CVE-2004-0548 Multiple stack-based buffer overflows in the word-list-compress functionality in compress.c for Aspell allow local users to execute arbitrary code via a long entry in the wordlist that is not properly...
HighCVSS 7.2
EPSS 0.92%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple stack-based buffer overflows in the word-list-compress functionality in compress.c for Aspell allow local users to execute arbitrary code via a long entry in the wordlist that is not properly handled when using the (1) "c" compress option or (2) "d" decompress option.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| GNU aspell | = 0.50.5 | No fix listed |
| gentoo linux | = 1.4 | No fix listed |
| debian/aspell(Debian:12) | < 0.50.5-3 | 0.50.5-3 |
| debian/aspell(Debian:13) | < 0.50.5-3 | 0.50.5-3 |
| debian/aspell(Debian:14) | < 0.50.5-3 | 0.50.5-3 |
References
- Debian Security Tracker CVE-2004-0548 vendor-advisory
- 20040608 Aspell 'word-list-compress' stack overflow vulnerability mailing-list
- GLSA-200406-14 vendor-advisory
- www.oracle.com
- 10497 vdb-entry