Enscript (Gnu) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 14 known versions, newest CVE from 2008-10-23. Vendor: Gnu.

CVEs of Enscript

• CVE-2008-3863 - CVSS 7.6 (high), 2008-10-23: Stack-based buffer overflow in the read_special_escape function in src/psgen.c in GNU Enscript 1.6.1 and 1.6.4 beta, when the -e (aka special escapes…
• CVE-2004-1185 - CVSS 7.5 (high), 2005-01-21: Enscript 1.6.3 does not sanitize filenames, which allows remote attackers or local users to execute arbitrary commands via crafted filenames.
• CVE-2004-1184 - CVSS 4.6 (medium), 2005-01-21: The EPSF pipe support in enscript 1.6.3 allows remote attackers or local users to execute arbitrary commands via shell metacharacters.
• CVE-2004-1186 - CVSS 5 (medium), 2004-12-31: Multiple buffer overflows in enscript 1.6.3 allow remote attackers or local users to cause a denial of service (application crash).
• CVE-2002-0044 - CVSS 3.6 (low), 2002-01-31: GNU Enscript 1.6.1 and earlier allows local users to overwrite arbitrary files of the Enscript user via a symlink attack on temporary files.