Oval Definition:oval:com.ubuntu.bionic:def:201416100000000
Revision Date:2014-01-30Version:1
Title:CVE-2014-1610 on Ubuntu 18.04 LTS (bionic) - medium.
Description:MediaWiki 1.22.x before 1.22.2, 1.21.x before 1.21.5, and 1.19.x before 1.19.11, when DjVu or PDF file upload support is enabled, allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the page parameter to includes/media/DjVu.php; (2) the w parameter (aka width field) to thumb.php, which is not properly handled by includes/media/PdfHandler_body.php; and possibly unspecified vectors in (3) includes/media/Bitmap.php and (4) includes/media/ImageHandler.php.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2014-1610
Platform(s):Ubuntu 18.04 LTS
Product(s):
Definition Synopsis
  • Ubuntu 18.04 LTS (bionic) is installed.
  • AND mediawiki package in bionic, is related to the CVE in some way and has been fixed (note: '1.22.2').
    • BACK