CVE-2004-0548
Aspell - Stack-Based Buffer Overflow via Wordlist Compression
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2004-0548. PoCs published by c0d3r.
AI-analyzed exploit summary This is a local buffer overflow exploit for CVE-2004-0548 targeting the 'word-list-compress' utility. It leverages an environment variable to overflow the stack and execute a shellcode payload, granting a local shell.
Description
Multiple stack-based buffer overflows in the word-list-compress functionality in compress.c for Aspell allow local users to execute arbitrary code via a long entry in the wordlist that is not properly handled when using the (1) "c" compress option or (2) "d" decompress option.
Exploits (1)
This is a local buffer overflow exploit for CVE-2004-0548 targeting the 'word-list-compress' utility. It leverages an environment variable to overflow the stack and execute a shellcode payload, granting a local shell.