Description

The get_image_dimensions function in the image-handling functionality in Django before 1.3.2 and 1.4.x before 1.4.1 uses a constant chunk size in all attempts to determine dimensions, which allows remote attackers to cause a denial of service (process or thread consumption) via a large TIFF image.

Remediation

References

CVE-2012-3444

Related Vulnerabilities

WordPress 4.3.x Multiple Vulnerabilities (4.3 - 4.3.7)

PHP Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') Vulnerability (CVE-2022-31626)

Joomla Other Vulnerability (CVE-2006-7010)

PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2014-9705)

WordPress Plugin Cart66 Pro Arbitrary File Disclosure (1.5.3)

Severity

Medium

Classification

CVE-2012-3444 CWE-119

Tags

Missing Update Known Vulnerabilities