FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2008-4306

This CVE name corresponds to:

Entered	Topic
2008-11-18	enscript -- arbitrary code execution vulnerability

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2008-4306 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2008-4306
Phase	Assigned(20080929)

Description

Buffer overflow in enscript before 1.6.4 has unknown impact and attack vectors, possibly related to the font escape sequence.

References

Source	Reference
CONFIRM	http://support.avaya.com/elmodocs2/security/ASA-2008-504.htm
FEDORA	FEDORA-2008-9351
FEDORA	FEDORA-2008-9372
GENTOO	GLSA-200812-02
MANDRIVA	MDVSA-2008:243
REDHAT	RHSA-2008:1016
SUSE	SUSE-SR:2008:024
UBUNTU	USN-660-1
OSVDB	49569
SECUNIA	32530
SECUNIA	33109
SECUNIA	32970
SECUNIA	32521