Enscript 1.6.3 does not sanitize filenames, which allows remote attackers or local users to execute arbitrary commands via crafted filenames.
CVSS Details
- CVSS 3.1 Base Score: 6.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Enscript | — | Apply OS X security update 2009-002Upgrade macOS to the latest version | Dec 16, 2011 | Jan 21, 2005 |
| Debian | — | Upgrade enscript | Jul 30, 2024 | Jan 21, 2005 |
| Freebsd | — | Upgrade enscript-letterUpgrade enscript-a4Upgrade enscript-letterdj | Dec 10, 2025 | Feb 11, 2005 |
| Gentoo Linux | — | Upgrade app-text/enscript. | Oct 30, 2017 | Jan 21, 2005 |
| Suse | — | Upgrade enscript | Feb 17, 2015 | Jan 21, 2005 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub