Secunia

shaun2k2 has reported a vulnerability in aspell. This can potentially be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to a boundary error within the word-list-compress utility when processing word lists. This can be exploited to cause a stack-based buffer overflow via a specially crafted word list containing an overly long word (more than 256 bytes).

Successful exploitation may allow execution of arbitrary code with the user's privileges, but requires a large amount of social engineering.

A malicious person has to be able to manipulate a word list on the user's system or trick the user into downloading a malicious word list. Afterwards, the user has to process the word list with the word-list-compress utility.

Solution
Update to version 0.60.4.

Provided and/or discovered by
shaun2k2

Changelog
Further details available in Customer Area

Original Advisory
http://nettwerked.mg2.org/advisories/wlc

Deep Links
Links available in Customer Area