Description
Buffer overflow in gwwww1.dll in GroupWise Internet Agent (GWIA) in Novell GroupWise before 8.02HP2 allows remote attackers to execute arbitrary code via a crafted TZID variable in a VCALENDAR message.
References
- https://bugzilla.novell.com/show_bug.cgi?id=657818
- http://www.zerodayinitiative.com/advisories/ZDI-11-027/
- 70676 vdb-entry
- https://bugzilla.novell.com/show_bug.cgi?id=685304
- 20110126 VUPEN Security Research - Novell GroupWise "TZID" Variable Remote Buffer Overflow Vulnerability (VUPEN-SR-2011-004) mailing-list
- http://www.novell.com/support/viewContent.do?externalId=7007638&sliceId=1
- groupwise-tzid-bo(64928) vdb-entry
- ADV-2011-0220 vdb-entry
- 43089 third-party-advisory
- 46025 vdb-entry
- 20110926 Novell GroupWise iCal RRULE Weekday Recurrence Heap Overflow Vulnerability third-party-advisory
- http://www.novell.com/support/viewContent.do?externalId=7009212