Having recently installed Studio 2004, I note that it appears to install two
copies of the vulnerable Microsoft GDIPLUS.DLL library, one in each of the
Dreamweaver and Fireworks directories.
I have downloaded the latest updates from the Dreamweaver site, but the
vulnerable DLLs were not updated.
Whilst I have manually replaced to rogue files with an updated version from
Microsoft, I am surprised that an update is not available from Macromedia.
Others may wish to check their systems ...
Do note that the Microsoft tools do not check for 3rd party use of GDIPlus !
Malcolm
|