Archive
31 July 2012
Vulnerabilities first published on this day (UTC), newest first.
2 results · Clear filters · Feed
-
High 7.5
Django vulnerable to Improper Restriction of Operations within the Bounds of a Memory Buffer
The get_image_dimensions function in the image-handling functionality in Django before 1.3.2 and 1.4.x before 1.4.1 uses a constant chunk size in all attempts to determine dimensions, which allows remote attackers to cause a denial of service (process or thre…
-
High 7.5
Django Image Field Vulnerable to Image Decompression Bombs
The django.forms.ImageField class in the form system in Django before 1.3.2 and 1.4.x before 1.4.1 completely decompresses image data during image validation, which allows remote attackers to cause a denial of service (memory consumption) by uploading an imag…