Adobe RoboHelp 6 and 7 Unspecified Cross-Site Scripting Vulnerability
BID:27763
Info
Adobe RoboHelp 6 and 7 Unspecified Cross-Site Scripting Vulnerability
| Bugtraq ID: | 27763 |
| Class: | Input Validation Error |
| CVE: |
CVE-2008-0642 |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 12 2008 12:00AM |
| Updated: | Feb 13 2008 06:46PM |
| Credit: | Tavis Ormandy of Google is credited with discovering this issue. |
| Vulnerable: |
Adobe RoboHelp Office 7 Adobe RoboHelp 6 |
| Not Vulnerable: | |
Discussion
Adobe RoboHelp 6 and 7 Unspecified Cross-Site Scripting Vulnerability
Adobe RoboHelp is prone to an unspecified cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input.
Few details are available regarding this issue. We will update this BID as more information emerges.
An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
The issue affects Adobe RoboHelp 6 and 7.
Adobe RoboHelp is prone to an unspecified cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input.
Few details are available regarding this issue. We will update this BID as more information emerges.
An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
The issue affects Adobe RoboHelp 6 and 7.
Exploit / POC
Adobe RoboHelp 6 and 7 Unspecified Cross-Site Scripting Vulnerability
Attackers can exploit this issue by enticing an unsuspecting user into following a malicious URI.
Attackers can exploit this issue by enticing an unsuspecting user into following a malicious URI.
Solution / Fix
Adobe RoboHelp 6 and 7 Unspecified Cross-Site Scripting Vulnerability
Solution:
The vendor has released fixes to address this issue. Fixes for RoboHelp 7 can be obtained by using the product's automatic update facility. Fixes for RoboHelp 6 can be obtained via Adobe's security bulletin. Please see the references for more information.
Adobe RoboHelp 6
Solution:
The vendor has released fixes to address this issue. Fixes for RoboHelp 7 can be obtained by using the product's automatic update facility. Fixes for RoboHelp 6 can be obtained via Adobe's security bulletin. Please see the references for more information.
Adobe RoboHelp 6
-
Adobe RoboHelp_APSB08-05.zip
http://download.macromedia.com/pub/robohelp/updates/RoboHelp_APSB08-05 .zip
References
Adobe RoboHelp 6 and 7 Unspecified Cross-Site Scripting Vulnerability
References:
References: