name": "CVE-2007-2445",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-2445"
    },
    {
      "name": "CVE-2008-0049",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-0049"
    },
    {
      "name": "CVE-2007-1745",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-1745"
    },
    {
      "name": "CVE-2007-6427",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-6427"
    },
    {
      "name": "CVE-2008-0987",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-0987"
    },
    {
      "name": "CVE-2008-0993",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-0993"
    },
    {
      "name": "CVE-2008-0988",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-0988"
    },
    {
      "name": "CVE-2008-0056",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-0056"
    },
    {
      "name": "CVE-2008-0992",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-0992"
    },
    {
      "name": "CVE-2006-5793",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-5793"
    },
    {
      "name": "CVE-2007-6428",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-6428"
    },
    {
      "name": "CVE-2008-0989",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-0989"
    },
    {
      "name": "CVE-2005-3352",
      "url": "https://www.cve.org/CVERecord?id=CVE-2005-3352"
    },
    {
      "name": "CVE-2008-0053",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-0053"
    },
    {
      "name": "CVE-2007-4767",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-4767"
    },
    {
      "name": "CVE-2008-0050",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-0050"
    },
    {
      "name": "CVE-2007-5958",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-5958"
    },
    {
      "name": "CVE-2006-6481",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-6481"
    },
    {
      "name": "CVE-2008-0994",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-0994"
    },
    {
      "name": "CVE-2007-6421",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-6421"
    },
    {
      "name": "CVE-2008-0058",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-0058"
    },
    {
      "name": "CVE-2007-4752",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-4752"
    },
    {
      "name": "CVE-2008-0999",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-0999"
    },
    {
      "name": "CVE-2007-4560",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-4560"
    },
    {
      "name": "CVE-2007-4990",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-4990"
    },
    {
      "name": "CVE-2007-4766",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-4766"
    },
    {
      "name": "CVE-2007-6388",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-6388"
    },
    {
      "name": "CVE-2008-0596",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-0596"
    },
    {
      "name": "CVE-2007-4887",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-4887"
    }
  ],
  "links": [],
  "reference": "CERTA-2008-AVI-148",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2008-03-19T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": null,
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Apple Mac OS X",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Apple 307562 du 18 mars 2008",
      "url": "http://docs.info.apple.com/article.html?artnum=307562"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "X.org XFS versions 1.0.4 et ant\u00e9rieures.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nDeux vuln\u00e9rabilit\u00e9s, existant dans X.Org XFS, permettent l\u0027ex\u00e9cution de\ncode arbitraire \u00e0 distance par un individu malveillant :\n\n-   la premi\u00e8re des vuln\u00e9rabilit\u00e9s permet un d\u00e9bordement d\u0027entier via la\n    fonction build_range() ;\n-   pour la seconde, un nombre arbitraire de bits permet un d\u00e9passement\n    de m\u00e9moire dans la fonction swap_char2b().\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 des \u00e9diteurs pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2007-4568",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-4568"
    },
    {
      "name": "CVE-2007-4990",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-4990"
    }
  ],
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Sun du 06 novembre 2007:",
      "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103114-1"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 SUSE du 12 octobre 2007:",
      "url": "http://www.novell.com/linux/security/advisories/2007_54_xorg.html"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 HP-UX du 14 janvier 2008:",
      "url": "http://h20000.ww2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01323725"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Mandriva du 06 novembre 2007:",
      "url": "http://www.mandriva.com/en/security/advisories?name=MDKSA-2007:210"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Gentoo du 12 octobre 2007:",
      "url": "http://www.gentoo.org/security/en/glsa/glsa-200710-11.xml"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 de iDefense du 02 octobre 2007 :",
      "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=602"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Debian du 09 octobre 2007:",
      "url": "http://www.debian.org/security/2007/dsa-1385"
    }
  ],
  "reference": "CERTA-2007-AVI-424",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2007-10-04T00:00:00.000000"
