CVE ID:	CVE-2014-1610
Description:	MediaWiki 1.22.x before 1.22.2, 1.21.x before 1.21.5, and 1.19.x before 1.19.11, when DjVu or PDF file upload support is enabled, allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the page parameter to includes/media/DjVu.php; (2) the w parameter (aka width field) to thumb.php, which is not properly handled by includes/media/PdfHandler_body.php; and possibly unspecified vectors in (3) includes/media/Bitmap.php and (4) includes/media/ImageHandler.php.
Test IDs:	1.3.6.1.4.1.25623.1.0.702891
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2014-1610 BugTraq ID: 65223 http://www.securityfocus.com/bid/65223 Debian Security Information: DSA-2891 (Google Search) http://www.debian.org/security/2014/dsa-2891 http://www.exploit-db.com/exploits/31329/ http://lists.fedoraproject.org/pipermail/package-announce/2014-February/127948.html http://lists.fedoraproject.org/pipermail/package-announce/2014-February/127942.html http://www.checkpoint.com/defense/advisories/public/2014/cpai-26-jan.html http://www.checkpoint.com/threatcloud-central/articles/2014-01-28-tc-researchers-discover.html https://bugzilla.wikimedia.org/attachment.cgi?id=14361&action=diff https://bugzilla.wikimedia.org/attachment.cgi?id=14384&action=diff https://gerrit.wikimedia.org/r/#/c/110069/ https://gerrit.wikimedia.org/r/#/c/110069/2/includes/media/Bitmap.php https://gerrit.wikimedia.org/r/#/c/110215/ http://lists.wikimedia.org/pipermail/mediawiki-announce/2014-January/000140.html http://osvdb.org/102630 http://www.osvdb.org/102631 http://www.securitytracker.com/id/1029707 http://secunia.com/advisories/56695 http://secunia.com/advisories/57472