CVE-2010-4325: Novell Groupwise

High severity, CVSS 10.0. EPSS: 9.5% chance of exploitation in the next 30 days.

Buffer overflow in gwwww1.dll in GroupWise Internet Agent (GWIA) in Novell GroupWise before 8.02HP2 allows remote attackers to execute arbitrary code via a crafted TZID variable in a VCALENDAR message.

Affected products

• Novell Groupwise: up to and including 8.0.2; version 4.1 only; version 4.1a only; version 5.0 only; version 5.1 only; version 5.2 only; …

Published 2011-01-28. Last modified 2026-06-16.