    },
    {
      "description": "ajout de la r\u00e9f\u00e9rence CVE et des r\u00e9f\u00e9rences aux bulletins de s\u00e9curit\u00e9 Mandriva, Gentoo, SUSE et Sun.",
      "revision_date": "2007-11-07T00:00:00.000000"
    },
    {
      "description": "ajout de la r\u00e9f\u00e9rence au bulletin de s\u00e9curit\u00e9 HP-UX.",
      "revision_date": "2008-01-16T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans X.Org XFS\npermettant l\u0027ex\u00e9cution de code arbitraire \u00e0 distance.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans X.Org",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 de X.Org du 02 octobre 2007",
      "url": "http://lists.freedesktop.org/archives/xorg-announce/2007-October/000416.html"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "IBM AIX 5.3.",
      "product": {
        "name": "AIX",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "IBM AIX 5.2 ;",
      "product": {
        "name": "AIX",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nDe multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 identifi\u00e9es dans IBM AIX :\n\n-   Des vuln\u00e9rabilit\u00e9s permettent \u00e0 un individu malveillant l\u0027ex\u00e9cution\n    locale ou \u00e0 distance de code arbitraire avec des privil\u00e8ges\n    d\u0027administration ;\n-   une vuln\u00e9rabilit\u00e9 permet une atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es et\n    un contournement de la politique de s\u00e9curit\u00e9.\n\n## Contournement provisoire\n\nDes correctifs temporaires ont \u00e9t\u00e9 mis \u00e0 disposition par IBM pour\ncertaines des vuln\u00e9rabilit\u00e9s. Ces correctifs peuvent parfois avoir\ncertains effets de bord, il est recommand\u00e9 de les tester avant un\nd\u00e9ploiement sur des syst\u00e8mes en production.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de IBM pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2007-4568",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-4568"
    },
    {
      "name": "CVE-2007-4621",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-4621"
    },
    {
      "name": "CVE-2007-4622",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-4622"
    },
    {
      "name": "CVE-2007-4990",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-4990"
    }
  ],
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 IBM IZ05487 du 24 octobre 2007 :",
      "url": "http://www-1.ibm.com/support/docview.wss?uid=isg1IZ05487"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 IBM IZ04832 du 18 octobre 2007 :      http://www-1.ibm.com/support/docview.wss?uid=isg1IZ0432",
      "url": "http://www-1.ibm.com/support/docview.wss?uid=isg1IZ04832"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 IBM IZ05349 du 25 octobre 2007 :",
      "url": "http://www-1.ibm.com/support/docview.wss?uid=isg1IZ05349"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 IBM IZ05065 du 25 octobre 2007 :",
      "url": "http://www-1.ibm.com/support/docview.wss?uid=isg1IZ05065"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 IBM IZ05971 du 18 octobre 2007 :",
      "url": "http://www-1.ibm.com/support/docview.wss?uid=isg1IZ05971"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 IBM IZ03060 du 29 octobre 2007 :",
      "url": "http://www-1.ibm.com/support/docview.wss?uid=isg1IZ03060"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 IBM IZ05066 du 25 octobre 2007 :",
      "url": "http://www-1.ibm.com/support/docview.wss?uid=isg1IZ05066"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 IBM IZ05129 du 25 octobre 2007 :",
      "url": "http://www-1.ibm.com/support/docview.wss?uid=isg1IZ05129"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 IBM IZ03061 du 25 octobre 2007 :",
      "url": "http://www-1.ibm.com/support/docview.wss?uid=isg1IZ03061"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 IBM IZ05017 du 29 octobre 2007 :",
      "url": "http://www-1.ibm.com/support/docview.wss?uid=isg1IZ05017"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 IBM IZ03055 du 25 octobre 2007 :",
      "url": "http://www-1.ibm.com/support/docview.wss?uid=isg1IZ03055"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 IBM IZ05877 du 18 octobre 2007 :",
      "url": "http://www-1.ibm.com/support/docview.wss?uid=isg1IZ05877"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 IBM IZ03054 du 29 octobre 2007 :",
      "url": "http://www-1.ibm.com/support/docview.wss?uid=isg1IZ03054"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 IBM IZ06001 du 29 octobre 2007 :",
      "url": "http://www-1.ibm.com/support/docview.wss?uid=isg1IZ06001"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 IBM IZ05488 du 24 octobre 2007 :",
      "url": "http://www-1.ibm.com/support/docview.wss?uid=isg1IZ05488"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 IBM IZ06648 du 29 octobre 2007 :",
      "url": "http://www-1.ibm.com/support/docview.wss?uid=isg1IZ06648"
    }
  ],
  "reference": "CERTA-2007-AVI-464",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2007-10-31T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s dans IBM AIX permettent \u00e0 une personne\nmalveillante d\u0027ex\u00e9cuter du code arbitraire \u00e0 distance, de porter\natteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es et de contourner la politique de\ns\u00e9curit\u00e9.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans IBM AIX",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletins de s\u00e9curit\u00e9 de IBM AIX",
