CVE-2009-1876: Medium severity Adobe ColdFusion vulnerability
Published Aug 18, 2009
·Updated
Adobe ColdFusion 8.0.1 and earlier might allow attackers to obtain sensitive information via unspecified vectors, related to a "double-encoded null character vulnerability."
Affected Software
20 affected components
Adobe ColdFusion=6.0
Adobe ColdFusion=6.1
Adobe ColdFusion=6.0
Adobe ColdFusion=7.0.2
Adobe ColdFusion=7.0
Adobe ColdFusion=6.1
Adobe ColdFusion=8.0
Adobe ColdFusion=7.0
Adobe ColdFusion=6.0
Adobe ColdFusion=7.0
Adobe ColdFusion=6.0
Adobe ColdFusion=7.0
Adobe ColdFusion=7.2-unknown
Adobe ColdFusion=6.1
Adobe ColdFusion<=8.0.1
Adobe ColdFusion=7.0.1
Adobe ColdFusion=6.1
Adobe ColdFusion=7.0
Adobe ColdFusion=6.1
Adobe ColdFusion=6.0
Remediation
Event History
Aug 18, 2009
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2009-1876?
CVE-2009-1876 is classified as a moderate severity vulnerability that may allow unauthorized access to sensitive information.
2
How do I fix CVE-2009-1876?
To fix CVE-2009-1876, upgrade Adobe ColdFusion to version 8.0.1 or later.
3
What are the affected versions for CVE-2009-1876?
CVE-2009-1876 affects Adobe ColdFusion versions up to and including 8.0.1, as well as earlier versions like 6.0, 6.1, and 7.0.
4
What type of vulnerability is CVE-2009-1876?
CVE-2009-1876 is identified as a double-encoded null character vulnerability.
5
Can CVE-2009-1876 impact web applications?
Yes, CVE-2009-1876 can impact web applications by allowing attackers to exploit sensitive information via unspecified vectors.