Multiple vulnerabilities have been identified in Zope.html, which could be exploited by attackers to gain knowledge of sensitive information or compromise a vulnerable web server. These issues are caused by errors in FCKeditor. For additional information, see : VUPEN/ADV-2009-1799

Affected Products

Zope.html

Solution

Upgrade to the latest version :
http://svn.zope.org/zope.html/trunk/

References

http://www.vupen.com/english/advisories/2009/1825
http://mail.zope.org/pipermail/zope-dev/2009-July/037195.html

Changelog

2009-07-08 : Initial release

Feedback

If you have additional information or corrections for this security advisory please submit them via our contact form.