CVE-2012-0770 in Adobe ColdFusion
Resumen (Inglés)
Adobe ColdFusion 8.0, 8.0.1, 9.0, and 9.0.1 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.
Reservar
2012-01-18
Divulgación
2012-03-13
Voces
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerabilidad | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 4806 | Adobe ColdFusion Hash Collision Form Parameter denegación de servicio | 404 | No está definido | Arreglo oficial | CVE-2012-0770 |