Null pointer dereference

Adobe ColdFusion 8.0.1 and earlier might allow attackers to obtain sensitive information via unspecified vectors, related to a “double-encoded null character vulnerability.”