This month Adobe decided to fix a ColdFusion vulnerability for Black Tuesday:

APSB12-15 tells about the fix for CVE-2012-2041, a HTTP response splitting vulnerability in the ColdFusion Component browser.

--
Swa Frantzen -- Section 66