Description
An issue was discovered in RubyGems 2.6 and later through 3.0.2. A crafted gem with a multi-line name is not handled correctly. Therefore, an attacker could inject arbitrary code to the stub line of gemspec, which is eval-ed by code in ensure_loadable_spec during the preinstall check.
Remediation
References
Related Vulnerabilities
WordPress Plugin Arigato Autoresponder and Newsletter Remote Code Execution (2.5.1.9)
PHP Improper Access Control Vulnerability (CVE-2015-8838)
WordPress Plugin WP Dynamic Keywords Injector Cross-Site Request Forgery (2.3.15)
Jboss EAP Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2014-0248)