CVE-2008-0642: XSS

Published Feb 15, 2008

Updated

Cross-site scripting (XSS) vulnerability in files created by Adobe RoboHelp 6 and 7, possibly involving use of a (1) WebHelp5 (WebHelp5Ext) or (2) WildFire (WildFireExt) extension, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2007-1280.

Affected Software

2 affected components

Adobe RoboHelp=6

Adobe RoboHelp=7

Remediation

Patch Available

http://www.securityfocus.com/bid/27763

Event History

Feb 15, 2008

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2008-0642?

CVE-2008-0642 has a moderate severity rating due to its potential for cross-site scripting attacks.

How do I fix CVE-2008-0642?

To fix CVE-2008-0642, update Adobe RoboHelp to the latest version or apply the security patch provided by Adobe.

What versions of Adobe RoboHelp are affected by CVE-2008-0642?

CVE-2008-0642 affects Adobe RoboHelp versions 6 and 7.

What is the nature of the vulnerability in CVE-2008-0642?

CVE-2008-0642 is a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML.

Can CVE-2008-0642 be exploited through extensions?

Yes, CVE-2008-0642 may involve exploitation through WebHelp5 and WildFire extensions.