CVE-2008-4306
Buffer overflow in enscript before 1.6.4 has unknown impact and attack vectors, possibly related...
Buffer overflow in enscript before 1.6.4 has unknown impact and attack vectors, possibly related to the font escape sequence.
Exploit likelihood
What each source reports
NVD Score used
Buffer overflow in enscript before 1.6.4 has unknown impact and attack vectors, possibly related to the font escape sequence.
- Record
CVE-2008-4306- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Buffer overflow in enscript before 1.6.4 has unknown impact and attack vectors, possibly related to the font escape sequence.
- Record
CVE-2008-4306- Updated
- 2026-11-02
EUVDEUVD-2008-4289 No score
Buffer overflow in enscript before 1.6.4 has unknown impact and attack vectors, possibly related to the font escape sequence.
- Record
EUVD-2008-4289- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-7jw6-96x5-9376 No score
Buffer overflow in enscript before 1.6.4 has unknown impact and attack vectors, possibly related...
Buffer overflow in enscript before 1.6.4 has unknown impact and attack vectors, possibly related to the font escape sequence.
- Record
GHSA-7jw6-96x5-9376- Weakness
- CWE-119
- Updated
- 2026-11-02
OSV No score
Buffer overflow in enscript before 1.6.4 has unknown impact and attack vectors, possibly related to the font escape sequence.
- Record
CVE-2008-4306- Updated
- 2026-11-02
OSVDEBIAN-CVE-2008-4306 No score
Buffer overflow in enscript before 1.6.4 has unknown impact and attack vectors, possibly related to the font escape sequence.
- Record
DEBIAN-CVE-2008-4306- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
enscriptDebian:12 |
before 1.6.4-13 | 1.6.4-13 |
enscriptDebian:13 |
before 1.6.4-13 | 1.6.4-13 |
enscriptDebian:14 |
before 1.6.4-13 | 1.6.4-13 |
enscriptDebian:4.0 |
before 1.6.4-11.1, plus listed versions 1.6.4-11 |
1.6.4-11.1 |
enscriptRed Hat:enterprise_linux:5::client |
before 0:1.6.4-4.1.1.el5_2 | 0:1.6.4-4.1.1.el5_2 |
enscript-debuginfoRed Hat:enterprise_linux:5::client |
before 0:1.6.4-4.1.1.el5_2 | 0:1.6.4-4.1.1.el5_2 |
enscriptRed Hat:enterprise_linux:5::server |
before 0:1.6.4-4.1.1.el5_2 | 0:1.6.4-4.1.1.el5_2 |
enscript-debuginfoRed Hat:enterprise_linux:5::server |
before 0:1.6.4-4.1.1.el5_2 | 0:1.6.4-4.1.1.el5_2 |
enscriptRed Hat:enterprise_linux:2.1::as |
before 0:1.6.1-16.7 | 0:1.6.1-16.7 |
enscriptRed Hat:enterprise_linux:2.1::aw |
before 0:1.6.1-16.7 | 0:1.6.1-16.7 |
Show 18 moreShow less
| Package | Affected | Fixed |
|---|---|---|
enscriptRed Hat:enterprise_linux:2.1::es |
before 0:1.6.1-16.7 | 0:1.6.1-16.7 |
enscriptRed Hat:enterprise_linux:2.1::ws |
before 0:1.6.1-16.7 | 0:1.6.1-16.7 |
enscriptRed Hat:enterprise_linux:3::as |
before 0:1.6.1-24.7 | 0:1.6.1-24.7 |
enscript-debuginfoRed Hat:enterprise_linux:3::as |
before 0:1.6.1-24.7 | 0:1.6.1-24.7 |
enscriptRed Hat:enterprise_linux:3::desktop |
before 0:1.6.1-24.7 | 0:1.6.1-24.7 |
enscript-debuginfoRed Hat:enterprise_linux:3::desktop |
before 0:1.6.1-24.7 | 0:1.6.1-24.7 |
enscriptRed Hat:enterprise_linux:3::es |
before 0:1.6.1-24.7 | 0:1.6.1-24.7 |
enscript-debuginfoRed Hat:enterprise_linux:3::es |
before 0:1.6.1-24.7 | 0:1.6.1-24.7 |
enscriptRed Hat:enterprise_linux:3::ws |
before 0:1.6.1-24.7 | 0:1.6.1-24.7 |
enscript-debuginfoRed Hat:enterprise_linux:3::ws |
before 0:1.6.1-24.7 | 0:1.6.1-24.7 |
enscriptRed Hat:enterprise_linux:4::as |
before 0:1.6.1-33.el4_7.1 | 0:1.6.1-33.el4_7.1 |
enscript-debuginfoRed Hat:enterprise_linux:4::as |
before 0:1.6.1-33.el4_7.1 | 0:1.6.1-33.el4_7.1 |
enscriptRed Hat:enterprise_linux:4::desktop |
before 0:1.6.1-33.el4_7.1 | 0:1.6.1-33.el4_7.1 |
enscript-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:1.6.1-33.el4_7.1 | 0:1.6.1-33.el4_7.1 |
enscriptRed Hat:enterprise_linux:4::es |
before 0:1.6.1-33.el4_7.1 | 0:1.6.1-33.el4_7.1 |
enscript-debuginfoRed Hat:enterprise_linux:4::es |
before 0:1.6.1-33.el4_7.1 | 0:1.6.1-33.el4_7.1 |
enscriptRed Hat:enterprise_linux:4::ws |
before 0:1.6.1-33.el4_7.1 | 0:1.6.1-33.el4_7.1 |
enscript-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:1.6.1-33.el4_7.1 | 0:1.6.1-33.el4_7.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-4306 is a high vulnerability (CVSS 9.3) in Ubuntu Linux, published November 4, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.44%, the 84th percentile. Fixed in enscript 1.6.4-13.
References
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10718
secunia.com/advisories/32521
osvdb.org/49569
lists.opensuse.org/opensuse-security-announce/2008-11/msg00000.html
redhat.com/archives/fedora-package-announce/2008-November/msg00040.html
Show 34 moreShow less
support.avaya.com/elmodocs2/security/ASA-2008-504.htm
ubuntu.com/usn/usn-660-1
wiki.rpath.com/wiki/Advisories:rPSA-2008-0321
security.gentoo.org/glsa/glsa-200812-02.xml
securityfocus.com/archive/1/498385/100/0/threaded
issues.rpath.com/browse/RPL-2887
mandriva.com/security/advisories?name=MDVSA-2008:243
debian.org/security/2008/dsa-1670
rhn.redhat.com/errata/RHSA-2008-1021.html
nvd.nist.gov/vuln/detail/CVE-2008-4306
github.com/advisories/GHSA-7jw6-96x5-9376
security-tracker.debian.org/tracker/CVE-2008-4306
access.redhat.com/errata/RHSA-2008:1016
bugzilla.redhat.com/show_bug.cgi?id=466771
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_1016.json
cve.org/CVERecord?id=CVE-2008-3863