Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

aspell: bounds checking problem

Package(s):

aspell

CVE #(s):

CAN-2004-0548

Created:

June 17, 2004

Updated:

December 20, 2004

Description:

Aspell's word-list-compress utility fails to properly check bounds when dealing with words that are more than 256 bytes long. This can lead to arbitrary code execution by an attacker.

Alerts:

Mandrake	MDKSA-2004:153	2004-12-20
OpenPKG	OpenPKG-SA-2004.042	2004-09-15
Gentoo	200406-14	2004-06-17

(Log in to post comments)