CVE Vulnerabilities

CVE-2012-1588

Published: Oct 01, 2012 | Modified: Dec 13, 2013
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
3.5 LOW
AV:N/AC:M/Au:S/C:N/I:N/A:P
RedHat/V2
RedHat/V3
Ubuntu

Algorithmic complexity vulnerability in the _filter_url function in the text filtering system (modules/filter/filter.module) in Drupal 7.x before 7.14 allows remote authenticated users with certain roles to cause a denial of service (CPU consumption) via a long email address.

Affected Software

Name Vendor Start Version End Version
Drupal Drupal 7.0 (including) 7.0 (including)
Drupal Drupal 7.0-alpha1 (including) 7.0-alpha1 (including)
Drupal Drupal 7.0-alpha2 (including) 7.0-alpha2 (including)
Drupal Drupal 7.0-alpha3 (including) 7.0-alpha3 (including)
Drupal Drupal 7.0-alpha4 (including) 7.0-alpha4 (including)
Drupal Drupal 7.0-alpha5 (including) 7.0-alpha5 (including)
Drupal Drupal 7.0-alpha6 (including) 7.0-alpha6 (including)
Drupal Drupal 7.0-alpha7 (including) 7.0-alpha7 (including)
Drupal Drupal 7.0-beta1 (including) 7.0-beta1 (including)
Drupal Drupal 7.0-beta2 (including) 7.0-beta2 (including)
Drupal Drupal 7.0-beta3 (including) 7.0-beta3 (including)
Drupal Drupal 7.0-dev (including) 7.0-dev (including)
Drupal Drupal 7.0-rc1 (including) 7.0-rc1 (including)
Drupal Drupal 7.0-rc2 (including) 7.0-rc2 (including)
Drupal Drupal 7.0-rc3 (including) 7.0-rc3 (including)
Drupal Drupal 7.0-rc4 (including) 7.0-rc4 (including)
Drupal Drupal 7.1 (including) 7.1 (including)
Drupal Drupal 7.2 (including) 7.2 (including)
Drupal Drupal 7.3 (including) 7.3 (including)
Drupal Drupal 7.4 (including) 7.4 (including)
Drupal Drupal 7.5 (including) 7.5 (including)
Drupal Drupal 7.6 (including) 7.6 (including)
Drupal Drupal 7.7 (including) 7.7 (including)
Drupal Drupal 7.8 (including) 7.8 (including)
Drupal Drupal 7.9 (including) 7.9 (including)
Drupal Drupal 7.10 (including) 7.10 (including)
Drupal Drupal 7.11 (including) 7.11 (including)
Drupal Drupal 7.12 (including) 7.12 (including)
Drupal Drupal 7.13 (including) 7.13 (including)
Drupal Drupal 7.x-dev (including) 7.x-dev (including)

References