      "url": null
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Apple Mac Os X version 10.4.11 et ant\u00e9rieures ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "Apple Mac Os X version 10.5.2 et ant\u00e9rieures.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nDe multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans le syst\u00e8me\nd\u0027exploitation Apple Mac OS X. L\u0027exploitation de ces vuln\u00e9rabilit\u00e9s\npermet \u00e0 un individu malveillant diverses actions dont ex\u00e9cuter du code\narbitaire \u00e0 distance, effectuer un d\u00e9ni de service, contourner la\npolitique de s\u00e9curit\u00e9, \u00e9lever ses privil\u00e8ges et effectuer une atteinte \u00e0\nla confidentialit\u00e9 des donn\u00e9es.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 Apple 307562 pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2008-0063",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-0063"
    },
    {
      "name": "CVE-2008-0060",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-0060"
    },
    {
      "name": "CVE-2007-3847",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-3847"
    },
    {
      "name": "CVE-2007-6109",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-6109"
    },
    {
      "name": "CVE-2007-1661",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-1661"
    },
    {
      "name": "CVE-2008-0882",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-0882"
    },
    {
      "name": "CVE-2007-6336",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-6336"
    },
    {
      "name": "CVE-2007-2799",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-2799"
    },
    {
      "name": "CVE-2006-3747",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-3747"
    },
    {
      "name": "CVE-2007-5000",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-5000"
    },
    {
      "name": "CVE-2008-1089",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-1089"
    },
    {
      "name": "CVE-2008-0005",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-0005"
    },
    {
      "name": "CVE-2007-4768",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-4768"
    },
    {
      "name": "CVE-2008-0059",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-0059"
    },
    {
      "name": "CVE-2008-1000",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-1000"
    },
    {
      "name": "CVE-2007-1660",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-1660"
    },
    {
      "name": "CVE-2007-4568",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-4568"
    },
    {
      "name": "CVE-2007-3378",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-3378"
    },
    {
      "name": "CVE-2008-0052",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-0052"
    },
    {
      "name": "CVE-2008-0990",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-0990"
    },
    {
      "name": "CVE-2008-0995",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-0995"
    },
    {
      "name": "CVE-2007-0898",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-0898"
    },
    {
      "name": "CVE-2007-5266",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-5266"
    },
    {
      "name": "CVE-2008-0055",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-0055"
    },
    {
      "name": "CVE-2007-1997",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-1997"
    },
    {
      "name": "CVE-2007-1659",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-1659"
    },
    {
      "name": "CVE-2007-6337",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-6337"
    },
    {
      "name": "CVE-2008-0044",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-0044"
    },
    {
      "name": "CVE-2008-0045",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-0045"
    },
    {
      "name": "CVE-2007-5971",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-5971"
    },
    {
      "name": "CVE-2008-0046",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-0046"
    },
    {
      "name": "CVE-2008-0047",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-0047"
    },
    {
      "name": "CVE-2007-6335",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-6335"
    },
    {
      "name": "CVE-2007-5267",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-5267"
    },
    {
      "name": "CVE-2007-3725",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-3725"
    },
    {
      "name": "CVE-2008-0054",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-0054"
    },
    {
      "name": "CVE-2008-0996",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-0996"
    },
    {
      "name": "CVE-2007-5268",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-5268"
    },
    {
      "name": "CVE-2007-6203",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-6203"
    },
    {
      "name": "CVE-2008-0051",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-0051"
    },
    {
      "name": "CVE-2007-3799",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-3799"
    },
    {
      "name": "CVE-2008-0048",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-0048"
    },
    {
      "name": "CVE-2007-1662",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-1662"
    },
    {
      "name": "CVE-2006-3334",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-3334"
    },
    {
