Screen Capture Gem for Ruby screen_capture.rb URL Handling Arbitrary Command Execution
Published: June 07, 2014
SECURITY IDENTIFIERS
- OSVDB: OSVDB-107783
- Vendor Advisory: https://github.com/jamster/screen_capture/blob/master/lib/screen_capture.rb
GEM
PATCHED VERSIONS
None available.
DESCRIPTION
Screen Capture Gem for Ruby contains a flaw in screen_capture.rb that is triggered when handling input passed via the URL. This may allow a context-dependent attacker to execute arbitrary commands.