CVE-2002-1309

CVE-2002-1309 describes a heap-based buffer overflow vulnerability in Macromedia ColdFusion 6.0. Specifically, the IIS ISAPI handler's error-handling mechanism is susceptible to attack when processing an HTTP GET request with an excessively long .cfm file name. This flaw carries a CVSS score of 7.5, indicating high severity due to its network-based attack vector, low attack complexity, and potential for complete compromise of confidentiality, integrity, and availability. Despite its age and severity, there is no evidence of active exploitation, publicly available exploit code in common frameworks like Metasploit or Nuclei, or significant community discussion or media coverage.