CVE-2004-1816: Medium severity Macromedia ColdFusion vulnerability

Published Mar 15, 2004
·
Updated

Unknown vulnerability in Sun Java System Application Server 7.0 Update 2 and earlier, when a SOAP web service expects an array of objects as an argument, allows remote attackers to cause a denial of service (memory consumption).

Affected Software

24 affected components
Macromedia ColdFusion=6.0
Macromedia ColdFusion=6.1
Macromedia JRun=4.0
Macromedia JRun=4.0-sp1
Macromedia JRun=4.0-sp1a
Macromedia JRun=4.0_build_61650
Sun ONE Application Server=7.0
Sun ONE Application Server=7.0
Sun ONE Application Server=7.0-ur1
Sun ONE Application Server=7.0-ur1
Sun ONE Application Server=7.0-ur2
Sun ONE Application Server=7.0-ur2
Sun ONE Application Server=7.0
Sun ONE Application Server=7.0-ur1
Sun ONE Application Server=7.0-ur1
Macromedia JRun=4.0-sp1a
Sun ONE Application Server=7.0-ur2
Macromedia ColdFusion=6.1
Macromedia JRun=4.0-sp1
Sun ONE Application Server=7.0
Macromedia ColdFusion=6.0
Sun ONE Application Server=7.0-ur2
Macromedia JRun=4.0
Macromedia JRun=4.0_build_61650

Event History

Mar 15, 2004
CVE Published
05:00 AM
May 10, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2004-1816?

CVE-2004-1816 is classified as a denial of service vulnerability.

2

How does CVE-2004-1816 work?

CVE-2004-1816 allows remote attackers to exploit the application server by sending specially crafted SOAP requests that lead to memory consumption.

3

What versions of software are affected by CVE-2004-1816?

CVE-2004-1816 affects Sun Java System Application Server 7.0 Update 2 and earlier versions.

4

How can I mitigate the risks associated with CVE-2004-1816?

Mitigation for CVE-2004-1816 includes applying patches or updates provided by Sun Microsystems for vulnerable versions.

5

Is CVE-2004-1816 an exploit that can be easily leveraged by attackers?

Yes, CVE-2004-1816 can be easily leveraged by attackers, making it critical to address in affected systems.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203