CVE-2002-1309: Buffer Overflow
Published Nov 21, 2002
·Updated
Heap-based buffer overflow in the error-handling mechanism for the IIS ISAPI handler in Macromedia ColdFusion 6.0 allows remote attackers to execute arbitrary via an HTTP GET request with a long .cfm file name.
Affected Software
1 affected component
Macromedia ColdFusion=6.0
Remediation
Event History
Nov 21, 2002
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-1309?
CVE-2002-1309 is considered a high severity vulnerability due to the potential for remote code execution.
2
How do I fix CVE-2002-1309?
To fix CVE-2002-1309, upgrade to a patched version of Macromedia ColdFusion that addresses this vulnerability.
3
Who is affected by CVE-2002-1309?
CVE-2002-1309 affects users of Macromedia ColdFusion 6.0.
4
What type of attack does CVE-2002-1309 enable?
CVE-2002-1309 enables remote attackers to execute arbitrary code through specially crafted HTTP requests.
5
What is the nature of CVE-2002-1309's vulnerability?
CVE-2002-1309 is a heap-based buffer overflow vulnerability that occurs in the error-handling mechanism of the IIS ISAPI handler.