Woo Themes Gazette Edition,Woo Themes Live Wire, TimThumb

ソフト名：Woo Themes Gazette Edition 2.3.1以下,Woo Themes Live Wire 2.9.4以下 (WordPress), TimThumb 1.x

回避策：アップデートにて対応

脆弱性：XSS, DoS攻撃, 不正HTMLの実行, スクリプトコード実行

ソース：http://www.woothemes.com/

http://www.woothemes.com/2008/03/live-wire/

http://www.binarymoon.co.uk/projects/timthumb/

http://packetstormsecurity.org/files/view/100238/livewire-xssdos.txt

http://packetstormsecurity.org/files/view/100293/gazette-xssdos.txt

http://code.google.com/p/timthumb/issues/detail?id=49

http://code.google.com/p/timthumb/source/detail?r=88

http://code.google.com/p/timthumb/source/detail?r=114

http://code.google.com/p/timthumb/source/detail?r=123

http://secunia.com/advisories/44126/

http://secunia.com/advisories/44140/

危険性：Medium Risk