[wp-trac] [WordPress Trac] #11946: Ensure image MIME type matches extension

WordPress Trac wp-trac at lists.automattic.com
Wed Jan 20 22:32:03 UTC 2010


#11946: Ensure image MIME type matches extension
--------------------------+-------------------------------------------------
 Reporter:  Viper007Bond  |       Owner:                  
     Type:  defect (bug)  |      Status:  new             
 Priority:  lowest        |   Milestone:  2.9.2           
Component:  Upload        |     Version:  3.0             
 Severity:  minor         |    Keywords:  has-patch tested
--------------------------+-------------------------------------------------

Comment(by Viper007Bond):

 Replying to [comment:6 ShaneF]:
 > This is a potential security problem. Recommending 2.9.2 release fix.

 I can't think of a way to validate other extensions though, i.e. say a EXE
 uploaded as an AVI.

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/11946#comment:7>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list