CVE-2002-1992: Macromedia ColdFusion

Medium severity, CVSS 5.0. EPSS: 1.8% chance of exploitation in the next 30 days.

Buffer overflow in jrun.dll in ColdFusion MX, when used with IIS 4 or 5, allows remote attackers to cause a denial of service in IIS via (1) a long template file name or (2) a long HTTP header.

Affected products

• Macromedia ColdFusion: any version
• Macromedia ColdFusion Professional: any version

Published 2002-12-31. Last modified 2026-06-16.