Security Advisory

CVE-2015-7541

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2016-01-08 21:00:00
Last updated 2024-08-06 07:51:28
Assigner redhat
CVSS score not scored
State PUBLISHED

Description

The initialize method in the Histogram class in lib/colorscore/histogram.rb in the colorscore gem before 0.0.5 for Ruby allows context-dependent attackers to execute arbitrary code via shell metacharacters in the (1) image_path, (2) colors, or (3) depth variable.