CVE-2009-1876: Adobe ColdFusion 8.0.1 and earlier might allow attackers to obtain sensitive information via unspecified vectors, related to a "double-encoded null character vulnerability."

Unscored severity · published Aug 18, 2009

CVE-2009-1876

Adobe ColdFusion 8.0.1 and earlier might allow attackers to obtain sensitive information via unspecified vectors, related to a "double-encoded null character vulnerability."

–

CVSS

2.8%

EPSS

On KEV

Exploitation

Is it being used?

Exploit prediction (EPSS)2.8% · higher than 86% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

ColdFusion · Adobe

through 8.0.1; 6.0; 6.0; 6.0; 6.0; 6.0; +14 more · source: NVD

Affected product

ColdFusion

Adobe

All ColdFusion CVEs

References

NVD

https://nvd.nist.gov/vuln/detail/CVE-2009-1876

CVE.org

https://www.cve.org/CVERecord?id=CVE-2009-1876

osvdb.org

http://osvdb.org/57189

Patch

http://www.adobe.com/support/security/bulletins/apsb09-12.html