CVE-2011-0581

Published: Feb 10, 2011Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Multiple CRLF injection vulnerabilities in Adobe ColdFusion 8.0 through 9.0.1 allow remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified tags.

Affected (4)

Products: Adobe: Coldfusion

Adobe

1 product

Coldfusion

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Adobe Coldfusion	Version 8.0.1
Adobe Coldfusion	Version 8.0
Adobe Coldfusion	Version 9.0.1
Adobe Coldfusion	Version 9.0

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (12)

http://secunia.com/advisories/43264

Source: psirt@adobe.com

http://www.adobe.com/support/security/bulletins/apsb11-04.html

Source: psirt@adobe.com

PatchVendor Advisory

http://www.securityfocus.com/bid/46281

Source: psirt@adobe.com

http://www.securitytracker.com/id?1025036

Source: psirt@adobe.com

http://www.vupen.com/english/advisories/2011/0334

Source: psirt@adobe.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/65276

Source: psirt@adobe.com

http://secunia.com/advisories/43264