certfr_avis - certfr-2014-avi-047

CERTFR-2014-AVI-047

Vulnerability from certfr_avis

Une vulnérabilité a été corrigée dans MediaWiki. Elle permet à un attaquant de provoquer une exécution de code arbitraire à distance.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

Vendor	Product	Description
Mediawiki	MediaWiki	MediaWiki versions antérieures à 1.21.5
Mediawiki	MediaWiki	MediaWiki versions antérieures à 1.19.11
Mediawiki	MediaWiki	MediaWiki versions antérieures à 1.22.2

References

Title

Publication Time

CVE-2014-1610 (GCVE-0-2014-1610)

Vulnerability from cvelistv5

Published

2014-01-30 23:00

Modified

2024-08-06 09:50

Severity ?

CWE

Summary

MediaWiki 1.22.x before 1.22.2, 1.21.x before 1.21.5, and 1.19.x before 1.19.11, when DjVu or PDF file upload support is enabled, allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the page parameter to includes/media/DjVu.php; (2) the w parameter (aka width field) to thumb.php, which is not properly handled by includes/media/PdfHandler_body.php; and possibly unspecified vectors in (3) includes/media/Bitmap.php and (4) includes/media/ImageHandler.php.

References

URL

Tags

	http://www.exploit-db.com/exploits/31329/	exploit, x_refsource_EXPLOIT-DB
	http://www.checkpoint.com/threatcloud-central/articles/2014-01-28-tc-researchers-discover.html	x_refsource_MISC
	http://www.checkpoint.com/defense/advisories/public/2014/cpai-26-jan.html	x_refsource_MISC
	https://bugzilla.wikimedia.org/show_bug.cgi?id=60339	x_refsource_CONFIRM
	http://secunia.com/advisories/57472	third-party-advisory, x_refsource_SECUNIA
	https://gerrit.wikimedia.org/r/#/c/110215/	x_refsource_MISC
	http://www.debian.org/security/2014/dsa-2891	vendor-advisory, x_refsource_DEBIAN
	http://lists.wikimedia.org/pipermail/mediawiki-announce/2014-January/000140.html	mailing-list, x_refsource_MLIST
	http://www.securitytracker.com/id/1029707	vdb-entry, x_refsource_SECTRACK
	http://www.securityfocus.com/bid/65223	vdb-entry, x_refsource_BID
	http://lists.fedoraproject.org/pipermail/package-announce/2014-February/127942.html	vendor-advisory, x_refsource_FEDORA
	https://gerrit.wikimedia.org/r/#/c/110069/2/includes/media/Bitmap.php	x_refsource_MISC
	http://www.osvdb.org/102631	vdb-entry, x_refsource_OSVDB
	https://bugzilla.wikimedia.org/attachment.cgi?id=14361&action=diff	x_refsource_MISC
	https://bugzilla.wikimedia.org/attachment.cgi?id=14384&action=diff	x_refsource_MISC
	http://secunia.com/advisories/56695	third-party-advisory, x_refsource_SECUNIA
	https://gerrit.wikimedia.org/r/#/c/110069/	x_refsource_MISC
	http://osvdb.org/102630	vdb-entry, x_refsource_OSVDB
	http://lists.fedoraproject.org/pipermail/package-announce/2014-February/127948.html	vendor-advisory, x_refsource_FEDORA

