CVE-2013-1911: Input Validation
lib/ldoce/word.rb in the ldoce 0.0.2 gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in (1) an mp3 URL or (2) file name.
Other sources
lib/ldoce/word.rb in the ldoce 0.0.2 gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in (1) an mp3 URL or (2) file name.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-1911?
CVE-2013-1911 is considered critical due to its potential to allow remote command execution.
How do I fix CVE-2013-1911?
To fix CVE-2013-1911, update the ldoce gem to a version greater than 0.0.2.
What software is affected by CVE-2013-1911?
CVE-2013-1911 affects the ldoce gem version 0.0.2 for Ruby.
Can CVE-2013-1911 lead to data breaches?
Yes, CVE-2013-1911 can lead to data breaches as it allows attackers to execute arbitrary commands.
How can I mitigate the risks associated with CVE-2013-1911?
To mitigate risks, avoid using the vulnerable version of the ldoce gem and implement input validation to sanitize URLs and filenames.