Published: 19/12/2008 Updated: 29/09/2017

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

VMScore: 605

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Multiple buffer overflows in the (1) recognize_eps_file function (src/psgen.c) and (2) tilde_subst function (src/util.c) in GNU enscript 1.6.1, and possibly earlier, might allow remote malicious users to execute arbitrary code via an epsf escape sequence with a long filename.

Vulnerable Product	Search on Vulmon	Subscribe to Product
gnu escript 1.6.1

Synopsis Moderate: enscript security update Type/Severity Security Advisory: Moderate Topic An updated enscript packages that fixes several security issues is nowavailable for Red Hat Enterprise Linux 21, 3, and 4This update has been rated as having moderate security impact by the RedHat Security Response ...

CWE-119 https://bugzilla.redhat.com/show_bug.cgi?id=473958 http://secunia.com/advisories/33181 http://www.redhat.com/support/errata/RHSA-2008-1021.html http://www.securitytracker.com/id?1021401 http://support.avaya.com/elmodocs2/security/ASA-2008-504.htm http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00000.html https://exchange.xforce.ibmcloud.com/vulnerabilities/47680 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11807 https://access.redhat.com/errata/RHSA-2008:1021 https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2008-5078

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect