Secunia Logo  


Secunia PSI WorldMap
 
CVE Reference: CVE-2005-4343
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE:
CVE-2005-4343

Description:
Adobe (formerly Macromedia) ColdFusion MX 6.0, 6.1, 6.1 with JRun, and 7.0 allows remote attackers to attach arbitrary files and send mail via a crafted Subject field, which is not properly handled by the CFMAIL tag in applications that use ColdFusion, aka "CFMAIL injection Vulnerability".

CVE Status:
Candidate

References:

ST
  1015369

SAID
  Secunia Advisory: SA18078

CONFIRM
  http://www.macromedia.com/devnet/security/security_zone/mpsb05-14.html
  http://www.macromedia.com/devnet/security/security_zone/mpsb05-12.html

BID
  15904


Return to the previous page.