CVE-2007-1278
Published Mar 16, 2007
Last updated 5 years ago
Overview
- Description
- Unspecified vulnerability in the IIS connector in Adobe JRun 4.0 Updater 6, and ColdFusion MX 6.1 and 7.0 Enterprise, when using Microsoft IIS 6, allows remote attackers to cause a denial of service via unspecified vectors, involving the request of a file in the JRun web root.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 4.3
- Impact score
- 2.9
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:N/I:N/A:P
Weaknesses
- nvd@nist.gov
- NVD-CWE-Other
Evaluator
- Comment
- Per: http://www.adobe.com/support/security/bulletins/apsb07-07.html CVE number: CVE-2007-1278 Platform: Windows only Affected software versions: ColdFusion MX 7.X * JRun 4.0 Updater 6 * ColdFusion MX 7.0 Enterprise Edition, if installed as the "Multi-Server" option * ColdFusion MX 6.1 Enterprise, if installed with the "J2EE" option and deployed on JRun 4.0 Updater 6 NOTE: ColdFusion MX 6.1 and 7.0 Standard editions are not affected.
- Impact
- -
- Solution
- -
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:internet_information_server:6.0:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "F7C954A7-FF84-4DEB-8728-5B207F374ECC"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:adobe:coldfusion:6.1:*:enterprise_server:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8B70C03A-1B4B-46D9-99CB-45EFB2109F15"
},
{
"criteria": "cpe:2.3:a:adobe:coldfusion:7.0:*:enterprise_server:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B9C93E8B-6AD0-473C-9161-C71E03BFDEC7"
},
{
"criteria": "cpe:2.3:a:adobe:jrun:4.0:updater6:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A2A614E7-95D2-4473-BBBB-7CE0D96D9562"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
]