CVE-2018-1000201

ruby-ffi version 1.9.23 and earlier has a DLL loading issue which can be hijacked on Windows OS, when a Symbol is used as DLL name instead of a String This…

published June 22, 2018

CVSS
—
EPSS
1%
Percentile
71.3
In the wild
Unconfirmed
What it is

ruby-ffi version 1.9.23 and earlier has a DLL loading issue which can be hijacked on Windows OS, when a Symbol is used as DLL name instead of a String This vulnerability appears to have been fixed in v1.9.24 and later.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01351 · 71.3th percentile
Published
2018-06-22T18:00Z
EPSS history
Timeline
  • 22 JUN 18:00Z
    ruby-ffi version 1.9.23 and earlier has a DLL loading issue which can be hijacked on Windows OS, when a Symbol is used as DLL name instead of a String This…
    cvelistv5