Critical severity9.8NVD Advisory· Published Mar 3, 2017· Updated Jun 17, 2026
CVE-2016-10194
CVE-2016-10194
Description
The festivaltts4r gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a string to the (1) to_speech or (2) to_mp3 method in lib/festivaltts4r/festival4r.rb.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
festivaltts4rRubyGems | <= 0.2.0 | — |
Affected products
2- cpe:2.3:a:festivaltts4r_project:festivaltts4r:*:*:*:*:*:ruby:*:*
Patches
Vulnerability mechanics
References
5- www.openwall.com/lists/oss-security/2017/01/31/14nvdMailing ListPatchThird Party AdvisoryWEB
- www.openwall.com/lists/oss-security/2017/02/02/5nvdMailing ListPatchThird Party AdvisoryWEB
- github.com/spejman/festivaltts4r/issues/1nvdIssue TrackingPatchThird Party AdvisoryWEB
- github.com/advisories/GHSA-f7f4-5w9j-23p2ghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2016-10194ghsaADVISORY
News mentions
0No linked articles in our index yet.