|
Security update available for RoboHelp for Word
Release date: February 14, 2012
Vulnerability identifier: APSB12-04
CVE number: CVE-2012-0765
Platform: Windows
This update addresses an important vulnerability in RoboHelp 9 (or 8) for Word on Windows. A specially crafted URL could be used to create a cross-site scripting attack on Web-based output generated using RoboHelp for Word.
[Link mogu videti samo ulogovani korisnici]
1. Back up the corresponding files provided in the APSB12-04.zip file, which can be found in the following folders:
<Install Path>\RoboHELP\WebHelp5Ext\template_stock
<Install Path>\RoboHELP\WebHelp5Ext\template_csh
<Install Path>\RoboHELP\WildFireExt\template_stock
<Install Path>\RoboHELP\WildFireExt\template_csh
2. Unzip the patch file. Replace the old files with the updated files provided in the patch.
3. Regenerate the outputs.
|