CVE-2017-3066

CVE-2017-3066 描述 Adobe ColdFusion 使用 Action Message Format AMF 消息格式。AMF 协议是一种自定义的二进制序列化协议。它有两种格式：AMF0 和 AMF3。Action 消息由头部和主体组成。有多种不同语言的 AMF 实现。对于 Java，我们有 Adobe BlazeDS（现在是 Apache BlazeDS），它也用于 Adobe ColdFusion。 Adobe ColdFusion 在其 Apache BlazeDS 库中处理不受信任的 Java 对象时，存在 Java...

Adobe ColdFusion Deserialization Vulnerability

Adobe ColdFusion contains a deserialization vulnerability in the Apache BlazeDS library that allows for arbitrary code execution...

VulnCheck KEV: CVE-2017-3066

Adobe ColdFusion contains a deserialization vulnerability in the Apache BlazeDS library that allows for arbitrary code execution...

CVE-2017-3066

Adobe ColdFusion 2016 Update 3 and earlier, ColdFusion 11 update 11 and earlier, ColdFusion 10 Update 22 and earlier have a Java deserialization vulnerability in the Apache BlazeDS library. Successful exploitation could lead to arbitrary code execution...

CVE-2017-3066

Adobe ColdFusion 2016 Update 3 and earlier, ColdFusion 11 update 11 and earlier, ColdFusion 10 Update 22 and earlier have a Java deserialization vulnerability in the Apache BlazeDS library. Successful exploitation could lead to arbitrary code execution...

CVE-2017-3066

Adobe ColdFusion 2016 Update 3 and earlier, ColdFusion 11 update 11 and earlier, ColdFusion 10 Update 22 and earlier have a Java deserialization vulnerability in the Apache BlazeDS library. Successful exploitation could lead to arbitrary code execution...