      "name": "CVE-2008-0998",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-0998"
    },
    {
      "name": "CVE-2007-0897",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-0897"
    },
    {
      "name": "CVE-2008-0318",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-0318"
    },
    {
      "name": "CVE-2007-6429",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-6429"
    },
    {
      "name": "CVE-2007-4510",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-4510"
    },
    {
      "name": "CVE-2007-5269",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-5269"
    },
    {
      "name": "CVE-2007-5795",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-5795"
    },
    {
      "name": "CVE-2008-0006",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-0006"
    },
    {
      "name": "CVE-2008-0062",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-0062"
    },
    {
      "name": "CVE-2008-0728",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-0728"
    },
    {
      "name": "CVE-2007-2445",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-2445"
    },
    {
      "name": "CVE-2008-0049",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-0049"
    },
    {
      "name": "CVE-2007-1745",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-1745"
    },
    {
      "name": "CVE-2007-6427",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-6427"
    },
    {
      "name": "CVE-2008-0987",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-0987"
    },
    {
      "name": "CVE-2008-0993",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-0993"
    },
    {
      "name": "CVE-2008-0988",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-0988"
    },
    {
      "name": "CVE-2008-0056",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-0056"
    },
    {
      "name": "CVE-2008-0992",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-0992"
    },
    {
      "name": "CVE-2006-5793",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-5793"
    },
    {
      "name": "CVE-2007-6428",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-6428"
    },
    {
      "name": "CVE-2008-0989",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-0989"
    },
    {
      "name": "CVE-2005-3352",
      "url": "https://www.cve.org/CVERecord?id=CVE-2005-3352"
    },
    {
      "name": "CVE-2008-0053",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-0053"
    },
    {
      "name": "CVE-2007-4767",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-4767"
    },
    {
      "name": "CVE-2008-0050",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-0050"
    },
    {
      "name": "CVE-2007-5958",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-5958"
    },
    {
      "name": "CVE-2006-6481",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-6481"
    },
    {
      "name": "CVE-2008-0994",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-0994"
    },
    {
      "name": "CVE-2007-6421",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-6421"
    },
    {
      "name": "CVE-2008-0058",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-0058"
    },
    {
      "name": "CVE-2007-4752",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-4752"
    },
    {
      "name": "CVE-2008-0999",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-0999"
    },
    {
      "name": "CVE-2007-4560",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-4560"
    },
    {
      "name": "CVE-2007-4990",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-4990"
    },
    {
      "name": "CVE-2007-4766",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-4766"
    },
    {
      "name": "CVE-2007-6388",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-6388"
    },
    {
      "name": "CVE-2008-0596",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-0596"
    },
    {
      "name": "CVE-2007-4887",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-4887"
    }
  ],
  "links": [],
  "reference": "CERTA-2008-AVI-148",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2008-03-19T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": null,
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Apple Mac OS X",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Apple 307562 du 18 mars 2008",
      "url": "http://docs.info.apple.com/article.html?artnum=307562"
    }
  ]
}

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:x.org:x_font_server:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "B59B2204-181D-4F87-ACFD-55863DD82311",
              "versionEndIncluding": "1.0.4",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "The swap_char2b function in X.Org X Font Server (xfs) before 1.0.5 allows context-dependent attackers to execute arbitrary code via (1) QueryXBitmaps and (2) QueryXExtents protocol requests with crafted size values that specify an arbitrary number of bytes to be swapped on the heap, which triggers heap corruption."
    },
    {
      "lang": "es",
      "value": "La funci\u00f3n swap_char2b de X.Org X Font Server (xfs) anterior a 1.0.5 permite a atacantes locales o remotos (dependiendo del contexto) ejecutar c\u00f3digo de su elecci\u00f3n mediante peticiones de protocolo (1) QueryXBitmaps y (2) QueryXExtents con valores de tama\u00f1o manipulados que especifican un n\u00famero arbitrario de bytes para ser intercambiados en el mont\u00edculo, lo que produce una corrupci\u00f3n del mont\u00edculo."
