Vulnerability Details CVE-2006-3978
Unspecified vulnerability in a Verity third party library, as used on Adobe ColdFusion MX 7 through MX 7.0.2 and possibly other products, allows local users to execute arbitrary code via unknown attack vectors.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 60.2%
CVSS Severity
CVSS v2 Score 4.6
References
- http://secunia.com/advisories/22312
- http://securitytracker.com/id?1017040
- http://www.adobe.com/support/security/bulletins/apsb06-17.html
- http://www.securityfocus.com/bid/20431
- http://www.vupen.com/english/advisories/2006/4003
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29475
- http://secunia.com/advisories/22312
- http://securitytracker.com/id?1017040
- http://www.adobe.com/support/security/bulletins/apsb06-17.html
- http://www.securityfocus.com/bid/20431
- http://www.vupen.com/english/advisories/2006/4003
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29475
Products affected by CVE-2006-3978
-
cpe:2.3:a:adobe:coldfusion:7.0
-
cpe:2.3:a:adobe:coldfusion:7.0.1
-
cpe:2.3:a:adobe:coldfusion:7.0.2