{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Kaspersky Security Cloud sans le correctif de s\u00e9curit\u00e9 du 6 novembre 2024",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Kaspersky Anti-Virus SDK pour Windows versions ant\u00e9rieures \u00e0 8 Level 3 v. 8.10.2.2098",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Kaspersky Anti-Ransomware sans le correctif de s\u00e9curit\u00e9 du 6 novembre 2024",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Kaspersky Security for Virtualization Light Agent versions 5.2 \u00e0 5.2.27.319 sans le dernier correctif de s\u00e9curit\u00e9",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Kaspersky Free sans le correctif de s\u00e9curit\u00e9 du 6 novembre 2024",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Kaspersky Endpoint Security for Windows sans le correctif de s\u00e9curit\u00e9 du 6 novembre 2024",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Kaspersky Small Office Security sans le correctif de s\u00e9curit\u00e9 du 6 novembre 2024",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Kaspersky Internet Security sans le correctif de s\u00e9curit\u00e9 du 6 novembre 2024",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Kaspersky Anti-Virus sans le correctif de s\u00e9curit\u00e9 du 6 novembre 2024",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Kaspersky pour Windows (Standard, Plus, Premium) sans le correctif de s\u00e9curit\u00e9 du 6 novembre 2024",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Kaspersky Safe Kids sans le correctif de s\u00e9curit\u00e9 du 6 novembre 2024",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2024-13614",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-13614"
    }
  ],
  "links": [],
  "reference": "CERTFR-2025-AVI-0101",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2025-02-07T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans Kaspersky. Elle permet \u00e0 un attaquant de provoquer une atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es.",
  "title": "Vuln\u00e9rabilit\u00e9 dans les produits Kaspersky",
  "vendor_advisories": [
    {
      "published_at": "2025-02-05",
      "title": "Bulletin de s\u00e9curit\u00e9 Kaspersky 12430#060225",
      "url": "https://support.kaspersky.com/vulnerability/list-of-advisories/12430#060225"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Kaspersky Anti Targeted Attack Platform versions 6.0 et 6.1 pour Ubuntu",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Kaspersky Security for Virtualization Light Agent version 6.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Kaspersky Secure Mail Gateway Virtual Appliance KSMG version 2.1.0.7854",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs et mesures de contournement (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2024-6387",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6387"
    }
  ],
  "links": [],
  "reference": "CERTFR-2024-AVI-0583",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2024-07-15T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans les produits Kaspersky. Elle permet \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance.",
  "title": "Vuln\u00e9rabilit\u00e9 dans les produits Kaspersky",
  "vendor_advisories": [
    {
      "published_at": "2024-07-12",
      "title": "Bulletin de s\u00e9curit\u00e9 Kaspersky",
      "url": "https://support.kaspersky.com/vulnerability/list-of-advisories/12430#120724"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Kaspersky Anti Targeted Attack versions 6.x ant\u00e9rieures \u00e0 6.0.2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2024-24568",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-24568"
    },
    {
      "name": "CVE-2024-23836",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-23836"
    },
    {
      "name": "CVE-2024-23837",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-23837"
    },
    {
      "name": "CVE-2024-23839",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-23839"
    }
  ],
  "links": [],
  "reference": "CERTFR-2024-AVI-0251",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2024-03-26T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Kaspersky Anti\nTargeted Attack. Elles permettent \u00e0 un attaquant de provoquer un\nprobl\u00e8me de s\u00e9curit\u00e9 non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Kaspersky Anti Targeted Attack",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Kaspersky du 26 mars 2024",
      "url": "https://support.kaspersky.com/vulnerability/list-of-advisories/12430#260324"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Kaspersky Password Manager versions ant\u00e9rieures \u00e0 24.0.0.427 pour Windows",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [],
  "links": [],
  "reference": "CERTFR-2024-AVI-0230",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2024-03-18T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans Kaspersky Password Manager. Elle\npermet \u00e0 un attaquant de provoquer une atteinte \u00e0 la confidentialit\u00e9 des\ndonn\u00e9es.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans Kaspersky Password Manager",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Kaspersky du 18 mars 2024",
      "url": "https://support.kaspersky.com/vulnerability/list-of-advisories/12430#180324"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Kaspersky Endpoint Security for Windows versions 12.1 et ant\u00e9rieures avec une base virale ant\u00e9rieure \u00e0 celle du 21 f\u00e9vrier 2024",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Kaspersky Endpoint Security for Windows version 12.3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [],