    }
  ],
  "id": "CVE-2007-4990",
  "lastModified": "2026-04-23T00:35:47.467",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 7.5,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": true,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2007-10-05T21:17:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "http://bugs.freedesktop.org/show_bug.cgi?id=12299"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://bugs.gentoo.org/show_bug.cgi?id=194606"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://docs.info.apple.com/article.html?artnum=307562"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01323725"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=602"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://lists.freedesktop.org/archives/xorg-announce/2007-October/000416.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/27040"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/27052"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/27060"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/27176"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/27228"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/27240"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/27560"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/28004"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/28514"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/28536"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/28542"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/29420"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://security.gentoo.org/glsa/glsa-200710-11.xml"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103114-1"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-200642-1"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:210"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.novell.com/linux/security/advisories/2007_54_xorg.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.redhat.com/support/errata/RHSA-2008-0029.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.redhat.com/support/errata/RHSA-2008-0030.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/archive/1/481432/100/0/threaded"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/bid/25898"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securitytracker.com/id?1018763"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.vupen.com/english/advisories/2007/3337"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.vupen.com/english/advisories/2007/3338"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.vupen.com/english/advisories/2007/3467"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.vupen.com/english/advisories/2008/0149"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.vupen.com/english/advisories/2008/0924/references"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36920"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://issues.rpath.com/browse/RPL-1756"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11599"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00352.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://bugs.freedesktop.org/show_bug.cgi?id=12299"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://bugs.gentoo.org/show_bug.cgi?id=194606"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://docs.info.apple.com/article.html?artnum=307562"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01323725"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=602"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://lists.freedesktop.org/archives/xorg-announce/2007-October/000416.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/27040"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/27052"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/27060"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/27176"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/27228"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/27240"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/27560"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/28004"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/28514"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/28536"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/28542"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/29420"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://security.gentoo.org/glsa/glsa-200710-11.xml"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103114-1"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-200642-1"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:210"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.novell.com/linux/security/advisories/2007_54_xorg.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.redhat.com/support/errata/RHSA-2008-0029.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.redhat.com/support/errata/RHSA-2008-0030.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/archive/1/481432/100/0/threaded"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/25898"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securitytracker.com/id?1018763"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vupen.com/english/advisories/2007/3337"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vupen.com/english/advisories/2007/3338"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vupen.com/english/advisories/2007/3467"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vupen.com/english/advisories/2008/0149"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vupen.com/english/advisories/2008/0924/references"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36920"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://issues.rpath.com/browse/RPL-1756"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11599"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00352.html"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vendorComments": [
    {
      "comment": "Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2007-4990\n\nThe Red Hat Security Response Team has rated this issue as having low security impact, a future update may address this flaw.",
      "lastModified": "2007-10-08T00:00:00",
      "organization": "Red Hat"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-189"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

{
  "affected": [],
  "aliases": [
    "CVE-2007-4990"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2007-10-05T21:17:00Z",
    "severity": "HIGH"
  },
