{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Microsoft Windows 98 ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Windows 98 Second Edition ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Windows Millenium ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Windows NT 4.0 ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Windows 2000 ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Windows XP.",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nLe contr\u00f4le ActiveX \\`\\`Certificate Enrollment Control\u0027\u0027 permet de\ncontr\u00f4ler le num\u00e9ro d\u0027identification d\u0027un certificat. L\u0027appel de ce\ncontr\u00f4le, via une page web, permet \u00e0 un utilisateur mal intentionn\u00e9\nd\u0027effacer des certificats sur l\u0027ordinateur cible, emp\u00eachant alors\nl\u0027utilisation des fonctions associ\u00e9es \u00e0 ces certificats (ex: chiffrement\nEFS, signature de mail, ...).\n\n## Contournement provisoire\n\nD\u00e9sactiver l\u0027usage des ActiveX.\n\n## Solution\n\nAppliquer le correctif \\#Q323172 fournit par Microsoft (consultez la\nsection Documentation).\n",
  "cves": [],
  "links": [],
  "reference": "CERTA-2002-AVI-194",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2002-08-29T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service"
    }
  ],
  "summary": "Toutes les versions de Windows sont livr\u00e9es avec un contr\u00f4le ActiveX\ndestin\u00e9 \u00e0 v\u00e9rifier les certificats. Une vuln\u00e9rabilit\u00e9 permet \u00e0 un\nutilisateur mal intentionn\u00e9 d\u0027effacer \u00e0 distance des certificats de la\nmachine cible et donc de provoquer un d\u00e9ni de service.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans un contr\u00f4le ActiveX sur Windows",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 #MS02-048 de Microsoft",
      "url": "http://www.microsoft.com/technet/security/bulletin/MS02-048.asp"
    }
  ]
}