CVEvulnerability
CVE-2005-4343
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2005-12-19
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N
Description
Adobe (formerly Macromedia) ColdFusion MX 6.0, 6.1, 6.1 with JRun, and 7.0 allows remote attackers to attach arbitrary files and send mail via a crafted Subject field, which is not properly handled by the CFMAIL tag in applications that use ColdFusion, aka "CFMAIL injection Vulnerability".
Affected configurations
• macromedia coldfusion 6.0
• macromedia coldfusion 6.1
• macromedia coldfusion 7.0
References
- http://secunia.com/advisories/18078 Patch, Vendor Advisory
- http://securitytracker.com/id?1015369 Patch, Vendor Advisory
- http://www.macromedia.com/devnet/security/security_zone/mpsb05-12.html Patch
- http://www.macromedia.com/devnet/security/security_zone/mpsb05-14.html Patch
- http://www.securityfocus.com/bid/15904 Patch
- http://www.vupen.com/english/advisories/2005/2948 www.vupen.com
- http://secunia.com/advisories/18078 Patch, Vendor Advisory
- http://securitytracker.com/id?1015369 Patch, Vendor Advisory
- http://www.macromedia.com/devnet/security/security_zone/mpsb05-12.html Patch
- http://www.macromedia.com/devnet/security/security_zone/mpsb05-14.html Patch
- http://www.securityfocus.com/bid/15904 Patch
- http://www.vupen.com/english/advisories/2005/2948 www.vupen.com