CVE-2004-2505: Macromedia ColdFusion

Medium severity, CVSS 5.0. EPSS: 3.2% chance of exploitation in the next 30 days.

Macromedia ColdFusion MX before 6.1 does not restrict the size of error messages, which allows remote attackers to cause a denial of service (memory consumption and crash) by sending repeated GET or POST requests that trigger error messages that use long strings of data.

Affected products

• Macromedia ColdFusion: version 5.0 only; version 6.0 only

Published 2004-12-31. Last modified 2026-06-16.