Novell Groupwise Client ActiveX Control Remote Code Execution Vulnerability

Release date:
Updated on: 2013-02-02

Affected Systems:
Novell Groupwise 8.x
Description:
--------------------------------------------------------------------------------
Bugtraq id: 57658
CVE (CAN) ID: CVE-2012-0439
 
Novell GroupWise is a cross-platform collaboration software.
 
GroupWise Client for Windows has an unknown details vulnerability in ActiveX controls. Remote attackers can exploit this vulnerability to execute arbitrary code.
 
<* Source: High-Tech Bridge Security Research Lab

Link: http://secunia.com/advisories/52031/
Http://www.novell.com/support/kb/doc.php? Id = 7011688
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:
 
Novell
------
Novell has released a Security Bulletin (7011688) and corresponding patches for this purpose:
 
7011688: GroupWise Client for Windows ActiveX Control Vulnerability
Link: http://www.novell.com/support/kb/doc.php? Id = 7011688