Vulnerability in Wayneeseguin Ruby Version Manager

CVE-2010-3928

Ruby Version Manager (RVM) before 1.2.1 writes file contents to a terminal without sanitizing non-printable characters, which might allow remote attackers to execute arbitrary commands via a crafted file, related to an "escape sequence injection vulnerability." NOTE: some of these details are obtained from third party information.

EPSS: 0.018 (76.1th percentile) — read the EPSS interpretation.

Affected products

Wayneeseguin Ruby_version_manager
N/a — versions n/a

References

vultures@jpcert.or.jp (x_refsource_JVNDB, third-party-advisory)
vultures@jpcert.or.jp (vdb-entry, x_refsource_BID)
vultures@jpcert.or.jp (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
vultures@jpcert.or.jp (x_refsource_JVN, third-party-advisory)
vultures@jpcert.or.jp (vdb-entry, x_refsource_XF)
vultures@jpcert.or.jp (x_refsource_OSVDB, vdb-entry)
vultures@jpcert.or.jp (vdb-entry, x_refsource_VUPEN, Vendor Advisory)