PT-2012-4716

Name of the Vulnerable Software and Affected Versions Django versions prior to 1.3.2 Django versions 1.4.x prior to 1.4.1 Description The issue allows remote attackers to cause a denial of service due to memory consumption by uploading an image file. This is because the django.forms.ImageField...

CVE-2012-3443: Improper Input Validation

The django.forms.ImageField class in the form system in Django before 1.3.2 and 1.4.x before 1.4.1 completely decompresses image data during image validation, which allows remote attackers to cause a denial of service memory consumption by uploading an image file...