See the Adobe page for more info:

Patch available for ColdFusion MX 7 local privilege escalation