CVE-2005-4343: Medium severity macromedia coldfusion vulnerability
Adobe (formerly Macromedia) ColdFusion MX 6.0, 6.1, 6.1 with JRun, and 7.0 allows remote attackers to attach arbitrary files and send mail via a crafted Subject field, which is not properly handled by the CFMAIL tag in applications that use ColdFusion, aka "CFMAIL injection Vulnerability".
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2005-4343?
CVE-2005-4343 is considered to be of medium severity due to its potential to allow remote attackers to send arbitrary files through crafted CFMAIL tags.
How do I fix CVE-2005-4343?
To fix CVE-2005-4343, upgrade to secure versions of ColdFusion that have addressed this vulnerability.
What systems are affected by CVE-2005-4343?
CVE-2005-4343 affects Adobe ColdFusion MX 6.0, 6.1, and 7.0 applications that utilize the CFMAIL tag.
What does CVE-2005-4343 exploit?
CVE-2005-4343 exploits a vulnerability in the handling of the Subject field in the CFMAIL tag.
Is CVE-2005-4343 specific to a certain version of ColdFusion?
Yes, CVE-2005-4343 specifically affects ColdFusion MX versions 6.0, 6.1, and 7.0.