  "details": "The swap_char2b function in X.Org X Font Server (xfs) before 1.0.5 allows context-dependent attackers to execute arbitrary code via (1) QueryXBitmaps and (2) QueryXExtents protocol requests with crafted size values that specify an arbitrary number of bytes to be swapped on the heap, which triggers heap corruption.",
  "id": "GHSA-c5xh-656p-g98m",
  "modified": "2022-05-01T18:28:59Z",
  "published": "2022-05-01T18:28:59Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2007-4990"
    },
    {
      "type": "WEB",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36920"
    },
    {
      "type": "WEB",
      "url": "https://issues.rpath.com/browse/RPL-1756"
    },
    {
      "type": "WEB",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11599"
    },
    {
      "type": "WEB",
      "url": "https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00352.html"
    },
    {
      "type": "WEB",
      "url": "http://bugs.freedesktop.org/show_bug.cgi?id=12299"
    },
    {
      "type": "WEB",
      "url": "http://bugs.gentoo.org/show_bug.cgi?id=194606"
    },
    {
      "type": "WEB",
      "url": "http://docs.info.apple.com/article.html?artnum=307562"
    },
    {
      "type": "WEB",
      "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01323725"
    },
    {
      "type": "WEB",
      "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=602"
    },
    {
      "type": "WEB",
      "url": "http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html"
    },
    {
      "type": "WEB",
      "url": "http://lists.freedesktop.org/archives/xorg-announce/2007-October/000416.html"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/27040"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/27052"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/27060"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/27176"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/27228"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/27240"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/27560"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/28004"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/28514"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/28536"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/28542"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/29420"
    },
    {
      "type": "WEB",
      "url": "http://security.gentoo.org/glsa/glsa-200710-11.xml"
    },
    {
      "type": "WEB",
      "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103114-1"
    },
    {
      "type": "WEB",
      "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-200642-1"
    },
    {
      "type": "WEB",
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:210"
    },
    {
      "type": "WEB",
      "url": "http://www.novell.com/linux/security/advisories/2007_54_xorg.html"
    },
    {
      "type": "WEB",
      "url": "http://www.redhat.com/support/errata/RHSA-2008-0029.html"
    },
    {
      "type": "WEB",
      "url": "http://www.redhat.com/support/errata/RHSA-2008-0030.html"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/archive/1/481432/100/0/threaded"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/25898"
    },
    {
      "type": "WEB",
      "url": "http://www.securitytracker.com/id?1018763"
    },
    {
      "type": "WEB",
      "url": "http://www.vupen.com/english/advisories/2007/3337"
    },
    {
      "type": "WEB",
      "url": "http://www.vupen.com/english/advisories/2007/3338"
    },
    {
      "type": "WEB",
      "url": "http://www.vupen.com/english/advisories/2007/3467"
    },
    {
      "type": "WEB",
      "url": "http://www.vupen.com/english/advisories/2008/0149"
    },
    {
      "type": "WEB",
      "url": "http://www.vupen.com/english/advisories/2008/0924/references"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

{
  "GSD": {
    "alias": "CVE-2007-4990",
    "description": "The swap_char2b function in X.Org X Font Server (xfs) before 1.0.5 allows context-dependent attackers to execute arbitrary code via (1) QueryXBitmaps and (2) QueryXExtents protocol requests with crafted size values that specify an arbitrary number of bytes to be swapped on the heap, which triggers heap corruption.",
    "id": "GSD-2007-4990",
    "references": [
      "https://www.suse.com/security/cve/CVE-2007-4990.html",
      "https://access.redhat.com/errata/RHSA-2008:0030",
      "https://access.redhat.com/errata/RHSA-2008:0029",
      "https://linux.oracle.com/cve/CVE-2007-4990.html"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2007-4990"
      ],
      "details": "The swap_char2b function in X.Org X Font Server (xfs) before 1.0.5 allows context-dependent attackers to execute arbitrary code via (1) QueryXBitmaps and (2) QueryXExtents protocol requests with crafted size values that specify an arbitrary number of bytes to be swapped on the heap, which triggers heap corruption.",
      "id": "GSD-2007-4990",
      "modified": "2023-12-13T01:21:36.530309Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cve@mitre.org",
        "ID": "CVE-2007-4990",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "The swap_char2b function in X.Org X Font Server (xfs) before 1.0.5 allows context-dependent attackers to execute arbitrary code via (1) QueryXBitmaps and (2) QueryXExtents protocol requests with crafted size values that specify an arbitrary number of bytes to be swapped on the heap, which triggers heap corruption."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "SUSE-SA:2007:054",
            "refsource": "SUSE",
            "url": "http://www.novell.com/linux/security/advisories/2007_54_xorg.html"
          },
          {
            "name": "1018763",
            "refsource": "SECTRACK",
            "url": "http://www.securitytracker.com/id?1018763"
          },
          {
            "name": "28542",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/28542"
          },
          {
            "name": "200642",
            "refsource": "SUNALERT",
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-200642-1"
          },
          {
            "name": "FEDORA-2007-4263",
            "refsource": "FEDORA",
            "url": "https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00352.html"
          },
          {
            "name": "20071003 rPSA-2007-0205-1 xorg-x11 xorg-x11-fonts xorg-x11-tools xorg-x11-xfs",
            "refsource": "BUGTRAQ",
            "url": "http://www.securityfocus.com/archive/1/481432/100/0/threaded"
          },
          {
            "name": "http://bugs.freedesktop.org/show_bug.cgi?id=12299",
