ADVISORIES

• OSVDB-107783
• Vendor Advisory

GEM

screen_capture

PATCHED VERSIONS

None.

DESCRIPTION

Screen Capture Gem for Ruby contains a flaw in screen_capture.rb that is triggered when handling input passed via the URL. This may allow a context-dependent attacker to execute arbitrary commands.

RELATED

• https://github.com/jamster/screen_capture/blob/master/lib/screen_capture.rb
• http://osvdb.org/show/osvdb/107783