CVE-2004-1185

CVE-2004-1185 concerns the Unix filter program enscript with insufficient sanitization of filenames, enabling an attacker to execute arbitrary commands through crafted filenames. The initial description states that Enscript 1.6.3 can be exploited via unsanitised filenames to run arbitrary command...

CVE-2008-3863

GNU Enscript 1.6.1 and 1.6.4 beta are affected by CVE-2008-3863 due to a stack-based buffer overflow in read_special_escape (src/psgen.c) when -e escapes processing is enabled. A crafted ASCII file can trigger arbitrary code execution via the setfilename path, allowing a remote attacker (with use...