Candidate: CVE-2012-0793 PublicDate: 2012-07-17 10:20:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0793 http://openwall.com/lists/oss-security/2012/01/20/22 Description: Moodle 1.9.x before 1.9.16, 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 allows remote attackers to view the profile images of arbitrary user accounts via unspecified vectors. Ubuntu-Description: Notes: Bugs: Priority: medium Discovered-by: Assigned-to: CVSS: Patches_moodle: upstream: http://git.moodle.org/gw?p=moodle.git;a=commit;h=90911c4ff98dc2078a3acef5ddf5a1a8f7e20ba5 upstream_moodle: released (1.9.16) hardy_moodle: ignored (reached end-of-life) lucid_moodle: ignored (reached end-of-life) maverick_moodle: ignored (reached end-of-life) natty_moodle: ignored (reached end-of-life) oneiric_moodle: ignored (reached end-of-life) precise_moodle: not-affected (1.9.9.dfsg2-6) quantal_moodle: not-affected (1.9.9.dfsg2-6) raring_moodle: not-affected (1.9.9.dfsg2-6) saucy_moodle: not-affected (1.9.9.dfsg2-6) devel_moodle: not-affected (1.9.9.dfsg2-6)