CVE-2011-2772

Published Nov 15, 2011 CVSS 2.0 · 5.0 Medium EPSS 2.3% KEV · Not listed
Description
The get_dataroot_image_path function in lib/file.php in Mahara before 1.4.1 does not properly validate uploaded image files, which allows remote attackers to cause a denial of service (memory consumption) via a (1) large or (2) invalid image.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-2334-1 mahara security update
EUVD EUVD EUVD-2011-2746 The get_dataroot_image_path function in lib/file.php in Mahara before 1.4.1 does not properly validate uploaded image files, which allows remote attackers to cause a denial of service (memory consumption) via a (1) large or (2) invalid image.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Sep 17, 2024, 3:18 AM
Reserved
Jul 19, 2011, 12:00 AM
Status
Modified
Published
Nov 15, 2011, 3:57 AM
Modified
Jun 16, 2026, 11:31 PM