Remote Code Execution Vulnerability in Novell GroupWise by Novell

CVE-2012-0439

Summary

A vulnerability exists in the ActiveX control (gwcls1.dll) within Novell GroupWise that allows remote attackers to execute arbitrary code. This can be achieved by manipulating pointer arguments in specific method calls, which may lead to unauthorized access and compromise system integrity. Users of Novell GroupWise 8.0 (prior to 8.0.3 HP2) and GroupWise 2012 (prior to SP1 HP1) are particularly at risk, highlighting the importance of prompt updates and security measures against potential exploits.

References