CVE-2007-4550: Altools Alpass

Medium severity, CVSS 5.1. EPSS: 4.5% chance of exploitation in the next 30 days.

Format string vulnerability in ALPass 2.7 English and 3.02 Korean might allow user-assisted remote attackers to execute arbitrary code via format string specifiers in an fnm field in a folder-name record in an ALPASS DB (APW) file.

Affected products

• Altools Alpass: version 2.7 only; version 3.02 only

Published 2007-08-28. Last modified 2026-06-16.