Adobe has released a security fix for ColdFusion 10, 9.0.2, 9.0.1, and 9.0 for Windows, Macintosh, and UNIX.

Now available, this fix addresses vulnerability (CVE-2013-1389) that could allow a remote attacker to execute arbitrary code. It also addresses vulnerability (CVE-2013-3336) that could permit an unauthorized user to remotely retrieve

files stored on the server.

Therefore Connectikpeople recommends that users to review Adobe Security Advisory APSA13-03 and Adobe Security Bulletin APSB13-13 and follow best-practice security policies .