Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple stack-based buffer overflows in the word-list-compress functionality in compress.c for Aspell allow local users to execute arbitrary code via a long entry in the wordlist that is not properly handled when using the (1) "c" compress option or (2) "d" decompress option.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
GNU Aspell堆栈缓冲区溢出漏洞
Vulnerability Description
Aspell是用于拼写检查的库。 Aspell包含的word-list-compress工具存在缓冲区溢出，本地攻击者可以利用此漏洞以当前用户进程权限在系统上执行任意指令。 word-list-compress提供压缩和解压wordlist的选项，当处理这些选项时对参数缺少充分缓冲区边界检查，如果每个字段超过256字节，就可能发生缓冲区溢出，精心构建wordlist可能以当前用户进程权限在系统上执行任意指令。
CVSS Information
N/A
Vulnerability Type
N/A