Novell GroupWise 'mailto' URI Handler Buffer Overflow Vulnerability

Novell GroupWise 'mailto' URI Handler Buffer Overflow Vulnerability

Novell GroupWise is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data.

Successfully exploiting this issue will allow an attacker to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition.

This issue affects GroupWise 7.0; other versions may also be affected.

UPDATE (April 30, 2008): A report indicates that this issue cannot be reproduced. We will update this BID as more information emerges.