CVE-2014-0082

CVE-2014-0082 describes a denial-of-service vulnerability in Action View in Ruby on Rails 3.x before version 3.2.17. Attackers can exploit this by sending specially crafted MIME type strings in headers, causing excessive memory consumption when the application attempts to convert these strings to symbols during the rendering process. The vulnerability has a CVSS score of 5.0, indicating a medium severity, and allows for a low-complexity attack without authentication, leading to partial availability impact. There is no evidence of active exploitation, no known public exploit code (Metasploit, Nuclei, ExploitDB), and minimal community discussion or media coverage surrounding this CVE.