CVE-2007-1278: Medium severity Microsoft Internet Information Server vulnerability

Published Mar 16, 2007

Updated

Unspecified vulnerability in the IIS connector in Adobe JRun 4.0 Updater 6, and ColdFusion MX 6.1 and 7.0 Enterprise, when using Microsoft IIS 6, allows remote attackers to cause a denial of service via unspecified vectors, involving the request of a file in the JRun web root.

Affected Software

4 affected components

Microsoft Internet Information Server=6.0

Adobe ColdFusion=6.1

Adobe ColdFusion=7.0

Adobe JRun=4.0-updater6

Remediation

Patch Available

http://www.adobe.com/support/security/bulletins/apsb07-07.html

Event History

Mar 16, 2007

CVE Published

08:19 PM

Data Sourced

08:19 PM

DescriptionWeaknessAffected Software

Mar 17, 2007

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2007-1278?

CVE-2007-1278 is classified as a vulnerability that can lead to a denial of service.

How do I fix CVE-2007-1278?

To fix CVE-2007-1278, Adobe recommends updating to the latest versions of ColdFusion and JRun that address this issue.

Which software is affected by CVE-2007-1278?

CVE-2007-1278 affects Adobe JRun 4.0 Updater 6, and ColdFusion MX versions 6.1 and 7.0 Enterprise when used with Microsoft IIS 6.

Can CVE-2007-1278 be exploited remotely?

Yes, CVE-2007-1278 can be exploited by remote attackers, potentially causing denial of service.

What are the potential consequences of CVE-2007-1278?

The potential consequences of CVE-2007-1278 include service interruptions that affect web applications using the vulnerable software.