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T09:50:09.575Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "31329",
            "tags": [
              "exploit",
              "x_refsource_EXPLOIT-DB",
              "x_transferred"
            ],
            "url": "http://www.exploit-db.com/exploits/31329/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.checkpoint.com/threatcloud-central/articles/2014-01-28-tc-researchers-discover.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.checkpoint.com/defense/advisories/public/2014/cpai-26-jan.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.wikimedia.org/show_bug.cgi?id=60339"
          },
          {
            "name": "57472",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/57472"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://gerrit.wikimedia.org/r/#/c/110215/"
          },
          {
            "name": "DSA-2891",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-2891"
          },
          {
            "name": "[MediaWiki-announce] 20140128 MediaWiki Security Releases: 1.22.2, 1.21.5 and 1.19.11",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://lists.wikimedia.org/pipermail/mediawiki-announce/2014-January/000140.html"
          },
          {
            "name": "1029707",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1029707"
          },
          {
            "name": "65223",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/65223"
          },
          {
            "name": "FEDORA-2014-1802",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2014-February/127942.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://gerrit.wikimedia.org/r/#/c/110069/2/includes/media/Bitmap.php"
          },
          {
            "name": "102631",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/102631"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.wikimedia.org/attachment.cgi?id=14361\u0026action=diff"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.wikimedia.org/attachment.cgi?id=14384\u0026action=diff"
          },
          {
            "name": "56695",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/56695"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://gerrit.wikimedia.org/r/#/c/110069/"
          },
          {
            "name": "102630",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/102630"
          },
          {
            "name": "FEDORA-2014-1745",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2014-February/127948.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-01-28T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "MediaWiki 1.22.x before 1.22.2, 1.21.x before 1.21.5, and 1.19.x before 1.19.11, when DjVu or PDF file upload support is enabled, allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the page parameter to includes/media/DjVu.php; (2) the w parameter (aka width field) to thumb.php, which is not properly handled by includes/media/PdfHandler_body.php; and possibly unspecified vectors in (3) includes/media/Bitmap.php and (4) includes/media/ImageHandler.php."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-11-16T20:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "31329",
          "tags": [
            "exploit",
            "x_refsource_EXPLOIT-DB"
          ],
          "url": "http://www.exploit-db.com/exploits/31329/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.checkpoint.com/threatcloud-central/articles/2014-01-28-tc-researchers-discover.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.checkpoint.com/defense/advisories/public/2014/cpai-26-jan.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.wikimedia.org/show_bug.cgi?id=60339"
        },
        {
          "name": "57472",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/57472"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://gerrit.wikimedia.org/r/#/c/110215/"
        },
        {
          "name": "DSA-2891",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-2891"
        },
        {
          "name": "[MediaWiki-announce] 20140128 MediaWiki Security Releases: 1.22.2, 1.21.5 and 1.19.11",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://lists.wikimedia.org/pipermail/mediawiki-announce/2014-January/000140.html"
        },
        {
          "name": "1029707",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1029707"
        },
        {
          "name": "65223",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/65223"
        },
        {
          "name": "FEDORA-2014-1802",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2014-February/127942.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://gerrit.wikimedia.org/r/#/c/110069/2/includes/media/Bitmap.php"
        },
        {
          "name": "102631",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/102631"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.wikimedia.org/attachment.cgi?id=14361\u0026action=diff"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.wikimedia.org/attachment.cgi?id=14384\u0026action=diff"
        },
        {
          "name": "56695",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/56695"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://gerrit.wikimedia.org/r/#/c/110069/"
        },
        {
          "name": "102630",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/102630"
        },
        {
          "name": "FEDORA-2014-1745",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2014-February/127948.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2014-1610",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "MediaWiki 1.22.x before 1.22.2, 1.21.x before 1.21.5, and 1.19.x before 1.19.11, when DjVu or PDF file upload support is enabled, allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the page parameter to includes/media/DjVu.php; (2) the w parameter (aka width field) to thumb.php, which is not properly handled by includes/media/PdfHandler_body.php; and possibly unspecified vectors in (3) includes/media/Bitmap.php and (4) includes/media/ImageHandler.php."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "31329",
              "refsource": "EXPLOIT-DB",
              "url": "http://www.exploit-db.com/exploits/31329/"
            },
            {
              "name": "http://www.checkpoint.com/threatcloud-central/articles/2014-01-28-tc-researchers-discover.html",
              "refsource": "MISC",
              "url": "http://www.checkpoint.com/threatcloud-central/articles/2014-01-28-tc-researchers-discover.html"
            },
            {
              "name": "http://www.checkpoint.com/defense/advisories/public/2014/cpai-26-jan.html",
              "refsource": "MISC",
              "url": "http://www.checkpoint.com/defense/advisories/public/2014/cpai-26-jan.html"
            },
            {
              "name": "https://bugzilla.wikimedia.org/show_bug.cgi?id=60339",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.wikimedia.org/show_bug.cgi?id=60339"
            },
            {
              "name": "57472",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/57472"
            },
            {
              "name": "https://gerrit.wikimedia.org/r/#/c/110215/",
              "refsource": "MISC",
              "url": "https://gerrit.wikimedia.org/r/#/c/110215/"
            },
            {
              "name": "DSA-2891",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2014/dsa-2891"
            },
            {
              "name": "[MediaWiki-announce] 20140128 MediaWiki Security Releases: 1.22.2, 1.21.5 and 1.19.11",
              "refsource": "MLIST",
              "url": "http://lists.wikimedia.org/pipermail/mediawiki-announce/2014-January/000140.html"
            },
            {
              "name": "1029707",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1029707"
            },
            {
              "name": "65223",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/65223"
            },
            {
              "name": "FEDORA-2014-1802",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2014-February/127942.html"
            },
            {
              "name": "https://gerrit.wikimedia.org/r/#/c/110069/2/includes/media/Bitmap.php",
              "refsource": "MISC",
              "url": "https://gerrit.wikimedia.org/r/#/c/110069/2/includes/media/Bitmap.php"
            },
            {
              "name": "102631",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/102631"
            },
            {
              "name": "https://bugzilla.wikimedia.org/attachment.cgi?id=14361\u0026action=diff",
              "refsource": "MISC",
              "url": "https://bugzilla.wikimedia.org/attachment.cgi?id=14361\u0026action=diff"
            },
            {
              "name": "https://bugzilla.wikimedia.org/attachment.cgi?id=14384\u0026action=diff",
              "refsource": "MISC",
              "url": "https://bugzilla.wikimedia.org/attachment.cgi?id=14384\u0026action=diff"
            },
            {
              "name": "56695",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/56695"
            },
            {
              "name": "https://gerrit.wikimedia.org/r/#/c/110069/",
              "refsource": "MISC",
              "url": "https://gerrit.wikimedia.org/r/#/c/110069/"
            },
            {
              "name": "102630",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/102630"
            },
            {
              "name": "FEDORA-2014-1745",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2014-February/127948.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2014-1610",
    "datePublished": "2014-01-30T23:00:00",
    "dateReserved": "2014-01-19T00:00:00",
    "dateUpdated": "2024-08-06T09:50:09.575Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted