CVE-2013-1933

The CVE-2013-1933 issue affects the Karteek Docsplit Ruby gem (version 0.5.4). The root cause is inadequate sanitization in extract_from_ocr (text_extractor.rb), allowing a context-dependent attacker to inject shell metacharacters via a PDF filename and execute arbitrary commands on the affected ...