CVE-2007-6435 Stack-based buffer overflow in Novell GroupWise before 6.5.7, when HTML preview of e-mail is enabled, allows user-assisted remote attackers to execute arbitrary code via a long SRC attribute in an IMG...
HighCVSS 9.3
EPSS 6.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in Novell GroupWise before 6.5.7, when HTML preview of e-mail is enabled, allows user-assisted remote attackers to execute arbitrary code via a long SRC attribute in an IMG element when forwarding or replying to a crafted e-mail.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| novell groupwise | <= 6.5.6 | No fix listed |
References
- 40870 vdb-entry
- 28102 third-party-advisory
- 3459 third-party-advisory
- www.infobyte.com.ar exploit
- 20071214 [ISR] - Novell Groupwise client remote stack overflow silently patched. mailing-list
- 26875 exploit vdb-entry
- 1019101 vdb-entry
- ADV-2007-4273 vdb-entry
- novell-groupwise-client-src-bo(39032) vdb-entry