PT-2012-2857 · Adobe · Coldfusion

Publicado 2012-03-13 · Atualizado 2018-01-11 · CVE-2012-0770

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Adobe ColdFusion versions 8.0 through 9.0.1

Description The issue allows remote attackers to cause a denial of service by sending many crafted parameters, resulting in CPU consumption due to hash collisions.

Recommendations For Adobe ColdFusion versions 8.0 through 9.0.1, consider implementing restrictions on the number of form parameters that can be submitted to prevent predictable hash collisions and subsequent denial of service attacks.

Correção

Identificadores relacionados

CVE-2012-0770

Produtos afetados

Coldfusion

Referências · 8

• http://secunia.com/advisories/48393 · Nota
• http://helpx.adobe.com/coldfusion/kb/coldfusion-security-hotfix.html · Nota
• http://osvdb.org/80008 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0770 · Nota
• http://adobe.com/support/security/bulletins/apsb12-06.html · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/73955 · Nota
• http://securitytracker.com/id?1026830 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-0770 · Nota de Segurança