CVE-2007-1278

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 23.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-03-16 · updated 2026-06-16

Description

Unspecified vulnerability in the IIS connector in Adobe JRun 4.0 Updater 6, and ColdFusion MX 6.1 and 7.0 Enterprise, when using Microsoft IIS 6, allows remote attackers to cause a denial of service via unspecified vectors, involving the request of a file in the JRun web root.

Affected products

Adobe ColdFusion: 6.1, 7.0
Adobe Jrun: 4.0-updater6

References

http://osvdb.org/34039
http://secunia.com/advisories/24488
http://www.adobe.com/support/security/bulletins/apsb07-07.html
http://www.securityfocus.com/bid/22958
http://www.securitytracker.com/id?1017752
http://www.vupen.com/english/advisories/2007/0932
https://exchange.xforce.ibmcloud.com/vulnerabilities/32994
http://osvdb.org/34039
http://secunia.com/advisories/24488
http://www.adobe.com/support/security/bulletins/apsb07-07.html
http://www.securityfocus.com/bid/22958
http://www.securitytracker.com/id?1017752

Get alerted when CVE-2007-1278 or the next vulnerability affects your stack