Lucene search

MitreCVE-2007-6435

HistoryDec 18, 2007 - 8:46 p.m.

CVE-2007-6435

2007-12-1820:46:00

CWE-119

mitre

web.nvd.nist.gov

cve-2007-6435

buffer overflow

remote code execution

novell groupwise

nvd

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.7

Confidence

Low

EPSS

0.377

Percentile

97.3%

JSON

Stack-based buffer overflow in Novell GroupWise before 6.5.7, when HTML preview of e-mail is enabled, allows user-assisted remote attackers to execute arbitrary code via a long SRC attribute in an IMG element when forwarding or replying to a crafted e-mail.

Affected configurations

Nvd

Node

novellgroupwiseRange≤6.5.6

VendorProductVersionCPE
novellgroupwise*cpe:2.3:a:novell:groupwise:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
novell	groupwise	*	cpe:2.3:a:novell:groupwise::::::::

References

osvdb.org/40870

secunia.com/advisories/28102

securityreason.com/securityalert/3459

www.infobyte.com.ar/adv/ISR-16.html

www.securityfocus.com/archive/1/485100/100/0/threaded

www.securityfocus.com/bid/26875

www.securitytracker.com/id?1019101

www.vupen.com/english/advisories/2007/4273

exchange.xforce.ibmcloud.com/vulnerabilities/39032

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.7

Confidence

Low

EPSS

0.377

Percentile

97.3%

JSON

Related for CVE-2007-6435