            "refsource": "CONFIRM",
            "url": "http://bugs.freedesktop.org/show_bug.cgi?id=12299"
          },
          {
            "name": "28514",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/28514"
          },
          {
            "name": "27052",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/27052"
          },
          {
            "name": "20071002 Multiple Vendor X Font Server Multiple Vulnerabilities",
            "refsource": "IDEFENSE",
            "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=602"
          },
          {
            "name": "27060",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/27060"
          },
          {
            "name": "ADV-2008-0924",
            "refsource": "VUPEN",
            "url": "http://www.vupen.com/english/advisories/2008/0924/references"
          },
          {
            "name": "HPSBUX02303",
            "refsource": "HP",
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01323725"
          },
          {
            "name": "[xorg-announce] 20071002 [ANNOUNCE] X.Org security advisory: multiple vulnerabilities in X font server",
            "refsource": "MLIST",
            "url": "http://lists.freedesktop.org/archives/xorg-announce/2007-October/000416.html"
          },
          {
            "name": "RHSA-2008:0029",
            "refsource": "REDHAT",
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0029.html"
          },
          {
            "name": "28004",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/28004"
          },
          {
            "name": "27240",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/27240"
          },
          {
            "name": "https://issues.rpath.com/browse/RPL-1756",
            "refsource": "CONFIRM",
            "url": "https://issues.rpath.com/browse/RPL-1756"
          },
          {
            "name": "29420",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/29420"
          },
          {
            "name": "27040",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/27040"
          },
          {
            "name": "APPLE-SA-2008-03-18",
            "refsource": "APPLE",
            "url": "http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html"
          },
          {
            "name": "27176",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/27176"
          },
          {
            "name": "GLSA-200710-11",
            "refsource": "GENTOO",
            "url": "http://security.gentoo.org/glsa/glsa-200710-11.xml"
          },
          {
            "name": "27228",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/27228"
          },
          {
            "name": "ADV-2007-3467",
            "refsource": "VUPEN",
            "url": "http://www.vupen.com/english/advisories/2007/3467"
          },
          {
            "name": "RHSA-2008:0030",
            "refsource": "REDHAT",
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0030.html"
          },
          {
            "name": "103114",
            "refsource": "SUNALERT",
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103114-1"
          },
          {
            "name": "ADV-2008-0149",
            "refsource": "VUPEN",
            "url": "http://www.vupen.com/english/advisories/2008/0149"
          },
          {
            "name": "MDKSA-2007:210",
            "refsource": "MANDRIVA",
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:210"
          },
          {
            "name": "25898",
            "refsource": "BID",
            "url": "http://www.securityfocus.com/bid/25898"
          },
          {
            "name": "http://bugs.gentoo.org/show_bug.cgi?id=194606",
            "refsource": "CONFIRM",
            "url": "http://bugs.gentoo.org/show_bug.cgi?id=194606"
          },
          {
            "name": "ADV-2007-3338",
            "refsource": "VUPEN",
            "url": "http://www.vupen.com/english/advisories/2007/3338"
          },
          {
            "name": "27560",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/27560"
          },
          {
            "name": "oval:org.mitre.oval:def:11599",
            "refsource": "OVAL",
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11599"
          },
          {
            "name": "http://docs.info.apple.com/article.html?artnum=307562",
            "refsource": "CONFIRM",
            "url": "http://docs.info.apple.com/article.html?artnum=307562"
          },
          {
            "name": "ADV-2007-3337",
            "refsource": "VUPEN",
            "url": "http://www.vupen.com/english/advisories/2007/3337"
          },
          {
            "name": "xfs-queryxbitmaps-queryxextents-bo(36920)",
            "refsource": "XF",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36920"
          },
          {
            "name": "SSRT071468",
            "refsource": "HP",
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01323725"
          },
          {
            "name": "28536",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/28536"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:x.org:x_font_server:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "1.0.4",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2007-4990"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "The swap_char2b function in X.Org X Font Server (xfs) before 1.0.5 allows context-dependent attackers to execute arbitrary code via (1) QueryXBitmaps and (2) QueryXExtents protocol requests with crafted size values that specify an arbitrary number of bytes to be swapped on the heap, which triggers heap corruption."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-189"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "20071002 Multiple Vendor X Font Server Multiple Vulnerabilities",
              "refsource": "IDEFENSE",
              "tags": [],
              "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=602"
            },
            {
              "name": "[xorg-announce] 20071002 [ANNOUNCE] X.Org security advisory: multiple vulnerabilities in X font server",
              "refsource": "MLIST",
              "tags": [],
              "url": "http://lists.freedesktop.org/archives/xorg-announce/2007-October/000416.html"
            },
            {
              "name": "https://issues.rpath.com/browse/RPL-1756",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "https://issues.rpath.com/browse/RPL-1756"
            },
            {
