[Bug 1185483] CVE-2014-8630 Bugzilla: Command Injection into product names and other attributes