Adobe Affected

Notified:  October 04, 2007 Updated: January 17, 2008

Status

Affected

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor Information

The vendor has not provided us with any further information regarding this vulnerability.

Addendum

Adobe has published multiple Adobe Product Security Bulletins to address this issue. APSB08-01 describes updates for the Adobe Dreamweaver and Contribute products. APSB08-02 describes updates for the Adobe Connect Enterprise Server product. Note that these two bulletins supercede information previously published in Adobe Product Security Advisory APSA07-06. Users are also encouraged to review Adobe Product Security Bulletin APSB07-20 that documents mitigations in the Adobe Flash Player for some cross-site scripting vulnerabilities.

Autodemo Affected

Notified:  November 27, 2007 Updated: December 13, 2007

Status

Affected

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor Information

The vendor has not provided us with any further information regarding this vulnerability.

InfoSoft Global Affected

Notified:  November 27, 2007 Updated: December 13, 2007

Status

Affected

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor Information

The vendor has not provided us with any further information regarding this vulnerability.

TechSmith Corporation Affected

Notified:  November 27, 2007 Updated: June 16, 2008

Status

Affected

Vendor Statement

TechSmith has published a Security Bulletin to address this issue.  Security Bulletin 1 (http://www.techsmith.com/security/bulletins/B1_Cross-SiteScriptinginFlashSWFFiles.asp) describes updates to Camtasia Studio (v5.1) to address the vulnerability.

Vendor Information

The vendor has not provided us with any further information regarding this vulnerability.