CVE-2016-10194 festivaltts4r allows arbitrary command execution
CriticalCVSS 9.8
EPSS 2.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The festivaltts4r gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a string to the (1) to_speech or (2) to_mp3 method in lib/festivaltts4r/festival4r.rb.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rubygems festivaltts4r(RubyGems) | <= 0.2.0 | No fix listed |
| rubygems festivaltts4r(RubyGems) | = 0.1.0 | No fix listed |
| rubygems festivaltts4r(RubyGems) | = 0.1.1 | No fix listed |
| rubygems festivaltts4r(RubyGems) | = 0.2.0 | No fix listed |
| festivaltts4r project festivaltts4r | All versions | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com issue-tracking patch third-party-advisory
- [oss-security] 20170131 CVE requests: code injection in rubygem espeak-ruby and code injection in rubygem festivaltts4r mailing-list patch third-party-advisory
- [oss-security] 20170202 Re: CVE requests: code injection in rubygem espeak-ruby and code injection in rubygem festivaltts4r mailing-list patch third-party-advisory
- github.com
- github.com product