CVE-2015-7541

2016-01-0821:00:00

redhat

www.cve.org

9.8 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

79.4%

JSON

The initialize method in the Histogram class in lib/colorscore/histogram.rb in the colorscore gem before 0.0.5 for Ruby allows context-dependent attackers to execute arbitrary code via shell metacharacters in the (1) image_path, (2) colors, or (3) depth variable.