CVE-2013-1911

lib/ldoce/word.rb in the ldoce 0.0.2 gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in (1) an mp3 URL or (2) file name.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6.8 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P
redhatCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 60%
VendorProductVersion
mark_burnsldoce
0.0.2
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://archives.neohapsis.com/archives/bugtraq/2013-04/0010.html
http://osvdb.org/91870
http://otiose.dhs.org/advisories/ldoce-0.0.2-cmd-exec.html
http://www.openwall.com/lists/oss-security/2013/03/31/3
http://www.securityfocus.com/bid/58783
https://exchange.xforce.ibmcloud.com/vulnerabilities/83163
http://archives.neohapsis.com/archives/bugtraq/2013-04/0010.html
http://osvdb.org/91870
http://otiose.dhs.org/advisories/ldoce-0.0.2-cmd-exec.html
http://www.openwall.com/lists/oss-security/2013/03/31/3
http://www.securityfocus.com/bid/58783
https://exchange.xforce.ibmcloud.com/vulnerabilities/83163