Environment
GroupWise Client for Windows 8.0x up to and including 8.0.3 HP3
GroupWise Client for Windows 2012 up to and including 2012.0 SP2
GroupWise Client for Windows 2014 (initial release)
GroupWise Client for Windows 2012 up to and including 2012.0 SP2
GroupWise Client for Windows 2014 (initial release)
Situation
The GroupWise Client for Windows is vulnerable to multiple untrusted pointer dereference vulnerabilities, which could be exploited by a remote attacker to compromise a vulnerable workstation.
Resolution
To resolve this vulnerability, apply GroupWise 8.0.3 Hot Patch 4 (or later) or GroupWise 2012 SP3, or GroupWise 2014 SP1.
Previous versions of the GroupWise Client for Windows are likely also vulnerable but are no longer supported. Customers on earlier versions of GroupWise should, at a minimum, upgrade their GroupWise clients to version 8.0.3 HP4, 2012 SP3, or 2014 SP1 in order to secure their system.
This vulnerability was discovered and reported by Brian Mariani aka callAX
Novell bug 874533, CVE-2014-0610
Previous versions of the GroupWise Client for Windows are likely also vulnerable but are no longer supported. Customers on earlier versions of GroupWise should, at a minimum, upgrade their GroupWise clients to version 8.0.3 HP4, 2012 SP3, or 2014 SP1 in order to secure their system.
This vulnerability was discovered and reported by Brian Mariani aka callAX
Novell bug 874533, CVE-2014-0610
Status
Security AlertBug Number
874533