CVE-2011-2662 Integer signedness error in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before HP3 allows remote attackers to execute arbitrary code via a negative BYWEEKNO property in a weekly RRULE vari...
HighCVSS 10.0
EPSS 4.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Integer signedness error in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before HP3 allows remote attackers to execute arbitrary code via a negative BYWEEKNO property in a weekly RRULE variable in a VCALENDAR attachment in an e-mail message.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| novell groupwise | = 8.0 | No fix listed |
| novell groupwise | = 8.0-hp1 | No fix listed |
| novell groupwise | = 8.0-hp2 | No fix listed |
References
- www.novell.com vendor-advisory
- bugzilla.novell.com
- 20110926 Novell GroupWise iCal RRULE ByWeekNo Memory Corruption Vulnerability third-party-advisory