Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2012-3444
5
MEDIUMCVSS v2
Published
July 31, 2012
Affected
2 projects
Assigned by
Red Hat
Severity scale
010
Description
The get_image_dimensions function in the image-handling functionality in Django before 1.3.2 and 1.4.x before 1.4.1 uses a constant chunk size in all attempts to determine dimensions, which allows remote attackers to cause a denial of service (process or thread consumption) via a large TIFF image.
django/django
GitHubThe Web framework for perfectionists with deadlines.
GitHubThe Web framework for perfectionists with deadlines.= 1.1.4, = 1.2.5, = 0.95, = 1.0, = 1.2.6, = 1.1.2, = 1.0.1, = 1.1, = 1.2, = 1.4, = 1.3, = 1.2.4, = 0.96, = 1.2-alpha1, <= 1.3, = 1.2.7, = 1.1.3, = 1.0.2, = 1.2.2, < 1.3.2, >= 1.4, < 1.4.1NVD
DjangoPython Package IndexA high-level Python web framework that encourages rapid development and clean, pragmatic design.
Python Package IndexA high-level Python web framework that encourages rapid development and clean, pragmatic design.= 1.1.4, = 1.2.5, = 0.95, = 1.0, = 1.2.6, = 1.1.2, = 1.0.1, = 1.1, = 1.2, = 1.4, = 1.3, = 1.2.4, = 0.96, = 1.2-alpha1, <= 1.3, = 1.2.7, = 1.1.3, = 1.0.2, = 1.2.2, < 1.3.2, >= 1.4, < 1.4.1NVD