CVE-2016-10194

Name of the Vulnerable Software and Affected Versions festivaltts4r gem for Ruby (affected versions not specified)

Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in a string to the (1) to speech or (2) to mp3 method in lib/festivaltts4r/festival4r.rb. This can lead to unauthorized access and control of the system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.