CVE-2004-1186
Multiple buffer overflows in enscript 1.6.3 allow remote attackers or local users to cause a...
CVE-2004-1186 is a medium vulnerability (CVSS 5.0) in Gnu Enscript, published December 31, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.98%, the 90th percentile. Fixed in enscript 1.6.4-6.
Multiple buffer overflows in enscript 1.6.3 allow remote attackers or local users to cause a denial of service (application crash).
Exploit likelihood
What each source reports
NVD Score used
5.0
Multiple buffer overflows in enscript 1.6.3 allow remote attackers or local users to cause a denial of service (application crash).
- Record
CVE-2004-1186- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
Multiple buffer overflows in enscript 1.6.3 allow remote attackers or local users to cause a denial of service (application crash).
- Record
CVE-2004-1186- Updated
- 2026-11-02
EUVDEUVD-2004-1183 No score
Multiple buffer overflows in enscript 1.6.3 allow remote attackers or local users to cause a denial of service (application crash).
- Record
EUVD-2004-1183- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-wwp7-qc43-6cph No score
Multiple buffer overflows in enscript 1.6.3 allow remote attackers or local users to cause a...
Multiple buffer overflows in enscript 1.6.3 allow remote attackers or local users to cause a denial of service (application crash).
- Record
GHSA-wwp7-qc43-6cph- Updated
- 2026-11-02
OSV No score
Multiple buffer overflows in enscript 1.6.3 allow remote attackers or local users to cause a denial of service (application crash).
- Record
CVE-2004-1186- Updated
- 2026-11-02
OSVDEBIAN-CVE-2004-1186 No score
Multiple buffer overflows in enscript 1.6.3 allow remote attackers or local users to cause a denial of service (application crash).
- Record
DEBIAN-CVE-2004-1186- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
enscriptDebian:12 |
before 1.6.4-6 | 1.6.4-6 |
enscriptDebian:13 |
before 1.6.4-6 | 1.6.4-6 |
enscriptDebian:14 |
before 1.6.4-6 | 1.6.4-6 |
enscriptDebian:3.0 |
before 1.6.3-1.3, plus listed versions 1.6.3-1.1 |
1.6.3-1.3 |
enscriptRed Hat:enterprise_linux:3::as |
before 0:1.6.1-24.4 | 0:1.6.1-24.4 |
enscript-debuginfoRed Hat:enterprise_linux:3::as |
before 0:1.6.1-24.4 | 0:1.6.1-24.4 |
enscriptRed Hat:enterprise_linux:3::desktop |
before 0:1.6.1-24.4 | 0:1.6.1-24.4 |
enscript-debuginfoRed Hat:enterprise_linux:3::desktop |
before 0:1.6.1-24.4 | 0:1.6.1-24.4 |
enscriptRed Hat:enterprise_linux:3::es |
before 0:1.6.1-24.4 | 0:1.6.1-24.4 |
enscript-debuginfoRed Hat:enterprise_linux:3::es |
before 0:1.6.1-24.4 | 0:1.6.1-24.4 |
Show 10 moreShow less
| Package | Affected | Fixed |
|---|---|---|
enscriptRed Hat:enterprise_linux:3::ws |
before 0:1.6.1-24.4 | 0:1.6.1-24.4 |
enscript-debuginfoRed Hat:enterprise_linux:3::ws |
before 0:1.6.1-24.4 | 0:1.6.1-24.4 |
enscriptRed Hat:enterprise_linux:4::as |
before 0:1.6.1-28.3 | 0:1.6.1-28.3 |
enscript-debuginfoRed Hat:enterprise_linux:4::as |
before 0:1.6.1-28.3 | 0:1.6.1-28.3 |
enscriptRed Hat:enterprise_linux:4::desktop |
before 0:1.6.1-28.3 | 0:1.6.1-28.3 |
enscript-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:1.6.1-28.3 | 0:1.6.1-28.3 |
enscriptRed Hat:enterprise_linux:4::es |
before 0:1.6.1-28.3 | 0:1.6.1-28.3 |
enscript-debuginfoRed Hat:enterprise_linux:4::es |
before 0:1.6.1-28.3 | 0:1.6.1-28.3 |
enscriptRed Hat:enterprise_linux:4::ws |
before 0:1.6.1-28.3 | 0:1.6.1-28.3 |
enscript-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:1.6.1-28.3 | 0:1.6.1-28.3 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
exchange.xforce.ibmcloud.com/vulnerabilities/19033
securityfocus.com/archive/1/419768/100/0/threaded
securityfocus.com/bid/12329
support.apple.com/kb/HT3549
mandriva.com/security/advisories?name=MDKSA-2005:033
usn.ubuntu.com/68-1
Show 31 moreShow less
securitytracker.com/id?1012965
secunia.com/advisories/35074
debian.org/security/2005/dsa-654
lists.apple.com/archives/security-announce/2009/May/msg00002.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11134
securityfocus.com/archive/1/435199/100/0/threaded
us-cert.gov/cas/techalerts/TA09-133A.html
vupen.com/english/advisories/2009/1297
redhat.com/support/errata/RHSA-2005-040.html
gentoo.org/security/en/glsa/glsa-200502-03.xml
nvd.nist.gov/vuln/detail/CVE-2004-1186
github.com/advisories/GHSA-wwp7-qc43-6cph
security-tracker.debian.org/tracker/CVE-2004-1186
access.redhat.com/errata/RHSA-2005:039
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=144683
security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_039.json
access.redhat.com/security/cve/CVE-2004-1184
bugzilla.redhat.com/show_bug.cgi?id=1617391
cve.org/CVERecord?id=CVE-2004-1184
nvd.nist.gov/vuln/detail/CVE-2004-1184
access.redhat.com/security/cve/CVE-2004-1185
bugzilla.redhat.com/show_bug.cgi?id=1617392
cve.org/CVERecord?id=CVE-2004-1185
nvd.nist.gov/vuln/detail/CVE-2004-1185
access.redhat.com/security/cve/CVE-2004-1186
bugzilla.redhat.com/show_bug.cgi?id=1617393
cve.org/CVERecord?id=CVE-2004-1186
access.redhat.com/errata/RHSA-2005:040
bugzilla.redhat.com/show_bug.cgi?id=144686
security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_040.json