Secunia

Some vulnerabilities have been reported in Adobe Dreamweaver and Adobe Contribute, which can be exploited by malicious people to conduct cross-site scripting attacks.

The vulnerabilities are caused due to input validation errors in the generated code when using the "Insert Flash Video" command. This can be exploited to execute arbitrary HTML and script code in the context of an affected site using a generated SWF file.

This is also related to vulnerabilities #5 and #6 in:
SA28161

The vulnerabilities affect Dreamweaver CS3, Dreamweaver 8, Contribute CS3, and Contribute 4.

Solution
Update the FLVPlayer_Progressive.swf and FLVPlayer_Streaming.swf files.
Further details available in Customer Area

Provided and/or discovered by
The vendor credits Rich Cannings, Google Security Team.

Original Advisory
APSB08-01:
http://www.adobe.com/support/security/bulletins/apsb08-01.html

APSA07-06:
http://www.adobe.com/support/security/advisories/apsa07-06.html

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area