CVE

Id
87704  
CVE No.
CVE-2016-10194  
Status
Candidate  
Description
The festivaltts4r gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a string to the (1) to_speech or (2) to_mp3 method in lib/festivaltts4r/festival4r.rb.  
Phase
Assigned (20170201)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
764861 87704 CVE-2016-10194 MLIST:[oss-security] 20170131 CVE requests: code injection in rubygem espeak-ruby and code injection in rubygem festivaltts4r  View
764862 87704 CVE-2016-10194 URL:http://www.openwall.com/lists/oss-security/2017/01/31/14  View
764863 87704 CVE-2016-10194 MLIST:[oss-security] 20170202 Re: CVE requests: code injection in rubygem espeak-ruby and code injection in rubygem festivaltts4r  View
764864 87704 CVE-2016-10194 URL:http://www.openwall.com/lists/oss-security/2017/02/02/5  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
48 JVNDB-2016-000050 スマートフォンアプリ「Photopt」における SSL サーバ証明書の検証不備の脆弱性 エヌ・ティ・ティ・コミュニケーションズ株式会社が提供するスマートフォンアプリ「Photopt」には、SSL サーバ証明書の検証不備の脆弱性が存在します。 CVE-2016-1198 87704 4 4.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-000050.html  View