← CVE Intelligence

CVE-2016-2336

Ruby / Ruby PUBLISHED

Description (CNA)

Type confusion exists in two methods of Ruby's WIN32OLE class, ole_invoke and ole_query_interface. Attacker passing different type of object than this assumed by developers can cause arbitrary code execution.

Affected (CNA)

Vendor / productVersions
Ruby / Rubyaffected 2.3.0 dev; affected 2.2.2

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.