Description
Array index error in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before HP3 allows remote attackers to execute arbitrary code via a crafted yearly RRULE variable in a VCALENDAR attachment in an e-mail message.
References
- http://www.novell.com/support/viewContent.do?externalId=7009216
- 20110928 iDefense Security Advisory 09.26.11: Novell GroupWise iCal Date Invalid Array Indexing Vulnerability mailing-list
- 20110926 Novell GroupWise iCal RRULE Time Conversion Invalid Array Indexing Vulnerability third-party-advisory
- https://bugzilla.novell.com/show_bug.cgi?id=705917