CVE-2010-4712: Novell Groupwise

High severity, CVSS 10.0. EPSS: 6.9% chance of exploitation in the next 30 days.

Multiple stack-based buffer overflows in gwia.exe in GroupWise Internet Agent (GWIA) in Novell GroupWise before 8.02HP allow remote attackers to execute arbitrary code via a Content-Type header containing (1) multiple items separated by ; (semicolon) characters or (2) crafted string data.

Affected products

• Novell Groupwise: up to and including 8.0.2; version 4.1 only; version 4.1a only; version 5.0 only; version 5.1 only; version 5.2 only; …

Published 2011-01-31. Last modified 2026-06-16.