EIP-2026-115966

This advisory details a Unicode stack overflow vulnerability in Novell GroupWise Messenger client <= 2.1.0, exploitable via a malformed nmx file. The vulnerability arises from unsafe usage of wsprintfW, allowing remote code execution when triggered through the 'nim' URL protocol.