CVE-2016-10194 | BDVDB-2026-82267 Detail

Description#

The festivaltts4r gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a string to the (1) to_speech or (2) to_mp3 method in lib/festivaltts4r/festival4r.rb.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.openwall.com/lists/oss-security/2017/02/02/5
http://www.openwall.com/lists/oss-security/2017/01/31/14
https://github.com/spejman/festivaltts4r/issues/1

Exploit#

No public exploit known

History#

Version 12017-03-03Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.