{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Outlook 2003 avec Business Contact Manager ;",
      "product": {
        "name": "Web",
        "vendor": {
          "name": "Centreon",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Business Solutions CRM 1.2.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Visual Studio .NET 2003 ;",
      "product": {
        "name": "Web",
        "vendor": {
          "name": "Centreon",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nCrystal Reports et Crytal Entreprise sont des outils de cr\u00e9ation et\ngestion de rapports s\u0027int\u00e9grant avec certaines applications Microsoft.\nUne vuln\u00e9rabilit\u00e9 pr\u00e9sente dans ces deux outils permet \u00e0 un utilisateur\nmal intentionn\u00e9 de lire ou d\u00e9truire des fichiers pr\u00e9sents sur le syst\u00e8me\nlorsque IIS (Internet Information Server) est install\u00e9.\n\n## Solution\n\nAppliquer les correctifs suivants la version affect\u00e9e :\n\n    http://www.microsoft.com/technet/security/bulletin/MS04-017.mspx\n",
  "cves": [],
  "links": [],
  "reference": "CERTA-2004-AVI-188",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2004-06-09T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans Crystal Reports et Crytal\nEntreprise de Business Objects.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans Crystal Reports Web Viewer",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 #MS04-017 de Microsoft",
      "url": null
    }
  ]
}