  "links": [],
  "reference": "CERTFR-2024-AVI-0158",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2024-02-22T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans Kaspersky Endpoint Security.\nElle permet \u00e0 un attaquant de provoquer un contournement de la politique\nde s\u00e9curit\u00e9.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans Kaspersky Endpoint Security",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Kaspersky du 21 f\u00e9vrier 2024",
      "url": "https://support.kaspersky.com/vulnerability/list-of-advisories/12430#210224"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Kaspersky Anti Targeted Attack versions 6.0.x ant\u00e9rieures \u00e0 6.0.1 Patch A",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2023-48795",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-48795"
    }
  ],
  "links": [],
  "reference": "CERTFR-2024-AVI-0148",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2024-02-20T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans Kaspersky Anti Targeted Attack.\nElle permet \u00e0 un attaquant de provoquer un contournement de la politique\nde s\u00e9curit\u00e9.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans Kaspersky Anti Targeted Attack",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Kaspersky du 19 f\u00e9vrier 2024",
      "url": "https://support.kaspersky.com/vulnerability/list-of-advisories/12430#190224"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Kaspersky Security pour Linux Mail Server versions ant\u00e9rieures \u00e0 10",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [],
  "links": [],
  "reference": "CERTFR-2024-AVI-0089",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2024-02-02T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans Kaspersky Security pour Linux\nMail Server. Elle permet \u00e0 un attaquant de provoquer un contournement de\nla politique de s\u00e9curit\u00e9.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans Kaspersky Security pour Linux Mail Server",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Kaspersky du 2 f\u00e9vrier 2024",
      "url": "https://support.kaspersky.com/vulnerability/list-of-advisories/12430#010224"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Les produits Kaspersky sans le dernier correctif de s\u00e9curit\u00e9",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [],
  "links": [],
  "reference": "CERTFR-2022-AVI-982",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2022-11-02T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits\nKaspersky. Elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de\ncode arbitraire et un contournement de la politique de s\u00e9curit\u00e9.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Kaspersky",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Kaspersky du 01 novembre 2022",
      "url": "https://support.kaspersky.com/general/vulnerability.aspx?el=12430#011122"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Kaspersky VPN Secure Connection versions ant\u00e9rieures \u00e0 21.6",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2022-27535",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-27535"
    }
  ],
  "links": [],
  "reference": "CERTFR-2022-AVI-711",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2022-08-08T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans Kaspersky VPN Secure Connection.\nElle permet \u00e0 un attaquant de provoquer une atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des\ndonn\u00e9es.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans Kaspersky VPN Secure Connection",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Kaspersky 12430 du 8 ao\u00fbt 2022",
      "url": "https://support.kaspersky.com/general/vulnerability.aspx?el=12430#050822"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Bases de donn\u00e9es antivirus de Kaspersky Total Security ant\u00e9rieures au 12 mars 2022",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Bases de donn\u00e9es antivirus de Kaspersky Security Cloud versions ant\u00e9rieures au 12 mars 2022",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Bases de donn\u00e9es antivirus de Kaspersky Endpoint Security versions ant\u00e9rieures au 12 mars 2022",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Bases de donn\u00e9es antivirus de Kaspersky Internet Security ant\u00e9rieures au 12 mars 2022",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Bases de donn\u00e9es antivirus de Kaspersky Anti-Virus ant\u00e9rieures au 12 mars 2022",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Bases de donn\u00e9es antivirus de Kaspersky Small Office Security ant\u00e9rieures au 12 mars 2022",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2021-27223",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-27223"
    },
    {
      "name": "CVE-2022-27534",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-27534"
    }
  ],
  "links": [],
  "reference": "CERTFR-2022-AVI-295",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2022-03-31T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire"
    },
    {
      "description": "D\u00e9ni de service"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits\nKaspersky. Elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de\ncode arbitraire et un d\u00e9ni de service.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Kaspersky",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Kaspersky 310322_2 du 31 mars 2022",
