Format string

2007-08-2800:17:00

PRIOn knowledge base

www.prio-n.com

8.2 High

AI Score

Confidence

Low

0.009 Low

EPSS

Percentile

82.8%

JSON

Format string vulnerability in ALPass 2.7 English and 3.02 Korean might allow user-assisted remote attackers to execute arbitrary code via format string specifiers in an fnm field in a folder-name record in an ALPASS DB (APW) file.

CPENameOperatorVersion
alpasseq2.7
alpasseq3.02

CPE	Name	Operator	Version
	alpass	eq	2.7
	alpass	eq	3.02

References

secunia.com/advisories/26616

vuln.sg/alpass27-en.html

www.securityfocus.com/bid/25435

exchange.xforce.ibmcloud.com/vulnerabilities/36256