Red Hat Security AdvisoryRHSA-2008:1016
enscript security update
Released 2008-12-15 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) enscript-1.6.4-4.1.1.el5_2, enscript-1.6.4-4.1.1.el5_2.i386, enscript-1.6.4-4.1.1.el5_2.ia64 +1
- Red Hat Enterprise Linux Desktop (v. 5 client) enscript-1.6.4-4.1.1.el5_2, enscript-1.6.4-4.1.1.el5_2.i386
Fixes 2 records
Priority MEDIUM 45
Buffer overflow in enscript before 1.6.4 has unknown impact and attack vectors, possibly related to the font escape sequence.
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.02436 · Published 2008-11-04 · Fixed CWE-119
Priority MEDIUM 44
Stack-based buffer overflow in the read_special_escape function in src/psgen.c in GNU Enscript 1.6.1 and 1.6.4 beta, when the -e (aka special escapes processing) option is enabled, allows user-assisted remote attackers t…
CVSS 2.0HIGH 7.6· Network · No auth · Interaction — · EPSS 0.08358 · Published 2008-10-23 · Fixed CWE-119
