CVE-2013-1933

Name of the Vulnerable Software and Affected Versions Karteek Docsplit (karteek-docsplit) gem version 0.5.4

Description The issue allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a PDF filename. This is due to a problem in the extract from ocr function in lib/docsplit/text extractor.rb.

Recommendations For Karteek Docsplit (karteek-docsplit) gem version 0.5.4, consider disabling the extract from ocr function until a patch is available to prevent the execution of arbitrary commands via shell metacharacters in PDF filenames.