Adobe ColdFusion Flash Remoting Gateway Denial of Service Vulnerability

Bugtraq ID:	19984
Class:	Design Error
CVE:	CVE-2006-4724
Remote:	Yes
Local:	No
Published:	Sep 12 2006 12:00AM
Updated:	Sep 13 2006 06:17PM
Credit:	Shigeyoshi Muraoka of IT Frontier Corporation has been credited with the discovery of this vulnerability.
Vulnerable:	Adobe ColdFusion MX 7.01 Adobe ColdFusion MX 7.00
Not Vulnerable:	Adobe ColdFusion MX 7.02 Adobe ColdFusion MX 6.1

Adobe ColdFusion Flash Remoting Gateway Denial of Service Vulnerability

Adobe ColdFusion is prone to a denial-of-service vulnerability.

An attacker can exploit this issue to crash the affected application, denying service to legitimate users.

Adobe ColdFusion Flash Remoting Gateway Denial of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Adobe ColdFusion Flash Remoting Gateway Denial of Service Vulnerability

Solution:
The vendor has released an update to address this issue.

Please see the references on how to obtain and apply this update.


Adobe ColdFusion MX 7.01

• Adobe hf701-apsb06-12.zip
  http://www.adobe.com/support/security/bulletins/hf701-apsb06-12.zip

Adobe ColdFusion Flash Remoting Gateway Denial of Service Vulnerability

References:

• Adobe ColdFusion Home Page (Adobe)
  
• Adobe Security Bulletin APSB06-12 (Adobe)