CVE-2011-0333: Buffer Overflow
Heap-based buffer overflow in the NgwiCalVTimeZoneBody::ParseSelf function in gwwww1.dll in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before HP3 allows remote attackers to execute arbitrary code via a crafted TZNAME variable in a VCALENDAR attachment in an e-mail message, related to an "integer truncation error."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-0333?
CVE-2011-0333 is a critical vulnerability allowing remote code execution due to a heap-based buffer overflow.
How do I fix CVE-2011-0333?
To fix CVE-2011-0333, you should upgrade to Novell GroupWise version 8.0 HP3 or later.
What software versions are affected by CVE-2011-0333?
CVE-2011-0333 affects Novell GroupWise versions 8.0, 8.0 HP1, and 8.0 HP2.
How does CVE-2011-0333 work?
CVE-2011-0333 exploits a vulnerability in the NgwiCalVTimeZoneBody::ParseSelf function when processing crafted VCALENDAR attachments.
Can CVE-2011-0333 be exploited without user interaction?
Yes, CVE-2011-0333 can be exploited via email attachments, allowing attackers to execute arbitrary code without user interaction.