Unknown vulnerability in ColdFusion MX 6.0 and 6.1, and JRun 4.0, when a SOAP web service expects an array of objects as an argument, allows remote attackers to cause a denial of service (memory consumption).
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Coldfusion | Macromedia | 6.0 (including) | 6.0 (including) |
| Coldfusion | Macromedia | 6.1 (including) | 6.1 (including) |
| Jrun | Macromedia | 4.0 (including) | 4.0 (including) |
| Jrun | Macromedia | 4.0-sp1 (including) | 4.0-sp1 (including) |
| Jrun | Macromedia | 4.0-sp1a (including) | 4.0-sp1a (including) |
| Jrun | Macromedia | 4.0_build_61650 (including) | 4.0_build_61650 (including) |
| One_application_server | Sun | 7.0 (including) | 7.0 (including) |
| One_application_server | Sun | 7.0-ur1 (including) | 7.0-ur1 (including) |
| One_application_server | Sun | 7.0-ur2 (including) | 7.0-ur2 (including) |