CVE-2012-0770 in Adobe ColdFusion
摘要 (英语)
Adobe ColdFusion 8.0, 8.0.1, 9.0, and 9.0.1 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.
预定
2012-01-18
披露
2012-03-13
条目
VulDB provides additional information and datapoints for this CVE:
| 标识符 | 漏洞 | CWE | 可利用 | 对策 | CVE |
|---|---|---|---|---|---|
| 4806 | Adobe ColdFusion Hash Collision Form Parameter 拒绝服务 | 404 | 未定义 | 官方修复 | CVE-2012-0770 |