Adobe BlazeDS XML and XML External Entity Injection Vulnerabilities Solution:
The vendor has released an advisory and updates. Please see the references for details.
UPDATE (February 18, 2010): Updated fixes for ColdFusion are available. Please see the references for more information.
Adobe LiveCycle Data Services 3.0
Adobe ColdFusion 9.0
Adobe ColdFusion 8
Adobe LiveCycle 9.0
Adobe ColdFusion 8.0
Adobe BlazeDS 3.2
Adobe Flex Data Services 2.0.1
Adobe LiveCycle Data Services 2.5.1
Adobe LiveCycle Data Services 2.6.1
Adobe ColdFusion 7.0.2
Adobe LiveCycle 8.0.1
Adobe ColdFusion 8.0.1
Adobe LiveCycle 8.2.1