Gentoo: GLSA-200812-02 Normal: Enscrip Arbitrary Code Execution Threat
gentoo
December 2, 2008
Two buffer overflows in enscript might lead to the execution of arbitrary code.
Summary
Gentoo Linux Security Advisory GLSA 200812-02
https://security.gentoo.org/
Severity: Normal
Title: enscript: User-assisted execution of arbitrary code
Date: December 02, 2008
Bugs: #243228
ID: 200812-02
Synopsis
=======
Two buffer overflows in enscript might lead to the execution of
arbitrary code.
Background
=========
enscript is a powerful ASCII to PostScript file converter.
Affected packages
================
-------------------------------------------------------------------
Package / Vulnerable / Unaffected
-------------------------------------------------------------------
1 app-text/enscript < 1.6.4-r4 >= 1.6.4-r4
==========
Two stack-based buffer overflows in the read_special_escape() function
in src/psgen.c have been reported. Ulf Harnhammar of Secunia Research
discovered a vulnerability related to the "setf...
Resolution
References
Availability
style>.gentoo_availability{display:block;}
Concerns
PREVIOUS
NEXT
Background
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Affected Packages
Impact
Workaround
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!