CVE-2010-4713

CWE-1893 documents3 sources
Severity
10.0CRITICAL
EPSS
10.4%
top 6.77%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Novell Groupwise
Timeline
PublishedJan 31
Latest updateMay 17

Description

Integer signedness error in gwia.exe in GroupWise Internet Agent (GWIA) in Novell GroupWise before 8.02HP allows remote attackers to execute arbitrary code via a signed integer value in the Content-Type header.

CVSS vector

AV:N/AC:L/C:C/I:C/A:CExploitability: 10.0 | Impact: 10.0

Affected Packages1 packages

▶NVDnovell/groupwise8.0.2+22

🔴Vulnerability Details

2
GHSA
GHSA-x5qr-8rcm-8f6h: Integer signedness error in gwia↗2022-05-17
▶
CVEList
CVE-2010-4713: Integer signedness error in gwia↗2011-01-31
▶
CVE-2010-4713 (CRITICAL CVSS 10) | Integer signedness error in gwia.ex | cvebase.io