CVE-2004-0548
Last modified
CVE-2004-0548 is a vulnerability of currently unknown severity. Multiple stack-based buffer overflows in the word-list-compress functionality in compress.c for Aspell allow local users to execute arbitrary code via a long entry in the wordlist that is not properly handled when using the (1) "c" compress option or (2) "d" decompress option.. EPSS estimates a 0.92% chance of exploitation in the next 30 days.
Description
Multiple stack-based buffer overflows in the word-list-compress functionality in compress.c for Aspell allow local users to execute arbitrary code via a long entry in the wordlist that is not properly handled when using the (1) "c" compress option or (2) "d" decompress option.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Gnu | Aspell | 0.50.5 |
| Gentoo | Linux | 1.4 |
References
- http://www.gentoo.org/security/en/glsa/glsa-200406-14.xmlVendor Advisory
- http://www.gentoo.org/security/en/glsa/glsa-200406-14.xmlVendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2004-0548?
How severe is CVE-2004-0548?
How do I fix CVE-2004-0548?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2004
- CVE-2004-0541Buffer overflow in the ntlm_check_auth (NTLM authentication)…
- CVE-2004-0542PHP before 4.3.7 on Win32 platforms does not properly filter…
- CVE-2004-0543Multiple SQL injection vulnerabilities in Oracle Application…
- CVE-2004-0544Multiple buffer overflows in LVM for AIX 5.1 and 5.2 allow l…
- CVE-2004-0545LVM for AIX 5.1 and 5.2 allows local users to overwrite arbi…
- CVE-2004-0547Buffer overflow in the ODBC driver for PostgreSQL before 7.2…
- CVE-2004-0549The WebBrowser ActiveX control, or the Internet Explorer HTM…
- CVE-2004-0550Buffer overflow in Real Networks RealPlayer 10 allows remote…
- CVE-2004-0551Cisco CatOS 5.x before 5.5(20) through 8.x before 8.2(2) and…
- CVE-2004-0552Sophos Small Business Suite 1.00 on Windows does not properl…
- CVE-2004-0554Linux kernel 2.4.x and 2.6.x for x86 allows local users to c…
- CVE-2004-0555Buffer overflow in (1) queue.c and (2) queued.c in queue bef…
Are you affected by CVE-2004-0548?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST