REDHAT-BUG-469311: Buffer Overflow
Kees Cook and Tomas Hoger discovered multiple buffer overflows in enscript related to handling of the font{} special escape caused by an unsafe use of strcpy(). This can be exploited to cause a stack-based buffer overflow by tricking the user into converting a malicious file, , but requires that special escapes processing is enabled with the "-e" option (not enabled by default).
Issue is similar to recently reported setfilename{} special escape handling buffer overflow known as CVE-2008-3863.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-469311?
The severity of REDHAT-BUG-469311 is considered high due to the potential for remote exploitation through a stack-based buffer overflow.
How do I fix REDHAT-BUG-469311?
To fix REDHAT-BUG-469311, you should update the GNU Enscript package to the latest version where the vulnerability has been patched.
What versions of GNU Enscript are affected by REDHAT-BUG-469311?
The vulnerability in REDHAT-BUG-469311 affects multiple versions of the GNU Enscript software prior to the fix being implemented.
What type of vulnerability is REDHAT-BUG-469311?
REDHAT-BUG-469311 is classified as a buffer overflow vulnerability resulting from unsafe handling of the font{} special escape.
What can attackers do with REDHAT-BUG-469311?
Attackers can exploit REDHAT-BUG-469311 to execute arbitrary code by tricking users into processing a specially crafted file, potentially leading to system compromise.