Cross-Site Scripting Vulnerability in Adobe RoboHelp
CVE-2010-2885

Currently unrated

Key Information:

Vendor
Adobe
Status
Robohelp
Robohelp Server
Vendor
CVE Published:
26 October 2010

Summary

The vulnerability allows remote attackers to exploit Adobe RoboHelp versions 7 and 8, including RoboHelp Server versions 7 and 8, by injecting arbitrary web scripts or HTML into the application. Weakened security during WebHelp generation creates vectors that can be exploited to perform malicious actions, potentially compromising the integrity and security of affected systems.

References

http://www.vupen.com/english/advisories/2010/2718
vdb-entryx_refsource_VUPEN
http://secunia.com/advisories/41870
third-party-advisoryx_refsource_SECUNIA
http://www.adobe.com/support/security/bulletins/apsb10-23...
x_refsource_CONFIRM

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.