      "url": "https://support.kaspersky.com/general/vulnerability.aspx?el=12430#310322_2"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Kaspersky 310322_1 du 31 mars 2022",
      "url": "https://support.kaspersky.com/general/vulnerability.aspx?el=12430#310322_1"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Kaspersky VPN Secure Connection versions ant\u00e9rieures \u00e0 21.3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Kaspersky Internet Security versions ant\u00e9rieures \u00e0 21.3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Kaspersky Small Office Security versions ant\u00e9rieures \u00e0 21.3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Kaspersky Security Cloud versions ant\u00e9rieures \u00e0 21.3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Kaspersky Anti-Virus versions ant\u00e9rieures \u00e0 21.3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Kaspersky Password Manager versions ant\u00e9rieures \u00e0 9.0.2 Patch R",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Kaspersky Total Security versions ant\u00e9rieures \u00e0 21.3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2021-35052",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-35052"
    }
  ],
  "links": [],
  "reference": "CERTFR-2021-AVI-895",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2021-11-22T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits\nKaspersky. Elles permettent \u00e0 un attaquant de provoquer une atteinte \u00e0\nl\u0027int\u00e9grit\u00e9 des donn\u00e9es et un probl\u00e8me de s\u00e9curit\u00e9 non sp\u00e9cifi\u00e9 par\nl\u0027\u00e9diteur.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Kaspersky",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Kaspersky du 22 novembre 2021",
      "url": "https://support.kaspersky.com/general/vulnerability.aspx?el=12430#221121"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Kaspersky Security Cloud versions ant\u00e9rieures \u00e0 21.3.10.391",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Kaspersky Anti-Virus versions ant\u00e9rieures \u00e0 21.3.10.391",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Kaspersky Total Security versions ant\u00e9rieures \u00e0 21.3.10.391",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Kaspersky Internet Security versions ant\u00e9rieures \u00e0 21.3.10.391",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Kaspersky Endpoint Security versions 11.1 \u00e0 11.6 (incluses)",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Kaspersky Small Office Security versions ant\u00e9rieures \u00e0 21.3.10.391",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2021-35053",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-35053"
    }
  ],
  "links": [],
  "reference": "CERTFR-2021-AVI-839",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2021-11-02T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits\nKaspersky. Elles permettent \u00e0 un attaquant de provoquer un d\u00e9ni de\nservice.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Kaspersky",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Kaspersky du 01 novembre 2021",
      "url": "https://support.kaspersky.com/general/vulnerability.aspx?el=12430#01112021"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Kaspersky Password Manager pour Android versions ant\u00e9rieures \u00e0 9.2.14.872",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Kaspersky Password Manager pour iOS versions ant\u00e9rieures \u00e0 9.2.14.31",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Kaspersky Password Manager pour Windows versions ant\u00e9rieures \u00e0 9.2 Patch F",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2020-27020",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-27020"
    }
  ],
  "links": [],
  "reference": "CERTFR-2021-AVI-316",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2021-04-27T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans Kaspersky Password Manager. Elle\npermet \u00e0 un attaquant de provoquer une atteinte \u00e0 la confidentialit\u00e9 des\ndonn\u00e9es.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans Kaspersky Password Manager",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Kaspersky 270421 du 27 avril 2021",
      "url": "https://support.kaspersky.com/general/vulnerability.aspx?el=12430#270421"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Kaspersky Internet Security versions ant\u00e9rieures \u00e0 21.3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Kaspersky Small Office Security versions ant\u00e9rieures \u00e0 21.3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Kaspersky Security Cloud versions ant\u00e9rieures \u00e0 21.3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Kaspersky Internet Security pour Mac versions ant\u00e9rieures \u00e0 21.1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Kaspersky Anti-Virus versions ant\u00e9rieures \u00e0 21.3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Kaspersky Total Security versions ant\u00e9rieures \u00e0 21.3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Kaspersky Endpoint Security pour Windows versions ant\u00e9rieures \u00e0 11.6.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [],
  "links": [],
  "reference": "CERTFR-2021-AVI-238",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2021-04-02T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire"
    },
    {
      "description": "D\u00e9ni de service"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits\nKaspersky. Elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de\ncode arbitraire, un d\u00e9ni de service et une atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des\ndonn\u00e9es.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Kaspersky",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Kaspersky du 30 mars 2021",
      "url": "https://support.kaspersky.com/general/vulnerability.aspx?el=12430#300321"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Kaspersky du 31 mars 2021",
      "url": "https://support.kaspersky.com/general/vulnerability.aspx?el=12430#310321"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Kaspersky Rescue Disk versions ant\u00e9rieures \u00e0 18.0.11.3 (patch C)",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Kaspersky Endpoint Security 10 ant\u00e9rieures \u00e0 10 SP2 MR4",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Kaspersky Endpoint Security 11.1.x ant\u00e9rieures \u00e0 11.1.1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Kaspersky Endpoint Security 11.0.x ant\u00e9rieures \u00e0 11. avec le correctif de s\u00e9curit\u00e9 1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [],
  "links": [],
  "reference": "CERTFR-2021-AVI-129",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2021-02-17T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans les produits Kaspersky. Elle\npermet \u00e0 un attaquant de provoquer un contournement de la politique de\ns\u00e9curit\u00e9.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans les produits Kaspersky",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Kaspersky du 17 f\u00e9vrier 2021",
      "url": "https://support.kaspersky.com/general/vulnerability.aspx?el=12430#170221"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Kaspersky Password Manager versions ant\u00e9rieures \u00e0 9.2 patch L (num\u00e9ro 3)",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Kaspersky Total Security versions ant\u00e9rieures \u00e0 2021 MR2 (num\u00e9ro 5)",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Kaspersky Security Cloud versions ant\u00e9rieures \u00e0 2021 (num\u00e9ro 4)",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Kaspersky Anti-Ransomware Tool versions ant\u00e9rieures \u00e0 5.0 patch E (num\u00e9ro 1)",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Kaspersky Total Security versions ant\u00e9rieures \u00e0 2021 (num\u00e9ro 4)",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Kaspersky Security Cloud versions ant\u00e9rieures \u00e0 2021 MR2 (num\u00e9ro 5)",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [],
  "links": [],
  "reference": "CERTFR-2020-AVI-822",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2020-12-15T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits\nKaspersky. Elles permettent \u00e0 un attaquant de provoquer un contournement\nde la politique de s\u00e9curit\u00e9 et une \u00e9l\u00e9vation de privil\u00e8ges.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Kaspersky",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Kaspersky du 15 d\u00e9cembre 2020",
      "url": "https://support.kaspersky.com/general/vulnerability.aspx?el=12430#290720"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Kaspersky Anti-Ransomware Tool versions ant\u00e9rieures \u00e0 4.0 Patch C",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Kaspersky VPN Secure Connection versions ant\u00e9rieures \u00e0 5.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Kaspersky Security Center versions ant\u00e9rieures \u00e0 12",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Kaspersky Security Center Web Console versions ant\u00e9rieures \u00e0 12 Patch A",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Kaspersky Virus Removal Tool versions ant\u00e9rieures \u00e0 15.0.23.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [],
  "links": [],
  "reference": "CERTFR-2020-AVI-468",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2020-07-29T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits\nKaspersky. Elles permettent \u00e0 un attaquant de provoquer un d\u00e9ni de\nservice \u00e0 distance et une \u00e9l\u00e9vation de privil\u00e8ges.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Kaspersky",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Kaspersky du 29 juillet 2020",
      "url": "https://support.kaspersky.com/general/vulnerability.aspx?el=12430#290720"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Kaspersky Small Office Security versions ant\u00e9rieures \u00e0 6 sur Windows",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Kaspersky Total Security versions ant\u00e9rieures \u00e0 2019 sur Windows",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Kaspersky Internet Security versions ant\u00e9rieures \u00e0 2020 Patch A sur macOS",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Kaspersky Endpoint Security versions ant\u00e9rieures \u00e0 11.1 sur Windows",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Kaspersky Free versions ant\u00e9rieures \u00e0 2019 sur Windows",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Kaspersky Security Cloud versions ant\u00e9rieures \u00e0 2019 sur Windows",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Kaspersky Endpoint Security versions ant\u00e9rieures \u00e0 10 SP1 MR1 sur Linux",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Kaspersky Anti-Virus versions ant\u00e9rieures \u00e0 2019 sur Windows",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Kaspersky Internet Security versions ant\u00e9rieures \u00e0 2019 sur Windows",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [],
  "links": [],
  "reference": "CERTFR-2020-AVI-296",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2020-05-15T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans les produits Kaspersky. Elle\npermet \u00e0 un attaquant de provoquer une atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des\ndonn\u00e9es.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans les produits Kaspersky",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Kaspersky du 15 mai 2020",
      "url": "https://support.kaspersky.com/general/vulnerability.aspx?el=12430#150520"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Kaspersky Small Office Security 7 sans le correctif de s\u00e9curit\u00e9 D",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Kaspersky Total Security 2019 sans le correctif de s\u00e9curit\u00e9 H",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Kaspersky Internet Security 2019 sans le correctif de s\u00e9curit\u00e9 H",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Kaspersky Password Manager 9.2 sans le correctif de s\u00e9curit\u00e9 C",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Kaspersky Small Office Security 6 sans le correctif de s\u00e9curit\u00e9 H",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Kaspersky Endpoint Security 11.0.1 sans le correctif de s\u00e9curit\u00e9 pf5352",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Kaspersky Total Security 2020 sans le correctif de s\u00e9curit\u00e9 D",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Kaspersky Free 2020 sans le correctif de s\u00e9curit\u00e9 D",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Kaspersky Endpoint Security 11.0.0 sans le correctif de s\u00e9curit\u00e9 pf5145",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Kaspersky Safe Kids 1.5 sans le correctif de s\u00e9curit\u00e9 C",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Kaspersky Free 2019 sans le correctif de s\u00e9curit\u00e9 H",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Kaspersky Anti-Virus 2020 sans le correctif de s\u00e9curit\u00e9 D",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Kaspersky Endpoint Security 10 SP2 sans le correctif de s\u00e9curit\u00e9 pf3223",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Kaspersky Endpoint Security 10 SP2 MR3 sans le correctif de s\u00e9curit\u00e9 pf3528",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Kaspersky Software Updater 2.1 sans le correctif de s\u00e9curit\u00e9 A",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Kaspersky Endpoint Security 11.1 sans le correctif de s\u00e9curit\u00e9 pf7063",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Kaspersky Security Cloud 2020 sans le correctif de s\u00e9curit\u00e9 D",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Kaspersky Endpoint Security 11.1.1 sans le correctif de s\u00e9curit\u00e9 pf7523",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Kaspersky Security Cloud 2019 sans le correctif de s\u00e9curit\u00e9 H",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Kaspersky Internet Security 2020 sans le correctif de s\u00e9curit\u00e9 D",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Kaspersky Anti-Virus 2019 sans le correctif de s\u00e9curit\u00e9 H",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Kaspersky Anti Targeted Attack Agent versions ant\u00e9rieures \u00e0 3.6.1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [],
  "links": [],
  "reference": "CERTFR-2020-AVI-116",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2020-02-27T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans les produits Kaspersky. Elle\npermet \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0\ndistance et une \u00e9l\u00e9vation de privil\u00e8ges.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans les produits Kaspersky",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Kaspersky 20200226 du 26 f\u00e9vrier 2020",
      "url": "https://support.kaspersky.com/general/vulnerability.aspx?el=12430#260220"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Kaspersky Total Security versions ant\u00e9rieures \u00e0 2020 patch E",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Kaspersky Secure Connection versions ant\u00e9rieures \u00e0 4.0 (2020) patch E",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Kaspersky Security Cloud versions ant\u00e9rieures \u00e0 2020 patch E",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Kaspersky Internet Security versions ant\u00e9rieures \u00e0 2020 patch E",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2019-15689",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-15689"
    }
  ],
  "links": [],
  "reference": "CERTFR-2019-AVI-604",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2019-12-03T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans les produits Kaspersky. Elle\npermet \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans les produits Kaspersky",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Kaspersky du 02 d\u00e9cembre 2019",
