CVE-2012-5675

CVE-2012-5675 affects Adobe ColdFusion 9.0 through 9.0.2 and ColdFusion 10. The vulnerability is a sandbox-permission bypass in shared-hosting environments that allows local users to bypass intended sandbox restrictions via unspecified vectors. The available connected documents confirm the affect...

Adobe Patches Memory Flaws in Flash Player and Sandbox Vulnerability in ColdFusion

Adobe’s second set of security updates coinciding with Microsoft’s monthly patch releases were made available today. The two bulletins include patches for vulnerabilities in Adobe Flash Player and Adobe ColdFusion. The Flash vulnerabilities for Windows are rated most severe by Adobe and successfu...

CVE-2012-5674

Unspecified vulnerability in Adobe ColdFusion 10 before Update 5, when Internet Information Services IIS is used, allows attackers to cause a denial of service via unknown vectors...

Code injection

Unspecified vulnerability in Adobe ColdFusion 10 before Update 5, when Internet Information Services IIS is used, allows attackers to cause a denial of service via unknown vectors...

CVE-2012-5674

Adobe ColdFusion 10 on IIS is affected by an unspecified denial-of-service vulnerability before Update 5. The issue, limited to when IIS is used, allows DoS via unknown vectors and is addressed by applying Update 5 (or later). Affected product/version: ColdFusion 10 with IIS prior to Update 5; ro...

CVE-2012-5674

Unspecified vulnerability in Adobe ColdFusion 10 before Update 5, when Internet Information Services IIS is used, allows attackers to cause a denial of service via unknown vectors...

Adobe Releases Security Update for ColdFusion

Adobe has released a security hotfix for ColdFusion 10 Update 1 and above for Windows. This hotfix resolves a vulnerability affecting ColdFusion on Windows Internet Information Services IIS, which could result in a denial of service. US-CERT encourages users and administrators to review Adobe...

Adobe Patches DoS Flaw in ColdFusion 10

Adobe has addressed a denial-of-service vulnerability in the ColdFusion platform and an update is available. ColdFusion is Adobe’s platform and application server used by developers to build Web applications. The security hotfix is for ColdFusion 10 Update 1 and above for the Windows operating...

CVE-2012-2048

Unspecified vulnerability in Adobe ColdFusion 10 and earlier allows attackers to cause a denial of service via unknown vectors...

Code injection

Unspecified vulnerability in Adobe ColdFusion 10 and earlier allows attackers to cause a denial of service via unknown vectors...

CVE-2012-2048

CVE-2012-2048 affects Adobe ColdFusion 10 and earlier. The vulnerability is described as an unspecified denial of service caused by unknown vectors, with impact listed as partial availability loss. The available Connected documents do not detail the exact root cause or exploit vectors. Remediatio...

CVE-2012-2048

Unspecified vulnerability in Adobe ColdFusion 10 and earlier allows attackers to cause a denial of service via unknown vectors...

Adobe ColdFusion远程拒绝服务漏洞

BUGTRAQ ID: 55499 CVE ID: CVE-2012-2048 Adobe ColdFusion是一个动态Web服务器。 Adobe ColdFusion v10及之前版本存在远程拒绝服务漏洞，攻击者可利用此漏洞使受影响应用崩溃，执行任意代码。 0 Adobe ColdFusion 9.x Adobe ColdFusion 8.x Adobe ColdFusion 10.x 厂商补丁： Adobe ----- Adobe已经为此发布了一个安全公告（apsb12-21）以及相应补丁: apsb12-21：Security update: Hotfix available f...

WIS Coldfusion Exploit

Exploit for windows platform in category dos / poc Exploit Title: WIS Coldfusion Exploit Date: 9-9-2012 Author: Noxxie Vendor or Software Link: http://www.wis.nl/Onzeklanten link that also shows customers , gives an idea of inpact Version: All versions with search form are affected Category::...

Adobe ColdFusion HTTP Response Splitting Vulnerability (APSB12-15)

Adobe ColdFusion is prone to a response splitting vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:coldfusion...

Adobe ColdFusion HTTP Response Splitting (APSB12-15)

The version of Adobe ColdFusion running on the remote host is affected by an HTTP response splitting vulnerability. The coldfusion.filter.ComponentFilter class does not properly sanitize input used in the Location header of an HTTP response. A remote attacker can exploit this by tricking a user...

Adobe ColdFusion HTTP响应分离漏洞

CVE ID: CVE-2012-2041 Adobe ColdFusion是一个动态Web服务器。 Adobe ColdFusion 8.0至9.0.1版本没有正确过滤某些输入即返回给用户，在实现上存在CRLF注入漏洞，可被利用插入任意HTTP标头，并执行HTTP响应分离攻击。 0 Adobe ColdFusion 9.x Adobe ColdFusion 8.x 厂商补丁： Adobe ----- Adobe已经为此发布了一个安全公告（apsb12-15）以及相应补丁: apsb12-15：Security update: Hotfix available for ColdFusio...

CVE-2012-2041

CRLF injection vulnerability in the Component Browser in Adobe ColdFusion 8.0 through 9.0.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors...

Crlf injection

CRLF injection vulnerability in the Component Browser in Adobe ColdFusion 8.0 through 9.0.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors...

CVE-2012-2041

CVE-2012-2041 describes a CRLF injection in the Component Browser of Adobe ColdFusion 8.0–9.0.1 , enabling remote attackers to inject arbitrary HTTP headers and perform HTTP response splitting via unspecified vectors. Public references point to Adobe’s APSB12-15 security bulletin, which provided ...