CVE-2008-2703 Multiple stack-based buffer overflows in Novell GroupWise Messenger (GWIM) Client before 2.0.3 HP1 for Windows allow remote attackers to execute arbitrary code via "spoofed server responses" that cont...
HighCVSS 10.0
EPSS 61.1%
Framework module
Public exploit
PoC
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple stack-based buffer overflows in Novell GroupWise Messenger (GWIM) Client before 2.0.3 HP1 for Windows allow remote attackers to execute arbitrary code via "spoofed server responses" that contain a long string after the NM_A_SZ_TRANSACTION_ID field name.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| novell groupwise messenger | = 2.0 | No fix listed |
| novell groupwise messenger | = 2.0.2 | No fix listed |
| novell groupwise messenger | = 2.0.3 | No fix listed |
References
- 30576 third-party-advisory vendor-advisory
- support.novell.com patch
- 20080704 Novell GroupWise Messenger Client (GWIM) Remote Stack Overflow mailing-list
- 29602 vdb-entry
- 1020209 vdb-entry
- ADV-2008-1764 vdb-entry vendor-advisory
- groupwise-messenger-client-bo(42917) vdb-entry