              "name": "http://bugs.freedesktop.org/show_bug.cgi?id=12299",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "http://bugs.freedesktop.org/show_bug.cgi?id=12299"
            },
            {
              "name": "http://bugs.gentoo.org/show_bug.cgi?id=194606",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "http://bugs.gentoo.org/show_bug.cgi?id=194606"
            },
            {
              "name": "GLSA-200710-11",
              "refsource": "GENTOO",
              "tags": [],
              "url": "http://security.gentoo.org/glsa/glsa-200710-11.xml"
            },
            {
              "name": "MDKSA-2007:210",
              "refsource": "MANDRIVA",
              "tags": [],
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:210"
            },
            {
              "name": "103114",
              "refsource": "SUNALERT",
              "tags": [],
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103114-1"
            },
            {
              "name": "SUSE-SA:2007:054",
              "refsource": "SUSE",
              "tags": [],
              "url": "http://www.novell.com/linux/security/advisories/2007_54_xorg.html"
            },
            {
              "name": "25898",
              "refsource": "BID",
              "tags": [],
              "url": "http://www.securityfocus.com/bid/25898"
            },
            {
              "name": "1018763",
              "refsource": "SECTRACK",
              "tags": [],
              "url": "http://www.securitytracker.com/id?1018763"
            },
            {
              "name": "27040",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/27040"
            },
            {
              "name": "27052",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/27052"
            },
            {
              "name": "27060",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/27060"
            },
            {
              "name": "27176",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/27176"
            },
            {
              "name": "27240",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/27240"
            },
            {
              "name": "27560",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/27560"
            },
            {
              "name": "27228",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/27228"
            },
            {
              "name": "FEDORA-2007-4263",
              "refsource": "FEDORA",
              "tags": [],
              "url": "https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00352.html"
            },
            {
              "name": "28004",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/28004"
            },
            {
              "name": "28514",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/28514"
            },
            {
              "name": "RHSA-2008:0029",
              "refsource": "REDHAT",
              "tags": [],
              "url": "http://www.redhat.com/support/errata/RHSA-2008-0029.html"
            },
            {
              "name": "RHSA-2008:0030",
              "refsource": "REDHAT",
              "tags": [],
              "url": "http://www.redhat.com/support/errata/RHSA-2008-0030.html"
            },
            {
              "name": "28536",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/28536"
            },
            {
              "name": "28542",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/28542"
            },
            {
              "name": "200642",
              "refsource": "SUNALERT",
              "tags": [],
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-200642-1"
            },
            {
              "name": "http://docs.info.apple.com/article.html?artnum=307562",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "http://docs.info.apple.com/article.html?artnum=307562"
            },
            {
              "name": "APPLE-SA-2008-03-18",
              "refsource": "APPLE",
              "tags": [],
              "url": "http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html"
            },
            {
              "name": "29420",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/29420"
            },
            {
              "name": "ADV-2007-3338",
              "refsource": "VUPEN",
              "tags": [],
              "url": "http://www.vupen.com/english/advisories/2007/3338"
            },
            {
              "name": "HPSBUX02303",
              "refsource": "HP",
              "tags": [],
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01323725"
            },
            {
              "name": "ADV-2008-0149",
              "refsource": "VUPEN",
              "tags": [],
              "url": "http://www.vupen.com/english/advisories/2008/0149"
            },
            {
              "name": "ADV-2007-3337",
              "refsource": "VUPEN",
              "tags": [],
              "url": "http://www.vupen.com/english/advisories/2007/3337"
            },
            {
              "name": "ADV-2008-0924",
              "refsource": "VUPEN",
              "tags": [],
              "url": "http://www.vupen.com/english/advisories/2008/0924/references"
            },
            {
              "name": "ADV-2007-3467",
              "refsource": "VUPEN",
              "tags": [],
              "url": "http://www.vupen.com/english/advisories/2007/3467"
            },
            {
              "name": "xfs-queryxbitmaps-queryxextents-bo(36920)",
              "refsource": "XF",
              "tags": [],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36920"
            },
            {
              "name": "oval:org.mitre.oval:def:11599",
              "refsource": "OVAL",
              "tags": [],
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11599"
            },
            {
              "name": "20071003 rPSA-2007-0205-1 xorg-x11 xorg-x11-fonts xorg-x11-tools xorg-x11-xfs",
              "refsource": "BUGTRAQ",
              "tags": [],
              "url": "http://www.securityfocus.com/archive/1/481432/100/0/threaded"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 7.5,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "exploitabilityScore": 10.0,
          "impactScore": 6.4,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": true,
          "obtainUserPrivilege": false,
          "severity": "HIGH",
          "userInteractionRequired": false
        }
      },
      "lastModifiedDate": "2018-10-15T21:39Z",
      "publishedDate": "2007-10-05T21:17Z"
    }
  }
}