CVE-2011-0333 Heap-based buffer overflow in the NgwiCalVTimeZoneBody::ParseSelf function in gwwww1.dll in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before HP3 allows remote attackers to execute arbitr...
HighCVSS 10.0
EPSS 6.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Heap-based buffer overflow in the NgwiCalVTimeZoneBody::ParseSelf function in gwwww1.dll in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before HP3 allows remote attackers to execute arbitrary code via a crafted TZNAME variable in a VCALENDAR attachment in an e-mail message, related to an "integer truncation error."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| novell groupwise | = 8.0 | No fix listed |
| novell groupwise | = 8.0-hp1 | No fix listed |
| novell groupwise | = 8.0-hp2 | No fix listed |
References
- secunia.com vendor-advisory
- www.novell.com vendor-advisory
- bugzilla.novell.com
- 20110926 Novell GroupWise iCal TZNAME Heap Overflow Vulnerability third-party-advisory