Adobe preps ColdFusion update to deter active exploits

Share this article:

Adobe next week plans to patch its ColdFusion application server to close three vulnerabilities.

The company said in an advisory late Friday that attackers are actively exploiting the bugs, which could allow an adversary to take control of the targeted server, gain increased access or steal information. Two of the flaws, however, only impact those customers who lack password protection.

The hotfix, set to be issued Jan. 15, will update ColdFusion versions 10, 9.0.2, 9.0.1 and 9.0 running on Windows, Macintosh and Unix.

Meanwhile, Adobe on Tuesday expects to push out normally scheduled updates for its Reader and Acrobat software (versions 11.0 and earlier) to coincide with Microsoft's planned patches.

Adobe did not say how many vulnerabilities will be patched, but a spokeswoman said the company was not aware of any being exploited in the wild.

Share this article:
You must be a registered member of SC Magazine to post a comment.

Sign up to our newsletters

TOP COMMENTS

More in News

Florida Supreme Court rules warrants a must for real-time cell location tracking

Florida Supreme Court rules warrants a must for ...

The Florida Supreme Court put the kibosh on warrantless real-time tracking using location data obtained from cell phone providers.

Modular malware for OS X includes backdoor, keylogger components

Modular malware for OS X includes backdoor, keylogger ...

The modular malware was named "Ventir," by researchers at Kaspersky.

Fake Dropbox login page nabs credentials, is hosted on Dropbox

Fake Dropbox login page nabs credentials, is hosted ...

Symantec researchers received a phishing email linking recipients to a fake Dropbox login page that is hosted on Dropbox's user content domain and served over SSL.