CVE-2016-4264: XEE
First published: Thu Sep 01 2016(Updated: )
The Office Open XML (OOXML) feature in Adobe ColdFusion 10 before Update 21 and 11 before Update 10 allows remote attackers to read arbitrary files or send TCP requests to intranet servers via a crafted OOXML spreadsheet containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
Credit: psirt@adobe.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Adobe ColdFusion | <=10.0 | |
| Adobe ColdFusion | <=11.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://legalhackers.com/advisories/Adobe-ColdFusion-11-XXE-Exploit-CVE-2016-4264.txt
- http://www.securityfocus.com/archive/1/539374/100/0/threaded
- http://www.securityfocus.com/bid/92684
- http://www.securitytracker.com/id/1036708
- https://helpx.adobe.com/security/products/coldfusion/apsb16-30.html
- https://www.exploit-db.com/exploits/40346/
Frequently Asked Questions
What is the severity of CVE-2016-4264?
CVE-2016-4264 is considered a critical vulnerability as it allows remote attackers to read arbitrary files and send TCP requests.
How do I fix CVE-2016-4264?
To fix CVE-2016-4264, upgrade Adobe ColdFusion to version 10 Update 21 or 11 Update 10 or later.
What types of attacks can be performed using CVE-2016-4264?
CVE-2016-4264 allows attackers to exploit OOXML spreadsheets to read files and potentially access intranet resources.
Which versions of Adobe ColdFusion are affected by CVE-2016-4264?
CVE-2016-4264 affects Adobe ColdFusion versions 10 before Update 21 and 11 before Update 10.
Is CVE-2016-4264 related to XML parsing issues?
Yes, CVE-2016-4264 is related to XML external entity (XXE) vulnerabilities due to flawed parsing of OOXML formats.
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/weakness
- agent/author
- agent/severity
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/adobe
- canonical/adobe coldfusion
- version/adobe coldfusion/10.0
- version/adobe coldfusion/11.0