CVE-2001-1514: Critical severity adobe coldfusion vulnerability
ColdFusion 4.5 and 5, when running on Windows with the advanced security sandbox type set to "operating system," does not properly pass security context to (1) child processes created with <CFEXECUTE> and (2) child processes that call the CreateProcess function and are executed with <CFOBJECT> or end with the CFX extension, which allows attackers to execute programs with the permissions of the System account.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2001-1514?
CVE-2001-1514 has been classified with a medium severity due to its potential for unauthorized code execution.
How do I fix CVE-2001-1514?
To fix CVE-2001-1514, ensure that ColdFusion 4.5 and 5 are updated to the latest security patches released by Macromedia.
What software versions are affected by CVE-2001-1514?
CVE-2001-1514 affects ColdFusion versions 4.5 and 5.0 when running on Windows with an advanced security sandbox type set to 'operating system'.
Can CVE-2001-1514 lead to remote exploitation?
Yes, CVE-2001-1514 can potentially allow an attacker to execute arbitrary commands through child processes.
What are the main vectors of exploitation for CVE-2001-1514?
Exploitation of CVE-2001-1514 primarily occurs through the use of <CFEXECUTE> and <CFOBJECT> to create child processes without appropriate security context.