Critical

DATE	CVE	VULNERABILITY TITLE	RISK
2004-12-23	CVE-2004-0646	Remote vulnerability in Macromedia Coldfusion and Jrun Buffer overflow in the WriteToLog function for JRun 3.0 through 4.0 web server connectors, such as (1) mod_jrun and (2) mod_jrun20 for Apache, with verbose logging enabled, allows remote attackers to execute arbitrary code via a long HTTP header Content-Type field or other fields. network low complexity macromedia critical	10.0
2001-12-31	CVE-2001-1514	Unspecified vulnerability in Macromedia Coldfusion 4.5/5.0 ColdFusion 4.5 and 5, when running on Windows with the advanced security sandbox type set to "operating system," does not properly pass security context to (1) child processes created with <CFEXECUTE> and (2) child processes that call the CreateProcess function and are executed with <CFOBJECT> or end with the CFX extension, which allows attackers to execute programs with the permissions of the System account. network low complexity macromedia critical	10.0