CVE-2014-0610 : The client in Novell GroupWise before 8.0.3 HP4, 2012 before SP3, and 2014 befor

The client in Novell GroupWise before 8.0.3 HP4, 2012 before SP3, and 2014 before SP1 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (invalid pointer dereference) via unspecified vectors.

Published 2014-09-05 01:55:11

Updated 2025-04-12 10:46:41

Source MITRE

View at NVD, CVE.org

Vulnerability category: Execute codeDenial of service

Products affected by CVE-2014-0610

Novell » Groupwise » Update HP3
Versions up to, including, (<=) 8.03
cpe:2.3:a:novell:groupwise:*:hp3:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows
Novell » Groupwise » Version: 8.0
cpe:2.3:a:novell:groupwise:8.0:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows
Novell » Groupwise » Version: 8.00 Update HP1
cpe:2.3:a:novell:groupwise:8.00:hp1:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows
Novell » Groupwise » Version: 8.00 Update HP2
cpe:2.3:a:novell:groupwise:8.00:hp2:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows
Novell » Groupwise » Version: 8.02 Update HP2
cpe:2.3:a:novell:groupwise:8.02:hp2:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows
Novell » Groupwise » Version: 8.02 Update HP3
cpe:2.3:a:novell:groupwise:8.02:hp3:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows
Novell » Groupwise » Version: 8.03
cpe:2.3:a:novell:groupwise:8.03:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows
Novell » Groupwise » Version: 8.01
cpe:2.3:a:novell:groupwise:8.01:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows
Novell » Groupwise » Version: 8.01 Update HP
cpe:2.3:a:novell:groupwise:8.01:hp:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows
Novell » Groupwise » Version: 8.02
cpe:2.3:a:novell:groupwise:8.02:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows
Novell » Groupwise » Version: 8.02 Update HP1
cpe:2.3:a:novell:groupwise:8.02:hp1:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows
Novell » Groupwise » Version: 2012
cpe:2.3:a:novell:groupwise:2012:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows
Novell » Groupwise » Version: 8.00 Update HP3
cpe:2.3:a:novell:groupwise:8.00:hp3:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows
Novell » Groupwise » Version: 8.03 Update HP1
cpe:2.3:a:novell:groupwise:8.03:hp1:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows
Novell » Groupwise » Version: 2012 Update SP1
cpe:2.3:a:novell:groupwise:2012:sp1:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows
Novell » Groupwise » Version: 2012 Update SP2
cpe:2.3:a:novell:groupwise:2012:sp2:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows
Novell » Groupwise » Version: 8.03 Update HP2
cpe:2.3:a:novell:groupwise:8.03:hp2:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows
Novell » Groupwise » Version: 2014
cpe:2.3:a:novell:groupwise:2014:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows

Exploit prediction scoring system (EPSS) score for CVE-2014-0610

EPSS FAQ

7.01%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 91 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2014-0610

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
10.0	HIGH	AV:N/AC:L/Au:N/C:C/I:C/A:C	10.0	10.0	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete

References for CVE-2014-0610

http://www.securitytracker.com/id/1030802

Novell GroupWise Client for Windows Pointer Dereference Bugs Let Remote Users Execute Arbitrary Code - SecurityTracker
https://exchange.xforce.ibmcloud.com/vulnerabilities/95738

Novell GroupWise Client for Windows code execution CVE-2014-0610 Vulnerability Report
https://bugzilla.novell.com/show_bug.cgi?id=874533

Access Denied
http://www.novell.com/support/kb/doc.php?id=7015565

Security Vulnerability: GroupWise Client for Windows Remote Untrusted Pointer Dereference Vulnerabilities
Vendor Advisory

Jump to

Vulnerability Details : CVE-2014-0610

Products affected by CVE-2014-0610

Exploit prediction scoring system (EPSS) score for CVE-2014-0610

CVSS scores for CVE-2014-0610

References for CVE-2014-0610