Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple buffer overflows in ALPass 2.7 English and 3.02 Korean allow user-assisted remote attackers to execute arbitrary code via an ALPass DB (APW) file containing (1) a long file-key or (2) a "Site Information and Folder entry" with a ciphertext_length value much larger than the plaintext_length value.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ALPass Import Site Information 缓冲区溢出漏洞
Vulnerability Description
ALPass是由韩国人开发的网站和论坛、电子邮件ID和口令管理工具。 ALPass 2.7英文和3.02韩文存在缓冲区溢出漏洞,允许用户辅助远程执行通过一个ALPASS DB (APW)执行任意代码文件,其中包含(1)长文件键(2)"网站的信息和入口目录"的ciphertext_length价值远远大于plaintext_length价值。
CVSS Information
N/A
Vulnerability Type
N/A