CVE-2010-4325

CVE-2010-4325 affects Novell GroupWise via the GWIA gwwww1.dll: a vulnerability in VCALENDAR data TZID handling can cause a remote buffer overflow. Exploitation can lead to arbitrary code execution with SYSTEM privileges. Affected products: GroupWise 8.0x up to 8.02HP2. The issue is triggered by ...

CVE-2010-4325

Buffer overflow in gwwww1.dll in GroupWise Internet Agent GWIA in Novell GroupWise before 8.02HP2 allows remote attackers to execute arbitrary code via a crafted TZID variable in a VCALENDAR message...

VUPEN Security Research - Novell GroupWise "TZID" Variable Remote Buffer Overflow Vulnerability (VUPEN-SR-2011-004)

VUPEN Security Research - Novell GroupWise VCALENDAR "TZID" Variable Remote Buffer Overflow Vulnerability VUPEN-SR-2011-004 http://www.vupen.com/english/research.php I. BACKGROUND --------------------- "Novell GroupWise collaboration software is a premier collaboration tool for large enterprise...

GroupWise Internet Agent < 8.0.2 HP2 Email Message VCALENDAR Data TZID Variable Remote Overflow

The version of GroupWise Internet Agent installed on the remote host is older than 8.0.2.12377 and hence reportedly affected by an buffer overflow vulnerability. The installed version fails to correctly parse 'VCALENDAR' data within an email message containing a specially crafted 'TZID' variable...