In association with heise online

20 November 2012, 09:31

Hotfix for ColdFusion 10 DoS vulnerability

  • Twitter
  • Facebook
  • submit to slashdot
  • StumbleUpon
  • submit to reddit

Adobe ColdFusion Adobe has released a hotfix for the Windows version of its ColdFusion application server that closes an unspecified denial-of-service vulnerability. The vulnerability is present in ColdFusion 10 Update 1 to Update 4 and is exposed when ColdFusion is used with a connector to Windows Internet Information Services (IIS).

The hotfix is packaged as ColdFusion 10 Update 5 and requires that a ColdFusion Mandatory Update is installed first. The update includes all previous ColdFusion 10 updates. Adobe has given the update a priority 2 rating, which means that, while the application is a popular target for attacks, there are no known exploits for the flaw in the wild. Adobe recommends updating within the next 30 days.


Print Version | Send by email | Permalink:

  • July's Community Calendar

The H Open

The H Security

The H Developer

The H Internet Toolkit