CVE-2012-0770 in ColdFusion
Zusammenfassung (Englisch)
Adobe ColdFusion 8.0, 8.0.1, 9.0, and 9.0.1 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Reservieren
18.01.2012
Veröffentlichung
13.03.2012
Status
Bestätigt
Einträge
VulDB provides additional information and datapoints for this CVE:
| ID | Schwachstelle | CWE | Aus | Mas | CVE |
|---|---|---|---|---|---|
| 4806 | Adobe ColdFusion Hash Collision Form Parameter Denial of Service | 404 | Nicht definiert | Offizieller Fix | CVE-2012-0770 |