CVE-2008-2069

Novell GroupWise 7 - Buffer Overflow via Long Argument in mailto: URI

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2008-2069. PoCs published by Juan Yacubian.

AI-analyzed exploit summary This exploit demonstrates a buffer overflow vulnerability in GroupWise 7.0 via a malformed 'mailto' URI scheme. The PoC generates an HTML file with an iframe containing an overly long argument, which overwrites the EIP and can lead to arbitrary code execution.

Description

Buffer overflow in Novell GroupWise 7 allows remote attackers to cause a denial of service or execute arbitrary code via a long argument in a mailto: URI.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Juan Yacubian · textdoswindows
https://www.exploit-db.com/exploits/5515

This exploit demonstrates a buffer overflow vulnerability in GroupWise 7.0 via a malformed 'mailto' URI scheme. The PoC generates an HTML file with an iframe containing an overly long argument, which overwrites the EIP and can lead to arbitrary code execution.

Classification
Working Poc 90%
Attack Type
Rce
Complexity
Trivial
Reliability
Reliable
Target: GroupWise 7.0
No auth needed
Prerequisites: GroupWise 7.0 as default mail client · Victim to open the crafted HTML file
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (9)

Core 9
Core References
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/491594/100/0/threaded
Third Party Advisory third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/3847
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/491576/100/0/threaded
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/491376/100/0/threaded
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/28969
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1019942
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/42052
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2008/1393/references
Exploit, Third Party Advisory exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/5515

Scores

EPSS 0.3345
EPSS Percentile 98.2%

Details

CWE
CWE-119
Status published
Products (1)
novell/groupwise 7.0 (4 CPE variants)
Published May 02, 2008
Tracked Since Feb 18, 2026