CVE-2011-4189

Currently unrated

Key Information:

Vendor: Novell
Status: Groupwise
Vendor: CVE Published:; 2 March 2012

Summary

The client in Novell GroupWise 8.0x through 8.02HP3 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption and application crash) via a long e-mail address in an Address Book (aka .NAB) file.

References

http://osvdb.org/79720

vdb-entryx_refsource_OSVDB

https://exchange.xforce.ibmcloud.com/vulnerabilities/73588

vdb-entryx_refsource_XF

https://bugzilla.novell.com/show_bug.cgi?id=733885

x_refsource_CONFIRM

EPSS Score

36% chance of being exploited in the next 30 days.

Timeline

Vulnerability published
Mar 2, 2012
Vulnerability Reserved
Oct 25, 2011

Collectors

NVD DatabaseMitre Database