Denial of Service Vulnerability in Adobe LiveCycle Data Services and BlazeDS
CVE-2011-2093

Currently unrated

Key Information:

Vendor
Adobe
Status
Blazeds
Vendor
CVE Published:
16 June 2011

Summary

Adobe LiveCycle Data Services, LiveCycle, and BlazeDS exhibit a vulnerability in the handling of object graphs that may allow attackers to execute a denial of service attack. This flaw can potentially disrupt service availability by exploiting complexities in the object graph structure used by these products, leading to system instability or unresponsiveness when subjected to crafted requests.

References

http://www.securityfocus.com/bid/48267
vdb-entryx_refsource_BID
https://exchange.xforce.ibmcloud.com/vulnerabilities/68026
vdb-entryx_refsource_XF
http://www.securitytracker.com/id?1025656
vdb-entryx_refsource_SECTRACK

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.