Vulnerability in Gentoo Linux

CVE-2004-0548

Multiple stack-based buffer overflows in the word-list-compress functionality in compress.c for Aspell allow local users to execute arbitrary code via a long entry in the wordlist that is not properly handled when using the (1) "c" compress option or (2) "d" decompress option.

EPSS: 0.009 (56.6th percentile) — read the EPSS interpretation.

Affected products

Gentoo Linux — versions 1.4
Gnu Aspell — versions 0.50.5
N/a — versions n/a

References

cve@mitre.org (vdb-entry, x_refsource_BID)
cve@mitre.org (x_refsource_CONFIRM)
cve@mitre.org (vendor-advisory, x_refsource_GENTOO, Vendor Advisory)
cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)