Type confusion exists in _cancel_eval Rubys TclTkIp class method. Attacker passing different type of object than String as retval argument can cause arbitrary code execution.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Ruby | Ruby-lang | 2.2.2 (including) | 2.2.2 (including) |
Ruby | Ruby-lang | 2.3.0 (including) | 2.3.0 (including) |