Vulnerability in Macromedia Coldfusion
CVE-2005-4343
Adobe (formerly Macromedia) ColdFusion MX 6.0, 6.1, 6.1 with JRun, and 7.0 allows remote attackers to attach arbitrary files and send mail via a crafted Subject field, which is not properly handled by the CFMAIL tag in applications that use ColdFusion, aka "CFMAIL injection Vulnerability".
EPSS: 0.015 (71.4th percentile) — read the EPSS interpretation.
Affected products
- Macromedia Coldfusion — versions 6.0, 6.1, 7.0
- N/a — versions n/a
References
- cve@mitre.org (Patch, x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cve@mitre.org (x_refsource_CONFIRM, Patch)
- cve@mitre.org (x_refsource_CONFIRM, Patch)
- cve@mitre.org (Patch, vdb-entry, x_refsource_BID)
- cve@mitre.org (Patch, vdb-entry, x_refsource_SECTRACK, Vendor Advisory)
- cve@mitre.org (vdb-entry, x_refsource_VUPEN)