CVE-2002-1992 Buffer overflow in jrun.dll in ColdFusion MX, when used with IIS 4 or 5, allows remote attackers to cause a denial of service in IIS via (1) a long template file name or (2) a long HTTP header.
MediumCVSS 5.0
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in jrun.dll in ColdFusion MX, when used with IIS 4 or 5, allows remote attackers to cause a denial of service in IIS via (1) a long template file name or (2) a long HTTP header.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| macromedia coldfusion | All versions | No fix listed |
| macromedia coldfusion professional | All versions | No fix listed |
References
- coldfusion-mx-jrundll-bo(9460) patch vdb-entry
- www.macromedia.com patch
- 5121 patch vdb-entry