CVE-2008-3863

Published: Oct 23, 2008Modified: Apr 23, 2026

7.6

Vector

AV:N/AC:H/Au:N/C:C/I:C/A:C

Exploitability: 4.9 / Impact: 10.0

Source: NVD

Description

Stack-based buffer overflow in the read_special_escape function in src/psgen.c in GNU Enscript 1.6.1 and 1.6.4 beta, when the -e (aka special escapes processing) option is enabled, allows user-assisted remote attackers to execute arbitrary code via a crafted ASCII file, related to the setfilename command.

Affected (2)

Products: Gnu: Enscript

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Gnu Enscript	Version 1.6.1
Gnu Enscript	Version 1.6.4 beta

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (64)

http://lists.apple.com/archives/security-announce/2009/May/msg00002.html

Source: PSIRT-CNA@flexerasoftware.com

http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00000.html

Source: PSIRT-CNA@flexerasoftware.com

http://rhn.redhat.com/errata/RHSA-2008-1021.html

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/advisories/32137

Source: PSIRT-CNA@flexerasoftware.com

Vendor Advisory

http://secunia.com/advisories/32521

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/advisories/32530

Source: PSIRT-CNA@flexerasoftware.com

Vendor Advisory

http://secunia.com/advisories/32753

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/advisories/32854

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/advisories/32970

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/advisories/33109

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/advisories/35074

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/secunia_research/2008-41/

Source: PSIRT-CNA@flexerasoftware.com

Vendor Advisory

http://security.gentoo.org/glsa/glsa-200812-02.xml

Source: PSIRT-CNA@flexerasoftware.com

http://securityreason.com/securityalert/4488

Source: PSIRT-CNA@flexerasoftware.com

http://support.apple.com/kb/HT3549

Source: PSIRT-CNA@flexerasoftware.com

http://support.avaya.com/elmodocs2/security/ASA-2008-504.htm

Source: PSIRT-CNA@flexerasoftware.com

http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0321

Source: PSIRT-CNA@flexerasoftware.com

http://www.debian.org/security/2008/dsa-1670

Source: PSIRT-CNA@flexerasoftware.com

http://www.mandriva.com/security/advisories?name=MDVSA-2008:243

Source: PSIRT-CNA@flexerasoftware.com

http://www.redhat.com/support/errata/RHSA-2008-1016.html

Source: PSIRT-CNA@flexerasoftware.com

http://www.securityfocus.com/archive/1/497647/100/0/threaded

Source: PSIRT-CNA@flexerasoftware.com

http://www.securityfocus.com/archive/1/498385/100/0/threaded

Source: PSIRT-CNA@flexerasoftware.com

http://www.securityfocus.com/bid/31858

Source: PSIRT-CNA@flexerasoftware.com

http://www.ubuntu.com/usn/usn-660-1

Source: PSIRT-CNA@flexerasoftware.com

http://www.us-cert.gov/cas/techalerts/TA09-133A.html

Source: PSIRT-CNA@flexerasoftware.com

US Government Resource

http://www.vupen.com/english/advisories/2008/2891

Source: PSIRT-CNA@flexerasoftware.com

http://www.vupen.com/english/advisories/2009/1297

Source: PSIRT-CNA@flexerasoftware.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/46026

Source: PSIRT-CNA@flexerasoftware.com

https://issues.rpath.com/browse/RPL-2887

Source: PSIRT-CNA@flexerasoftware.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9939

Source: PSIRT-CNA@flexerasoftware.com

https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00014.html

Source: PSIRT-CNA@flexerasoftware.com

https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00040.html

Source: PSIRT-CNA@flexerasoftware.com

http://lists.apple.com/archives/security-announce/2009/May/msg00002.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00000.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2008-1021.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/32137

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/32521

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/32530

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/32753

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/32854

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/32970

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/33109

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/35074

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/secunia_research/2008-41/

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://security.gentoo.org/glsa/glsa-200812-02.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://securityreason.com/securityalert/4488

Source: af854a3a-2127-422b-91ae-364da2661108

http://support.apple.com/kb/HT3549

Source: af854a3a-2127-422b-91ae-364da2661108

http://support.avaya.com/elmodocs2/security/ASA-2008-504.htm

Source: af854a3a-2127-422b-91ae-364da2661108

http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0321

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2008/dsa-1670

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2008:243

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2008-1016.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/497647/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/498385/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/31858

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/usn-660-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.us-cert.gov/cas/techalerts/TA09-133A.html

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

http://www.vupen.com/english/advisories/2008/2891

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2009/1297

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/46026

Source: af854a3a-2127-422b-91ae-364da2661108

https://issues.rpath.com/browse/RPL-2887

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9939

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00014.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00040.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.