CVE-2012-0770 in Adobe ColdFusion
요약 (영어)
Adobe ColdFusion 8.0, 8.0.1, 9.0, and 9.0.1 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.
예약하다
2012. 01. 18.
공개
2012. 03. 13.
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 4806 | Adobe ColdFusion Hash Collision Form Parameter 서비스 거부 | 404 | 정의되지 않음 | 공식 수정 | CVE-2012-0770 |