VulnerabilityModified
CVE-2012-0770
Adobe ColdFusion 8.0, 8.0.1, 9.0, and 9.0.1 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many…
MEDIUM 5.0EPSS 2.92%
Does this matter?
Lower severity and a low EPSS score (2.92%). Track it; it rarely justifies an emergency change on its own.
Description
Adobe ColdFusion 8.0, 8.0.1, 9.0, and 9.0.1 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
- EPSS
- 2.92% probability · 86th percentile
- CISA KEV
- Not listed
- Affected
- adobe/coldfusion
- Source
- psirt@adobe.com
References
- http://helpx.adobe.com/coldfusion/kb/coldfusion-security-hotfix.html
- http://osvdb.org/80008
- http://secunia.com/advisories/48393
- http://www.adobe.com/support/security/bulletins/apsb12-06.htmlVendor Advisory
- http://www.securitytracker.com/id?1026830
- https://exchange.xforce.ibmcloud.com/vulnerabilities/73955
- http://helpx.adobe.com/coldfusion/kb/coldfusion-security-hotfix.html
- http://osvdb.org/80008
- http://secunia.com/advisories/48393
- http://www.adobe.com/support/security/bulletins/apsb12-06.htmlVendor Advisory
- http://www.securitytracker.com/id?1026830
- https://exchange.xforce.ibmcloud.com/vulnerabilities/73955
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.