--- 
gem: fileutils
osvdb: 90718
url: http://osvdb.org/show/osvdb/90718
title: fileutils Gem for Ruby /lib/file_utils/open_office.rb Character Handling Remote Command Execution
date: 2013-02-28
description: fileutils Gem for Ruby contains a flaw in /lib/file_utils/open_office.rb. The issue is triggered when handling a specially crafted URL containing a command after a delimiter (;). This may allow a remote attacker to potentially execute arbitrary commands.