CVE-2007-6435: Novell Groupwise

High severity, CVSS 9.3. EPSS: 6.6% chance of exploitation in the next 30 days.

Stack-based buffer overflow in Novell GroupWise before 6.5.7, when HTML preview of e-mail is enabled, allows user-assisted remote attackers to execute arbitrary code via a long SRC attribute in an IMG element when forwarding or replying to a crafted e-mail.

Affected products

• Novell Groupwise: up to and including 6.5.6

Published 2007-12-18. Last modified 2026-06-16.