Lucene search
HistoryMar 13, 2012 - 10:55 p.m.
CVE-2012-0770
adobe
coldfusion
hash collision
dos
cve-2012-0770
nvd
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
6.8 Medium
AI Score
Confidence
High
0.018 Low
EPSS
Percentile
88.4%
Adobe ColdFusion 8.0, 8.0.1, 9.0, and 9.0.1 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.
Affected configurations
Node
adobecoldfusionMatch8.0
ORadobecoldfusionMatch8.0.1
ORadobecoldfusionMatch9.0
ORadobecoldfusionMatch9.0.1
Related
nvd
nvd
CVE-2012-0770
2012-03-13 22:55:01
cvelist
cvelist
CVE-2012-0770
2012-03-13 22:00:00
nessus
nessus
Adobe ColdFusion Hash Collision DoS (APSB12-06) (credentialed check)
2012-03-19 00:00:00
prion
prion
Code injection
2012-03-13 22:55:00
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
6.8 Medium
AI Score
Confidence
High
0.018 Low
EPSS
Percentile
88.4%
Related for CVE-2012-0770