CVE-2008-3863
Fixed in a distro release EPSS 8%
Stack-based buffer overflow in the read_special_escape function in src/psgen.c in GNU Enscript 1.6.1 and 1.6.4 beta, when the -e (aka special escapes processing) option is enabled, allows user-assisted remote attackers to execute arbitrary code via a crafted ASCII file, related to the setfilename command.
Products: gnu enscript
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | enscript | 1.6.4-13 |
| Debian 13 | enscript | 1.6.4-13 |
| Debian 14 | enscript | 1.6.4-13 |
| Debian 4.0 | enscript | 1.6.4-11.1 |
| Red Hat Enterprise Linux 2.1 | enscript | 0:1.6.1-16.7 |
| Red Hat Enterprise Linux 3 | enscript | 0:1.6.1-24.7 |
| Red Hat Enterprise Linux 3 | enscript-debuginfo | 0:1.6.1-24.7 |
| Red Hat Enterprise Linux 4 | enscript | 0:1.6.1-33.el4_7.1 |
| Red Hat Enterprise Linux 4 | enscript-debuginfo | 0:1.6.1-33.el4_7.1 |
| Red Hat Enterprise Linux 5 | enscript | 0:1.6.4-4.1.1.el5_2 |
| Red Hat Enterprise Linux 5 | enscript-debuginfo | 0:1.6.4-4.1.1.el5_2 |
| openSUSE Tumbleweed | enscript | 1.6.6-1.15 |