← Database

CVE-2007-6435

CRITICAL CVSS: 9.3 Published: 2007-12-18 Modified: 2026-06-16

Description

Stack-based buffer overflow in Novell GroupWise before 6.5.7, when HTML preview of e-mail is enabled, allows user-assisted remote attackers to execute arbitrary code via a long SRC attribute in an IMG element when forwarding or replying to a crafted e-mail.

Affected Platforms

Novell Groupwise

Weakness Type

CWE-119

References