ADVISORIES

• OSVDB-106954
• Vendor Advisory

GEM

quick_magick

PATCHED VERSIONS

None.

DESCRIPTION

quick_magick Gem for Ruby contains a flaw in the QuickMagick::Image.read function. The issue is triggered when handling a specially crafted string. This may allow a remote attacker to inject arbitrary commands.

RELATED

• https://security.snyk.io/vuln/SNYK-RUBY-QUICKMAGICK-20012
• http://osvdb.org/show/osvdb/106954