← Vulnerability feed

Vulnerability record · CVE-2004-1186 · published 31 December 2004

CVE-2004-1186: Gnu enscript vulnerability

Gnu · Enscript

Multiple buffer overflows in enscript 1.6.3 allow remote attackers or local users to cause a denial of service (application crash).

5.0 CVSS 2.0 Medium EPSS 4.0% · top 9.9%
5.0CVSS 2.0 base score
4.0%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
32References
16 Jun 2026Last modified by NVD

Description

Multiple buffer overflows in enscript 1.6.3 allow remote attackers or local users to cause a denial of service (application crash).

AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://lists.apple.com/archives/security-announce/2009/May/msg00002.html
http://secunia.com/advisories/35074
http://securitytracker.com/id?1012965
http://support.apple.com/kb/HT3549
http://www.debian.org/security/2005/dsa-654 PatchVendor Advisory
http://www.gentoo.org/security/en/glsa/glsa-200502-03.xml Patch
http://www.mandriva.com/security/advisories?name=MDKSA-2005:033
http://www.redhat.com/support/errata/RHSA-2005-040.html
http://www.securityfocus.com/archive/1/419768/100/0/threaded
http://www.securityfocus.com/archive/1/435199/100/0/threaded
http://www.securityfocus.com/bid/12329
http://www.us-cert.gov/cas/techalerts/TA09-133A.html US Government Resource
http://www.vupen.com/english/advisories/2009/1297
https://exchange.xforce.ibmcloud.com/vulnerabilities/19033
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11134
https://usn.ubuntu.com/68-1/
http://lists.apple.com/archives/security-announce/2009/May/msg00002.html
http://secunia.com/advisories/35074
http://securitytracker.com/id?1012965
http://support.apple.com/kb/HT3549
http://www.debian.org/security/2005/dsa-654 PatchVendor Advisory
http://www.gentoo.org/security/en/glsa/glsa-200502-03.xml Patch
http://www.mandriva.com/security/advisories?name=MDKSA-2005:033
http://www.redhat.com/support/errata/RHSA-2005-040.html
http://www.securityfocus.com/archive/1/419768/100/0/threaded
http://www.securityfocus.com/archive/1/435199/100/0/threaded
http://www.securityfocus.com/bid/12329
http://www.us-cert.gov/cas/techalerts/TA09-133A.html US Government Resource
http://www.vupen.com/english/advisories/2009/1297
https://exchange.xforce.ibmcloud.com/vulnerabilities/19033
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11134
https://usn.ubuntu.com/68-1/

Track CVE-2004-1186 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.6CVE-2008-3863Gnu enscript memory buffer overflow vulnerabilityStack-based buffer overflow in the read_special_escape function in src/psgen.c in GNU Enscript 1.6.1 and 1.6.4 beta, when the -e (aka special escapes…EPSS 8.4%7.5CVE-2004-1185Gnu enscript vulnerabilityEnscript 1.6.3 does not sanitize filenames, which allows remote attackers or local users to execute arbitrary commands via crafted filenames.EPSS 4.4%4.6CVE-2004-1184Gnu enscript vulnerabilityThe EPSF pipe support in enscript 1.6.3 allows remote attackers or local users to execute arbitrary commands via shell metacharacters.EPSS 1.2%3.6CVE-2002-0044Gnu enscript vulnerabilityGNU Enscript 1.6.1 and earlier allows local users to overwrite arbitrary files of the Enscript user via a symlink attack on temporary files.EPSS 0.35%

Source: NIST National Vulnerability Database (record CVE-2004-1186), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.