      "url": "https://support.kaspersky.com/general/vulnerability.aspx?el=12430"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Kaspersky Free Anti-Virus 2019 versions ant\u00e9rieures \u00e0 Patch E",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Kaspersky Anti-Virus 2019 versions ant\u00e9rieures \u00e0 Patch E",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Kaspersky Total Security 2019 versions ant\u00e9rieures \u00e0 Patch E",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Kaspersky Internet Security 2019 versions ant\u00e9rieures \u00e0 Patch E",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Kaspersky Small Office Security 6 versions ant\u00e9rieures \u00e0 Patch E",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [],
  "links": [],
  "reference": "CERTFR-2019-AVI-404",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2019-08-20T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Injection de code indirecte \u00e0 distance (XSS)"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans les produits Kaspersky. Elle\npermet \u00e0 un attaquant de provoquer une atteinte \u00e0 la confidentialit\u00e9 des\ndonn\u00e9es et une injection de code indirecte \u00e0 distance (XSS).\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans les produits Kaspersky",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Kaspersky du 16 ao\u00fbt 2019",
      "url": "https://support.kaspersky.com/general/vulnerability.aspx?el=12430#160819"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Kaspersky Anti-Virus 9.x ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Kaspersky Internet Security 9.x.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nUne vuln\u00e9rabilt\u00e9 pr\u00e9sente dans les produits Kaspersky peut \u00eatre\nexploit\u00e9e par un individu malintentionn\u00e9, au moyen d\u0027un script\nsp\u00e9cialement construit, afin de contourner la politique de s\u00e9curit\u00e9 et\nd\u00e9sactiver certains m\u00e9chanismes de protection.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [],
  "links": [],
  "reference": "CERTA-2009-AVI-297",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2009-07-28T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 dans les produits Kaspersky permet \u00e0 un utilisateur\ndistant malveillant de contourner la politique de s\u00e9curit\u00e9.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans les produits Kaspersky",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Annonce de mise \u00e0 jour Kaspersky du 23 juillet 2009",
      "url": "http://www.kaspersky.com/technews?id=203038755"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Kaspersky Anti-Virus 6.0 et 7.0 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Kaspersky Internet Security 6.0 et 7.0 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Kaspersky Anti-Virus 6.0 for Windows Workstations.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nUn d\u00e9bordement de m\u00e9moire dans le pilote kl1.sys distribu\u00e9 dans des\nproduits Kaspersky permet \u00e0 une personne malintentionn\u00e9e d\u0027ex\u00e9cuter du\ncode arbitraire.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2008-1518",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-1518"
    }
  ],
  "links": [],
  "reference": "CERTA-2008-AVI-290",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2008-06-05T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 dans des produits Kaspersky permet \u00e0 une personne\nmalintentionn\u00e9e d\u0027ex\u00e9cuter du code arbitraire.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans des produits Kaspersky",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Kaspersky",
      "url": "http://www.kaspersky.com/technews?id=203038727"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Kaspersky Anti-Virus 6.x ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Kaspersky Anti-Virus 4.x ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Kaspersky Anti-Virus 5.x ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Kaspersky Internet Security 6.x.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Description\n\nPlusieurs vuln\u00e9rabilit\u00e9s sont pr\u00e9sentes dans les produits antivirus de\nKaspersky :\n\n-   la premi\u00e8re concerne un manque de v\u00e9rification par des contr\u00f4les\n    ActiveX fournis avec les produits Kaspersky. Ceci permet \u00e0 un\n    utilisateur distant d\u0027obtenir des fichiers pr\u00e9sents sur le syst\u00e8me\n    vuln\u00e9rable via un site web particulier ;\n-   la deuxi\u00e8me vuln\u00e9rabilit\u00e9 est pr\u00e9sente dans le fichier klif.sys et\n    permet l\u0027ex\u00e9cution de code arbitraire \u00e0 distance ;\n-   la derni\u00e8re concerne la mise en \u0153uvre du support des fichiers de\n    type ARJ et permet l\u0027ex\u00e9cution de code arbitraire au moyen d\u0027un\n    fichier .arj particulier.\n\n## Solution\n\nLa version 6.0.2.614 corrige le probl\u00e8me. Se r\u00e9f\u00e9rer au bulletin de\ns\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section\nDocumentation).\n",
  "cves": [],
  "links": [],
  "reference": "CERTA-2007-AVI-161",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2007-04-05T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s dans les produits antivirus de Kaspersky\npermettent \u00e0 un utilisateur distant de porter atteinte \u00e0 la\nconfidentialit\u00e9 des donn\u00e9es, de provoquer un d\u00e9ni de service, d\u0027ex\u00e9cuter\ndu code arbitraire.\n",
  "title": "Vuln\u00e9rabilit\u00e9 des produits Kaspersky",
  "vendor_advisories": [
    {
      "published_at": "2007-04-05",
      "title": "Bulletins de s\u00e9curit\u00e9 Kaspersky #203038693",
      "url": "http://www.kaspersky.com/technews?id=203038693"
    },
    {
      "published_at": "2007-04-05",
      "title": "Bulletin de s\u00e9curit\u00e9 Kaspersky  #203038694",
