critical9.3Public exploit code
CVE-2012-0439
An ActiveX control in gwcls1.dll in the client in Novell GroupWise 8.0 before 8.0.3 HP2 and 2012 before SP1 HP1 allows remote attackers to execute arbitrary co…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Novell Groupwise Client - 'gwcls1.dll' ActiveX Remote Code Execution (Metasploit)2013-02-12 · remote · windows · Verified
Impact
An ActiveX control in gwcls1.dll in the client in Novell GroupWise 8.0 before 8.0.3 HP2 and 2012 before SP1 HP1 allows remote attackers to execute arbitrary code via (1) a pointer argument to the SetEngine method or (2) an XPItem pointer argument to an unspecified method.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Novell | Groupwise | Versions 8.0, 8.00, 8.01, 8.02, 8.03, 2012 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.novell.com/support/kb/doc.php?id=7011688
- http://www.zerodayinitiative.com/advisories/ZDI-13-008/
- https://bugzilla.novell.com/show_bug.cgi?id=712144
- https://bugzilla.novell.com/show_bug.cgi?id=743674
- http://www.novell.com/support/kb/doc.php?id=7011688
- http://www.zerodayinitiative.com/advisories/ZDI-13-008/
- https://bugzilla.novell.com/show_bug.cgi?id=712144
- https://bugzilla.novell.com/show_bug.cgi?id=743674