Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
prionPRIOn knowledge basePRION:CVE-2012-3444
HistoryJul 31, 2012 - 5:55 p.m.

Design/Logic Flaw

2012-07-3117:55:00
PRIOn knowledge base
www.prio-n.com
6

6.9 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.02 Low

EPSS

Percentile

88.6%

JSON

The get_image_dimensions function in the image-handling functionality in Django before 1.3.2 and 1.4.x before 1.4.1 uses a constant chunk size in all attempts to determine dimensions, which allows remote attackers to cause a denial of service (process or thread consumption) via a large TIFF image.

CPENameOperatorVersion
djangoeq1.1.4
djangoeq1.2.5
djangoeq0.95
djangoeq1.0 beta
djangoeq1.0
djangoeq1.2.6
djangoeq1.1.2
djangoeq1.0.1
djangoeq1.1
djangoeq1.2.4
Rows per page:
1-10 of 291

Related

ubuntucve 1
cve 1
osv 3
debiancve 1
github 1
gitlab 1
openvas 20
fedora 6
securityvulns 2
debian 1
nessus 7
seebug 1
ubuntu 1
freebsd 1
ubuntucve
ubuntucve
CVE-2012-3444
2012-07-31 00:00:00
cve
cve
CVE-2012-3444
2012-07-31 17:55:00
osv
osv
PYSEC-2012-4
2012-07-31 17:55:00
Django vulnerable to Improper Restriction of Operations within the Bounds of a Memory Buffer
2022-05-17 05:12:01
python-django - several
2012-08-14 00:00:00
debiancve
debiancve
CVE-2012-3444
2012-07-31 17:55:00
github
github
Django vulnerable to Improper Restriction of Operations within the Bounds of a Memory Buffer
2022-05-17 05:12:01
gitlab
gitlab
Improper Restriction of Operations within the Bounds of a Memory Buffer
2022-05-17 00:00:00
openvas
openvas
Fedora Update for Django FEDORA-2012-11415
2012-08-30 00:00:00
Mandriva Update for python-django MDVSA-2012:143 (python-django)
2012-08-24 00:00:00
FreeBSD Ports: py26-django, py27-django
2012-08-10 00:00:00
fedora
fedora
[SECURITY] Fedora 16 Update: Django-1.3.2-1.fc16
2012-08-10 22:34:03
[SECURITY] Fedora 17 Update: Django-1.4.3-1.fc17
2012-12-20 03:20:48
[SECURITY] Fedora 17 Update: Django-1.4.1-1.fc17
2012-08-10 22:27:19
securityvulns
securityvulns
[ MDVSA-2012:143 ] python-django
2012-09-03 00:00:00
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
2012-09-03 00:00:00
debian
debian
[SECURITY] [DSA 2529-1] python-django security update
2012-08-14 20:05:21
nessus
nessus
Fedora 16 : Django-1.3.2-1.fc16 (2012-11416)
2012-08-13 00:00:00
FreeBSD : django -- multiple vulnerabilities (f01292a0-db3c-11e1-a84b-00e0814cab4e)
2012-08-01 00:00:00
Ubuntu 10.04 LTS / 11.04 / 11.10 / 12.04 LTS : python-django vulnerabilities (USN-1560-1)
2012-09-11 00:00:00
seebug
seebug
Django跨站脚本执行和两个拒绝服务漏洞
2012-08-03 00:00:00
ubuntu
ubuntu
Django vulnerabilities
2012-09-10 00:00:00
freebsd
freebsd
django -- multiple vulnerabilities
2012-07-30 00:00:00

6.9 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.02 Low

EPSS

Percentile

88.6%

JSON
Related for PRION:CVE-2012-3444
ubuntucve1cve1osv3debiancve1github1gitlab1openvas20fedora6securityvulns2debian1nessus7seebug1ubuntu1freebsd1