CVE-2008-4306

EPSS 2.44%
Veröffentlicht 04.11.2008 21:00:01
Zuletzt bearbeitet 16.06.2026 22:57:34
Quelle secalert@redhat.com
CVE-Watchlists
Login
Unerledigt
Login

Buffer overflow in enscript before 1.6.4 has unknown impact and attack vectors, possibly related to the font escape sequence.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 24

NVD 4 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Ubuntu ≫ Linux Version6.06 Updatelts

Ubuntu ≫ Linux Version7.10

Ubuntu ≫ Linux Version8.04 Updatelts

Ubuntu ≫ Linux Version8.10

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	2.44%	0.821

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	9.3	8.6	10	AV:N/AC:M/Au:N/C:C/I:C/A:C

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00000.html

http://rhn.redhat.com/errata/RHSA-2008-1021.html

http://secunia.com/advisories/32521

http://secunia.com/advisories/32530

Vendor Advisory

http://secunia.com/advisories/32753

http://secunia.com/advisories/32854

http://secunia.com/advisories/32970

http://secunia.com/advisories/33109

http://security.gentoo.org/glsa/glsa-200812-02.xml

http://support.avaya.com/elmodocs2/security/ASA-2008-504.htm

http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0321

http://www.debian.org/security/2008/dsa-1670

http://www.mandriva.com/security/advisories?name=MDVSA-2008:243

http://www.redhat.com/support/errata/RHSA-2008-1016.html

http://www.securityfocus.com/archive/1/498385/100/0/threaded

http://www.ubuntu.com/usn/usn-660-1

https://issues.rpath.com/browse/RPL-2887

https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00014.html

https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00040.html

http://osvdb.org/49569

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10718

https://nvd.nist.gov/vuln/detail/CVE-2008-4306

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2008-4306

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2008-4306

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2008-4306