The papercrop gem before 0.3.0 for Ruby on Rails does not properly handle crop input.
The papercrop gem before
Exploit
CVE-2015-2784
NVD
Refer to CVE-2015-2784 NVD advisory