GCVE - cpe:2.3:a:colorscore_project:colorscore:*:*:*:*:*:ruby:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:colorscore_project:colorscore:*:*:*:*:*:ruby:*:*

part: a version: * update: *

Vendor	Colorscore Project (`efead408-b838-56a4-b614-0d1c0f808cc2`)
Product	Colorscore (`37a6ced8-801e-52e0-b11f-33b70d6b88b6`)
Edition	*
Language	*
Software edition	*
Target software	ruby
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2015-7541`	vulnerable	2026-06-08 05:07:01.280543	Details available The initialize method in the Histogram class in lib/colorscore/histogram.rb in the colorscore gem before 0.0.5 for Ruby allows context-dependent attackers to execute arbitrary code via shell metacharacters in the (1) image_path, (2) colors, or (3) depth variable. Published: 2016-01-08T21:00:00.000Z Updated: 2024-08-06T07:51:28.452Z Open on db.gcve.eu Reference links http://rubysec.com/advisories/CVE-2015-7541/ http://www.openwall.com/lists/oss-security/2016/01/05/2 https://github.com/quadule/colorscore/commit/570b5e854cecddd44d2047c44126aed951b61718	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open this panel to browse, search, copy or download the JSON record.