Drupal Core 'getimagesize()' Information Disclosure Vulnerability

Bugtraq ID:	57108
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Jan 03 2013 12:00AM
Updated:	Jan 03 2013 12:00AM
Credit:	KedAns-Dz
Vulnerable:	Drupal Drupal 7.6 Drupal Drupal 7.5 Drupal Drupal 7.4 Drupal Drupal 7.3 Drupal Drupal 7.2 Drupal Drupal 7.14 Drupal Drupal 7.13 Drupal Drupal 7.12 Drupal Drupal 7.11 Drupal Drupal 7.10 Drupal Drupal 7.1 Drupal Drupal 7.0 Drupal Drupal 6.x-1.12 Drupal Drupal 6.X Drupal Drupal 6.9 Drupal Drupal 6.8 Drupal Drupal 6.7 Drupal Drupal 6.6 Drupal Drupal 6.5 Drupal Drupal 6.4 Drupal Drupal 6.3 Drupal Drupal 6.23 Drupal Drupal 6.22 Drupal Drupal 6.22 Drupal Drupal 6.21 Drupal Drupal 6.21 Drupal Drupal 6.2 Drupal Drupal 6.18 Drupal Drupal 6.17 Drupal Drupal 6.16 Drupal Drupal 6.15 Drupal Drupal 6.15 Drupal Drupal 6.14 Drupal Drupal 6.13 Drupal Drupal 6.12 Drupal Drupal 6.11 Drupal Drupal 6.10 Drupal Drupal 6.1 Drupal Drupal 6.0 Dev Drupal Drupal 6.0
Not Vulnerable:

Drupal Core 'getimagesize()' Information Disclosure Vulnerability

Drupal is prone to an information-disclosure vulnerability.

Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks.

Drupal Core 'getimagesize()' Information Disclosure Vulnerability

Attackers can use a browser to exploit this issue.

Drupal Core 'getimagesize()' Information Disclosure Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

Drupal Core 'getimagesize()' Information Disclosure Vulnerability

References:

• Drupal Homepage (Drupal)