      "url": "http://www.kaspersky.com/technews?id=203038694"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Kaspersky Labs Antivirus Engine version 5.5-10 pour Linux.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Kaspersky Labs Antivirus Engine version 6 pour Windows ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nKaspersky Labs Antivirus Engine est un antivirus utilisable sur le poste\nde travail ou sur une passerelle de messagerie. Un fichier ex\u00e9cutable\npour Windows au format PE contient une section d\u0027en-t\u00eate utilis\u00e9e pour\nle chargeur et l\u0027\u00e9diteur de lien, section nomm\u00e9e Optional Windows Header\nsection. Une valeur invalide dans le champ NumberOfRvaAndSizes permet de\nprovoquer une boucle infinie. Le manque de validation de ce champ permet\n\u00e0 un utilisateur malintentionn\u00e9 de provoquer un d\u00e9ni de service \u00e0\ndistance.\n\n## Solution\n\nUtiliser le syst\u00e8me de mise \u00e0 jour automatique de l\u0027\u00e9diteur.\n",
  "cves": [],
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 iDefense du 05 janvier 2007 :",
      "url": "http://www.idefense.com/application/poi/display?id=459"
    }
  ],
  "reference": "CERTA-2007-AVI-009",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2007-01-08T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    }
  ],
  "summary": "Un traitement d\u00e9fectueux des fichiers ex\u00e9cutables permet \u00e0 un\nutilisateur malveillant de r\u00e9aliser un d\u00e9ni de service \u00e0 distance.\n",
  "title": "Vuln\u00e9rabilit\u00e9 de l\u0027antivirus Kaspersky",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Avis iDefense 459",
      "url": null
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Kaspersky Anti-Virus Personal Pro 5.0 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Kaspersky Anti-Virus 6.0 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Kaspersky Internet Security 6.0.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Kaspersky Anti-Virus Personal 5.0 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Kaspersky Anti-Virus 5.0 pour stations Windows ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nUne vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 identifi\u00e9e dans certains produits Kaspersky.\nElle proviendrait d\u0027une mauvaise manipulation de l\u0027espace d\u0027adressage\neffectu\u00e9e par les pilotes KLIN et KLICK. Une personne malveillante\npourrait exploiter cette vuln\u00e9rabilit\u00e9, afin de d\u00e9sactiver l\u0027antivirus,\nvoire d\u0027ex\u00e9cuter des commandes arbitraires sur le syst\u00e8me avec les\ndroits de l\u0027administrateur.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur Kaspersky pour\nl\u0027obtention des correctifs (cf. section Documentation).\n",
  "cves": [],
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 iDefense #425 du 19 octobre 2006 :",
      "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=425"
    },
    {
      "title": "Annonce Kaspersky du 20 octobre 2006 :",
      "url": "http://www.kaspersky.com/technews?id=203038678"
    }
  ],
  "reference": "CERTA-2006-AVI-460",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2006-10-24T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 identifi\u00e9e dans certains produits Kaspersky.\nExploit\u00e9e, celle-ci permettrait \u00e0 une personne malveillante locale de\nd\u00e9sactiver l\u0027antivirus, voire d\u0027ex\u00e9cuter des commandes arbitraires sur\nle syst\u00e8me avec les droits de l\u0027administrateur.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans Kaspersky Anti-Virus",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Avis de s\u00e9curit\u00e9 iDefense #425 du 19 octobre 2006",
      "url": null
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Kaspersky Personal 5.x,",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "F-Secure Anti-Virus Linux 4.x.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Kaspersky Anti-Virus On-Demand Scanner for Linux 5.x,",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nLe moteur antiviral poss\u00e8de la capacit\u00e9 d\u0027analyser divers formats de\nfichiers. Parmi ceux-ci, le type CHM (\u00ab Compiled HTML Help \u00bb, format\nutilis\u00e9 par les fichiers d\u0027aide Windows) peut \u00eatre utilis\u00e9 pour\nprovoquer un d\u00e9bordement de tampon dans la pile.\n\nLe moteur de Kaspersky est utilis\u00e9 par d\u0027autres \u00e9diteurs, notamment pour\nles versions Linux qui peuvent \u00eatre utilis\u00e9es sur des serveurs de\nmessagerie, de partage de fichiers,...\n\nUn d\u00e9ni de service peut \u00eatre un moyen pr\u00e9liminaire \u00e0 la diffusion de\ncode malveillant qui aurait \u00e9t\u00e9 sinon d\u00e9tect\u00e9.\n\n## Solution\n\nToute mise \u00e0 jour de la base de signature post\u00e9rieure \u00e0 juillet 2005\ncorrige cette faille.\n",
  "cves": [],
  "links": [],
  "reference": "CERTA-2005-AVI-391",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2005-10-11T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "D\u00e9ni de service sur le filtrage antiviral"
    }
  ],
  "summary": "Un utilisateur mal intentionn\u00e9 peut soumettre au moteur d\u0027analyse\nantivirale un fichier volontairement mal form\u00e9 provoquant un d\u00e9ni de\nservice voire l\u0027ex\u00e9cution de code arbitraire avec les droits du\nprogramme.\n",
  "title": "Vuln\u00e9rabilit\u00e9 des antivirus Kaspersky et F-Secure",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Avis de s\u00e9curit\u00e9 d\u0027iDefense du 10 octobre 2005",
