Adobe issued an important Security Advisory on January 16th 2008 (read it here) for users of Dreamweaver CS3, Dreamweaver 8, Contribute CS3 and Contribute 4. The Google Security Team uncovered the potential for cross-site scripting attacks on pages containing code generated using the 'Insert Flash Video' command. The solution involves replacing one or more files (TechNote kb402925).
What the TechNote missed were fix details for Dreamweaver 8 (the version released by Macromedia prior to the 2005 Adobe acquistion) on the Windows platform. Grab the files from the TechNote and use the following screenshots as a guide.
Step 1 of 3
- Locate the SWF files
Step 2 of 3 - Rename the SWF files
Step 3 of 3 - Replace SWF files with new versions