Novell.GroupWise.Messenger.Client.Unicode.Stack.Buffer.Overflow

Description

This indicates an attack attempt against a stack Buffer Overflow vulnerability in Novell GroupWise Messenger Client.
The vulnerability is caused by an improper boundary check when the vulnerable software handles a .nmx file with a malicious "name" property in the "" node. A remote attacker can exploit this to exploit this to execute arbitrary code within the context of the application or possibly cause a denial of service condition, via a crafted .nmx file.

Affected Products

Novell GroupWise Messenger 2.0
Novell GroupWise Messenger 2.0.3
Novell GroupWise Messenger 2.1

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

Recommended Actions

Currently we are not aware of any vendor supplied patch for this issue.

References