CVE-2015-7541

State: Published
Severity: Not scored
Published: Jan 8, 2016
Updated: Aug 6, 2024
Reserved: Sep 29, 2015

Description

The initialize method in the Histogram class in lib/colorscore/histogram.rb in the colorscore gem before 0.0.5 for Ruby allows context-dependent attackers to execute arbitrary code via shell metacharacters in the (1) image_path, (2) colors, or (3) depth variable.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

http://rubysec.com/advisories/CVE-2015-7541/
[oss-security] 20160104 Remote Command Injection in Ruby Gem colorscore <=0.0.4mailing-list
https://github.com/quadule/colorscore/commit/570b5e854cecddd44d2047c44126aed951b61718

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.