      "url": "http://www.idefense.com/application/poi/display?id=318\u0026type=vulnerabilities"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "ArcaBit ArcaVir",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "AVG AVG Anti-Virus",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "Softwin BitDefender",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "H+BEDV AntiVir",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "Norman Virus Control",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "Panda ActiveScan",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "VirusBlokAda VBA32",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "Computer Associates eTrust EZ Antivirus",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "F-Secure Anti-Virus",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "Computer Associates Vet Antivirus",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "Avast! Antivirus",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "Cat Computer Services Quick Heal Antivirus",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "Ikarus",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "Ukrainian Antiviral Center Ukrainian National Antivirus",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "Symantec Norton Antivirus",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Symantec",
          "scada": false
        }
      }
    },
    {
      "description": "Panda Antivirus",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Symantec",
          "scada": false
        }
      }
    },
    {
      "description": "Hacksoft TheHacker",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Symantec",
          "scada": false
        }
      }
    },
    {
      "description": "McAfee VirusScan",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "McAfee",
          "scada": false
        }
      }
    },
    {
      "description": "Eset Software NOD32 Antivirus",
      "product": {
        "name": "NOD32 Antivirus",
        "vendor": {
          "name": "ESET",
          "scada": false
        }
      }
    },
    {
      "description": "Fortinet Antivirus",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Fortinet",
          "scada": false
        }
      }
    },
    {
      "description": "Kaspersky Labs (tous produits)",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Kaspersky",
          "scada": false
        }
      }
    },
    {
      "description": "Sophos Anti-Virus",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Sophos",
          "scada": false
        }
      }
    },
    {
      "description": "Clam Anti-Virus ClamAV",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "ClamAV",
          "scada": false
        }
      }
    },
    {
      "description": "Dr.Web",
      "product": {
        "name": "Web",
        "vendor": {
          "name": "Centreon",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "closed_at": "2005-10-11",
  "content": "## Description\n\nLa plupart des antivirus du march\u00e9 sont vuln\u00e9rables \u00e0 un contournement\nde politique de s\u00e9curit\u00e9.\n\nEn effet, il est possible gr\u00e2ce \u00e0 un fichier archive malicieusement\nconstruit, de passer outre le syst\u00e8me de filtrage de l\u0027antivirus. Ainsi,\nun virus contenu dans ce fichier archive sera achemin\u00e9 vers son\ndestinataire sans traitement pr\u00e9alable par une passerelle antivirus.\n\n  \n\nUne fois arriv\u00e9 sur le poste utilisateur, le fichier virus contenu dans\nl\u0027archive doit \u00eatre extrait puis ex\u00e9cut\u00e9 par l\u0027utilisateur pour\ncorrompre la machine.\n\n## Contournement provisoire\n\nTant que le virus n\u0027est pas extrait de l\u0027archive sur le poste client\ncible, aucun code malveillant n\u0027est ex\u00e9cut\u00e9. Il convient donc de\nrespecter les r\u00e8gles de comportement \u00e9l\u00e9mentaires d\u0027utilisation de la\nmessagerie, rappel\u00e9s ci-dessous :\n\n-   mettre \u00e0 jour son antivirus ;\n-   ne pas ouvrir les mails \u00e0 caract\u00e8re douteux ;\n-   ne jamais ouvrir les fichiers archives en cas de doute sur leur\n    provenance ;\n-   v\u00e9rifier syst\u00e9matiquement le contenu extrait des archives ;\n-   Dans le cadre de la d\u00e9fense en profondeur, privil\u00e9gier\n    syst\u00e9matiquement l\u0027emploi d\u0027un antivirus sur la passerelle de\n    messagerie associ\u00e9 \u00e0 un antivirus diff\u00e9rent sur les postes de\n    travail.\n\n## Solution\n\nAucune solution n\u0027a \u00e9t\u00e9 communiqu\u00e9e pour l\u0027instant par les \u00e9diteurs\nd\u0027antivirus.\n",
  "cves": [],
  "links": [
    {
      "title": "Bulletin de Security Focus :",
      "url": "http://www.securityfocus.com/bid/15046"
    },
    {
      "title": "M\u00e9mento du CERTA sur les virus : CERTA-2005-MEM-001",
      "url": "http://www.certa.ssi.gouv.fr/site/CERTA-2005-MEM-001.pdf"
    }
  ],
  "reference": "CERTA-2005-ALE-014",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2005-10-11T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Contournement du syst\u00e8me de filtrage de l\u0027antivirus"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 dans le traitement des archives affecte la\nquasi-totalit\u00e9 des antivirus du march\u00e9. Ainsi, les antivirus ne peuvent\nrep\u00e9rer un virus ins\u00e9r\u00e9 dans une archive malicieusement construite.\n",
  "title": "Vuln\u00e9rabilit\u00e9 d\u0027un grand nombre d\u0027antivirus",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de \"Security Focus\"",
      "url": null
    }
  ]
}