Description
Format string vulnerability in ALPass 2.7 English and 3.02 Korean might allow user-assisted remote attackers to execute arbitrary code via format string specifiers in an fnm field in a folder-name record in an ALPASS DB (APW) file.
References
- http://vuln.sg/alpass27-en.html
- 26616 third-party-advisory
- alpass-apw-format-string(36256) vdb-entry
- 25435 vdb-entry