CVE-2008-3863: GNU Enscript

High severity, CVSS 7.6. EPSS: 8.4% chance of exploitation in the next 30 days.

Stack-based buffer overflow in the read_special_escape function in src/psgen.c in GNU Enscript 1.6.1 and 1.6.4 beta, when the -e (aka special escapes processing) option is enabled, allows user-assisted remote attackers to execute arbitrary code via a crafted ASCII file, related to the setfilename command.

Affected products

• GNU Enscript: version 1.6.1 only; version 1.6.4 only

Published 2008-10-23. Last modified 2026-06-16.