CVE-2012-0439: Code Injection
An ActiveX control in gwcls1.dll in the client in Novell GroupWise 8.0 before 8.0.3 HP2 and 2012 before SP1 HP1 allows remote attackers to execute arbitrary code via (1) a pointer argument to the SetEngine method or (2) an XPItem pointer argument to an unspecified method.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-0439?
CVE-2012-0439 has a high severity rating due to the potential for remote code execution.
How do I fix CVE-2012-0439?
To fix CVE-2012-0439, update Novell GroupWise to version 8.0.3 HP2 or later, or 2012 SP1 or later.
Which versions of Novell GroupWise are affected by CVE-2012-0439?
CVE-2012-0439 affects Novell GroupWise versions 8.0, 8.0 HP1, HP2, HP3, and 2012 before SP1 HP1.
What vulnerabilities does CVE-2012-0439 exploit?
CVE-2012-0439 exploits vulnerabilities in the gwcls1.dll ActiveX control to allow remote code execution.
Who can be affected by CVE-2012-0439?
Any user utilizing the affected versions of Novell GroupWise could be targeted by remote attackers leveraging CVE-2012-0439.