Adobe ColdFusion (CVE-2011-2091) Remote Denial of Service Vulnerability

Bugtraq ID:	48269
Class:	Unknown
CVE:	CVE-2011-2091
Remote:	Yes
Local:	No
Published:	Jun 14 2011 12:00AM
Updated:	Jun 14 2011 12:00AM
Credit:	Pete Freitag of Foundeo
Vulnerable:	Adobe ColdFusion 8.0.1 Adobe ColdFusion 9.0.1 Adobe ColdFusion 9.0 Adobe ColdFusion 8.0
Not Vulnerable:

Adobe ColdFusion (CVE-2011-2091) Remote Denial of Service Vulnerability

Adobe ColdFusion is prone to a remote denial-of-service vulnerability.

Attackers can exploit this issue to cause the affected application to crash. Arbitrary code execution may be possible; this has not been confirmed.

Adobe ColdFusion versions 9.0.1 and prior are affected.

Adobe ColdFusion (CVE-2011-2091) Remote Denial of Service Vulnerability

Currently we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Adobe ColdFusion (CVE-2011-2091) Remote Denial of Service Vulnerability

Solution:
Updates are available. Please see the references for more information.

Adobe ColdFusion (CVE-2011-2091) Remote Denial of Service Vulnerability

References:

• Adobe ColdFusion Homepage (Adobe)
  
• ColdFusion Security Hotfix APSB11-14 and APSB11-15 (Adobe)
  
• APSB11-14: Security update: Hotfix available for ColdFusion (Adobe)