What’s Vulnerable › Vulnerabilities

CVE-2002-1992

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2002-12-31 · updated 2026-06-16

Description

Buffer overflow in jrun.dll in ColdFusion MX, when used with IIS 4 or 5, allows remote attackers to cause a denial of service in IIS via (1) a long template file name or (2) a long HTTP header.

Affected products

• Macromedia Coldfusion: all versions
• Macromedia Coldfusion Professional: all versions

References

• http://www.iss.net/security_center/static/9460.php
• http://www.macromedia.com/v1/handlers/index.cfm?ID=23161
• http://www.securityfocus.com/bid/5121
• http://www.iss.net/security_center/static/9460.php
• http://www.macromedia.com/v1/handlers/index.cfm?ID=23161
• http://www.securityfocus.com/bid/5121

Get alerted when CVE-2002-1992 or the next vulnerability affects your stack