CVE-2007-4550

CVE-2007-4550 describes a format string vulnerability in ALPass 2.7 English and 3.02 Korean. The issue allows user-assisted remote attackers to execute arbitrary code through format string specifiers in an fnm field within a folder-name record in an ALPASS DB (APW) file. The vulnerability affects...

CVE-2007-4549

CVE-2007-4549 concerns ALPass 2.7 English and 3.02 Korean, where multiple buffer overflows in the ALPass database (APW) can be exploited by a user via a specially crafted APW file. The vulnerability arises from processing a long file-key or a ciphertext_length value in a Site Information and Fold...