Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2012-3443
5
MEDIUMCVSS v2
Published
July 31, 2012
Affected
2 projects
Assigned by
Red Hat
Severity scale
010
Description
The django.forms.ImageField class in the form system in Django before 1.3.2 and 1.4.x before 1.4.1 completely decompresses image data during image validation, which allows remote attackers to cause a denial of service (memory consumption) by uploading an image file.
django/django
GitHubThe Web framework for perfectionists with deadlines.
GitHubThe Web framework for perfectionists with deadlines.= 1.1.4, = 1.2.5, = 0.95, = 1.0, = 1.2.6, = 1.1.2, = 1.0.1, = 1.1, <= 1.3, = 1.3, = 1.1.3, = 0.96, = 1.2, = 1.2.7, = 1.0.2, = 1.2.4, = 1.4, = 1.2-alpha1, = 1.2.2, < 1.3.2, >= 1.4, < 1.4.1NVD
DjangoPython Package IndexA high-level Python web framework that encourages rapid development and clean, pragmatic design.
Python Package IndexA high-level Python web framework that encourages rapid development and clean, pragmatic design.= 1.1.4, = 1.2.5, = 0.95, = 1.0, = 1.2.6, = 1.1.2, = 1.0.1, = 1.1, <= 1.3, = 1.3, = 1.1.3, = 0.96, = 1.2, = 1.2.7, = 1.0.2, = 1.2.4, = 1.4, = 1.2-alpha1, = 1.2.2, < 1.3.2, >= 1.4, < 1.4.1NVD