Description
Stack-based buffer overflow in Novell GroupWise before 6.5.7, when HTML preview of e-mail is enabled, allows user-assisted remote attackers to execute arbitrary code via a long SRC attribute in an IMG element when forwarding or replying to a crafted e-mail.
References
- 1019101 vdb-entry
- novell-groupwise-client-src-bo(39032) vdb-entry
- 3459 third-party-advisory
- 26875 vdb-entry
- 20071214 [ISR] - Novell Groupwise client remote stack overflow silently patched. mailing-list
- 40870 vdb-entry
- 28102 third-party-advisory
- http://www.infobyte.com.ar/adv/ISR-16.html
- ADV-2007-4273 vdb-entry