{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [],
  "affected_systems_content": "\u003cp\u003eLa fonction \u003cTT\u003epdftops\u003c/TT\u003e incluse  des logiciels comme \u003cTT\u003expdf\u003c/TT\u003e et \u003cTT\u003ecups\u003c/TT\u003e.\u003c/p\u003e",
  "content": "## Description\n\nLe logiciel utilis\u00e9 pour afficher des documents au format pdf xpdf et le\ngestionnaire d\u0027impression cups utilisent le filtre pdftops.\n\nCe filtre contient un risque de d\u00e9bordement de m\u00e9moire permettant \u00e0 un\nutilisateur mal intentionn\u00e9 d\u0027ex\u00e9cuter du code arbitraire ou de r\u00e9aliser\nun d\u00e9ni de service \u00e0 l\u0027aide d\u0027un document au format pdf malicieusement\nconstruit.\n\n## Solution\n\nAppliquer les mises \u00e0 jour de vos logiciels (cf section documentation)\n",
  "cves": [],
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 DSA-222 de Debian :",
      "url": "http://www.debian.org/security/2003/dsa-222"
    },
    {
      "title": "Correctif de xpdf :",
      "url": "ftp://ftp.foolabs.com/pub/xpdf/"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 RHSA-2003:037 de Red Hat :",
      "url": "http://rhn.redhat.com/errata/RHSA-2003-037.html"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 DSA-226 de Debian :",
      "url": "http://www.debian.org/security/2003/dsa-226"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 MDKSA-2003:002 de Mandrake :",
      "url": "http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2003:002"
    }
  ],
  "reference": "CERTA-2003-AVI-001",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2003-01-03T00:00:00.000000"
    },
    {
      "description": "ajout r\u00e9f\u00e9rences aux bulletins de Mandrake et Debian.",
      "revision_date": "2003-01-22T00:00:00.000000"
    },
    {
      "description": "ajout r\u00e9f\u00e9rence au bulletin de Red Hat.",
      "revision_date": "2003-02-07T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service"
    },
    {
      "description": "Ex\u00e9cution de commande arbitraire"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 pr\u00e9sente sur pdftops permet \u00e0 un utilisateur mal\nintentionn\u00e9 de r\u00e9aliser un d\u00e9bordement de m\u00e9moire.\n",
  "title": "Vuln\u00e9rabilit\u00e9 sur pdftops",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "CVE : CAN-2002-1384",
      "url": null
    },
    {
      "published_at": null,
      "title": "Avis de s\u00e9curit\u00e9 iDefense",
      "url": "http://www.idefense.com/advisory/12.23.02.txt"
    }
  ]
}