Description
Multiple buffer overflows in ALPass 2.7 English and 3.02 Korean allow user-assisted remote attackers to execute arbitrary code via an ALPass DB (APW) file containing (1) a long file-key or (2) a "Site Information and Folder entry" with a ciphertext_length value much larger than the plaintext_length value.
References
- alpass-alpass-db-file-bo(36235) vdb-entry
- alpass-apw-bo(36257) vdb-entry
- http://vuln.sg/alpass27-en.html
- 26616 third-party-advisory
- 25435 vdb-entry