CVE-2016-10194

CVE-2016-10194 affects the Ruby gem festivaltts4r. The vulnerability arises in the library code lib/festivaltts4r/festival4r.rb, where remote attackers can cause arbitrary command execution by injecting shell metacharacters into strings passed to the to_speech or to_mp3 methods. This is a shell c...

CVE-2016-10194

The festivaltts4r gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a string to the 1 tospeech or 2 tomp3 method in lib/festivaltts4r/festival4r.rb...