Type confusion exists in _cancel_eval Rubys TclTkIp class method. Attacker passing different type of object than String as retval argument can cause arbitrary code execution.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Ruby | Ruby-lang | 2.2.2 (including) | 2.2.2 (including) |
| Ruby | Ruby-lang | 2.3.0 (including) | 2.3.0 (including) |
| Ruby1.8 | Ubuntu | precise | * |
| Ruby1.9.1 | Ubuntu | precise | * |
| Ruby1.9.1 | Ubuntu | trusty | * |
| Ruby2.0 | Ubuntu | trusty | * |