Description
The Image module in Drupal 7.x before 7.20 allows remote attackers to cause a denial of service (CPU and disk space consumption) via a large number of new derivative requests.
Remediation
References
Related Vulnerabilities
Oracle Application Server Improper Authentication Vulnerability (CVE-2002-0563)
WordPress Plugin Download Plugin Arbitrary Directory Download (1.0.1)
WordPress Plugin WP-Filebase Download Manager Remote Code Execution (0.3.0.03)
Drupal Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-5267)
WordPress Plugin Drag and Drop Multiple File Upload-Contact Form 7 Cross-Site Scripting (1.3.6.2)