What’s Vulnerable › Vulnerabilities

CVE-2008-4306

• Severity: critical (CVSS 9.3 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2008-11-04 · updated 2026-06-16
• Weakness: CWE-119

Description

Buffer overflow in enscript before 1.6.4 has unknown impact and attack vectors, possibly related to the font escape sequence.

Affected products

• Ubuntu Linux: 6.06-lts, 7.10, 8.04-lts, 8.10

References

• http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00000.html
• http://osvdb.org/49569
• http://rhn.redhat.com/errata/RHSA-2008-1021.html
• http://secunia.com/advisories/32521
• http://secunia.com/advisories/32530
• http://secunia.com/advisories/32753
• http://secunia.com/advisories/32854
• http://secunia.com/advisories/32970
• http://secunia.com/advisories/33109
• http://security.gentoo.org/glsa/glsa-200812-02.xml
• http://support.avaya.com/elmodocs2/security/ASA-2008-504.htm
• http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0321

Get alerted when CVE-2008-4306 or the next vulnerability affects your stack