Drupal 7.x < 7.13 Multiple Vulnerabilities

Binary data 9724.prm...

CVE-2012-1591

CVE-2012-1591 affects Drupal core 7.x prior to 7.14 (per NVD). The vulnerability arises in the image handling pipeline where derivative image styles are cached, and the system does not properly terminate the request or set headers, enabling access to private image derivatives by unauthorized user...

CVE-2012-1591

The image module in Drupal 7.x before 7.14 does not properly check permissions when caching derivative image styles of private images, which allows remote attackers to read private image styles...

SA-CORE-2012-002 - Drupal core multiple vulnerabilities

Denial of Service CVE: CVE-2012-1588 Drupal core's text filtering system provides several features including removing inappropriate HTML tags and automatically linking content that appears to be a link. A pattern in Drupal's text matching was found to be inefficient with certain specially crafted...