Patchwire CVEs, their patch status, and feeds to follow them

CVE-2004-0548

Fixed in a distro release EPSS <1%

Multiple stack-based buffer overflows in the word-list-compress functionality in compress.c for Aspell allow local users to execute arbitrary code via a long entry in the wordlist that is not properly handled when using the (1) "c" compress option or (2) "d" decompress option.

Published 2004-06-11 · CVE record · OSV

Products: gnu aspell, gentoo linux

Distro releases

ReleasePackageFixed in
Debian 12aspell0.50.5-3
Debian 13aspell0.50.5-3
Debian 14aspell0.50.5-3