Integer Overflow Vulnerability in Novell GroupWise Internet Agent

CVE-2012-0271

Summary

An integer overflow in the WebConsole component of the GroupWise Internet Agent (gwia.exe) allows remote attackers to execute arbitrary code. This vulnerability is triggered when an attacker sends a specially crafted request, with an inappropriate value in the Content-Length HTTP header, leading to a heap-based buffer overflow. Affected versions of Novell GroupWise include those prior to 8.0.3 HP1 and 2012 SP1, making it crucial for users to apply the necessary updates to mitigate risks.

References