GNU Enscript vulnerabilities

5 CVEs affecting GNU Enscript, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2008-3863, published 2008-10-23.

More from GNU.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2008-3863, published 2008-10-23. High severity, CVSS 7.6. EPSS: 8.4% chance of exploitation in the next 30 days. Stack-based buffer overflow in the read_special_escape function in src/psgen.c in GNU Enscript 1.6.1 and 1.6.4 beta, when the -e (aka special escapes processing) option is enabled, allows…
• CVE-2004-1185, published 2005-01-21. High severity, CVSS 7.5. EPSS: 4.4% chance of exploitation in the next 30 days. Enscript 1.6.3 does not sanitize filenames, which allows remote attackers or local users to execute arbitrary commands via crafted filenames.
• CVE-2004-1186, published 2004-12-31. Medium severity, CVSS 5.0. EPSS: 4% chance of exploitation in the next 30 days. Multiple buffer overflows in enscript 1.6.3 allow remote attackers or local users to cause a denial of service (application crash).
• CVE-2004-1184, published 2005-01-21. Medium severity, CVSS 4.6. EPSS: 1.2% chance of exploitation in the next 30 days. The EPSF pipe support in enscript 1.6.3 allows remote attackers or local users to execute arbitrary commands via shell metacharacters.
• CVE-2002-0044, published 2002-01-31. Low severity, CVSS 3.6. EPSS: 0.4% chance of exploitation in the next 30 days. GNU Enscript 1.6.1 and earlier allows local users to overwrite arbitrary files of the Enscript user via a symlink attack on temporary files.