CVE-2007-4550

MediumCVSS 5.1/10Last modified Jun 16, 2026

Description

Format string vulnerability in ALPass 2.7 English and 3.02 Korean might allow user-assisted remote attackers to execute arbitrary code via format string specifiers in an fnm field in a folder-name record in an ALPASS DB (APW) file.

Metrics

CVSS 2.0 5.1/10AV:N/AC:H/Au:N/C:P/I:P/A:P

Weakness enumeration

CWE-134

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/26616Third Party Advisory
http://vuln.sg/alpass27-en.htmlExploit, Third Party Advisory
http://www.securityfocus.com/bid/25435Patch, Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/36256Third Party Advisory, VDB Entry
http://secunia.com/advisories/26616Third Party Advisory
http://vuln.sg/alpass27-en.htmlExploit, Third Party Advisory
http://www.securityfocus.com/bid/25435Patch, Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/36256Third Party Advisory, VDB Entry

Timeline

Published: Aug 28, 2007
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2007