Critical severity9.8NVD Advisory· Published Jan 6, 2017· Updated May 6, 2026
CVE-2016-2336
CVE-2016-2336
Description
Type confusion exists in two methods of Ruby's WIN32OLE class, ole_invoke and ole_query_interface. Attacker passing different type of object than this assumed by developers can cause arbitrary code execution.
Affected products
1- Ruby/Rubyv5Range: 2.3.0 dev
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- www.talosintelligence.com/reports/TALOS-2016-0029/nvdExploitTechnical DescriptionThird Party Advisory
News mentions
0No linked articles in our index yet.