CVE-2012-4481

The safe-level feature in Ruby 1.8.7 allows context-dependent attackers to modify strings via the NameError#to_s method when operating on… (CVE-2012-4481)

Description

The safe-level feature in Ruby 1.8.7 allows context-dependent attackers to modify strings via the NameError#to_s method when operating on Ruby objects. NOTE: this issue is due to an incomplete fix for CVE-2011-1005.

Source: CVELISTV5 NVD

Metrics

Severity

none

47.29

—

no public PoC known

—

—

—

78.9 %

High — this CVE ranks above the median of all CVEs scored today (rank ≥ 36%).

EPSS score

1.9 %

Moderate — model estimates 1-10% exploitation likelihood.

Published

2013-05-02 14:00 UTC

CWE

—

Affected products

Products and version ranges extracted from the vendor/CERT advisory. A range like „<4.14.6“ implies the update recommendation „upgrade to 4.14.6 or later“.

ruby-lang
ruby

References & sources

http://rhn.redhat.com/errata/RHSA-2013-0612.html
vendor-advisoryx_refsource_REDHAT
http://www.openwall.com/lists/oss-security/2012/10/05/4
mailing-listx_refsource_MLIST
http://www.mandriva.com/security/advisories?name=MDVSA-2013:124
vendor-advisoryx_refsource_MANDRIVA
http://rhn.redhat.com/errata/RHSA-2013-0129.html
vendor-advisoryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=863484
x_refsource_CONFIRM
https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0294
x_refsource_CONFIRM

IDCVE-2012-4481