CVE-2008-2703: Novell Groupwise Messenger

High severity, CVSS 10.0. EPSS: 61.1% chance of exploitation in the next 30 days.

Multiple stack-based buffer overflows in Novell GroupWise Messenger (GWIM) Client before 2.0.3 HP1 for Windows allow remote attackers to execute arbitrary code via "spoofed server responses" that contain a long string after the NM_A_SZ_TRANSACTION_ID field name.

Affected products

• Novell Groupwise Messenger: version 2.0 only; version 2.0.2 only; version 2.0.3 only

Published 2008-06-13. Last modified 2026-06-16.