ADVISORIES
- OSVDB-106954
- Vendor Advisory
GEM
PATCHED VERSIONS
None.
DESCRIPTION
quick_magick Gem for Ruby contains a flaw in the QuickMagick::Image.read function. The issue is triggered when handling a specially crafted string. This may allow a remote attacker to inject arbitrary commands.