Adobe ColdFusion Bypass Sandbox Restrictions Vulnerability

Last Update Date: 12 Dec 2012 14:13 Release Date: 12 Dec 2012 4062 Views

RISK: Medium Risk

TYPE: Clients - Audio & Video

A vulnerability has been identified in Adobe ColdFusion. A local user can obtain elevated privileges on the target system. A remote authenticated user or a local user may be able to violate sandbox permissions in a shared hosting environment.

Impact

Elevation of Privilege

System / Technologies affected

ColdFusion 10, 9.0.2, 9.0.1 and 9.0 for Windows, Macintosh and UNIX

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

Apply hotfix:
http://helpx.adobe.com/coldfusion/kb/coldfusion-security-hotfix-apsb12-26.html

Vulnerability Identifier

CVE 2012-5675

Source

Adobe
Security Tracker