CVE-2013-1933

State: Published
Severity: Not scored
Published: Apr 25, 2013
Updated: Aug 6, 2024
Reserved: Feb 19, 2013

Description

The extract_from_ocr function in lib/docsplit/text_extractor.rb in the Karteek Docsplit (karteek-docsplit) gem 0.5.4 for Ruby allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a PDF filename.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

92117vdb-entry
http://vapid.dhs.org/advisories/karteek-docsplit-cmd-inject.html
karteekdocsplit-cve20131933-command-exec(83277)vdb-entry
[oss-security] 20130408 Re: Remote Command Injection Ruby Gem Karteek Docsplit 0.5.4mailing-list

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.