CVE-2008-5078 Multiple buffer overflows in the (1) recognize_eps_file function (src/psgen.c) and (2) tilde_subst function (src/util.c) in GNU enscript 1.6.1, and possibly earlier, might allow remote attackers to ex...
MediumCVSS 6.8
EPSS 3.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple buffer overflows in the (1) recognize_eps_file function (src/psgen.c) and (2) tilde_subst function (src/util.c) in GNU enscript 1.6.1, and possibly earlier, might allow remote attackers to execute arbitrary code via an epsf escape sequence with a long filename.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| GNU escript | = 1.6.1 | No fix listed |
| debian/enscript(Debian:12) | < 1.6.4-13 | 1.6.4-13 |
| debian/enscript(Debian:13) | < 1.6.4-13 | 1.6.4-13 |
| debian/enscript(Debian:14) | < 1.6.4-13 | 1.6.4-13 |
References
- SUSE-SR:2009:005 vendor-advisory
- 33181 third-party-advisory vendor-advisory
- support.avaya.com
- RHSA-2008:1021 vendor-advisory
- 1021401 vdb-entry
- bugzilla.redhat.com
- enscript-recognize-tilde-bo(47680) vdb-entry
- oval:org.mitre.oval:def:11807 signature vdb-entry
- Debian Security Tracker CVE-2008-5078 vendor-advisory
- bugs.debian.org issue-tracking