CVE-2009-3863

CVE-2009-3863 describes a buffer overflow vulnerability in the gxmim1.dll ActiveX control within Novell Groupwise Client version 7.0.3.1294. This flaw allows a remote attacker to trigger a denial of service, causing the application to crash, by providing an excessively long argument to the SetFontFace method. The vulnerability has a CVSS score of 5.0, indicating a medium severity, with a low attack complexity and no authentication required, leading to a partial impact on availability. While not listed on the KEV catalog or Hot List, a proof-of-concept exploit is publicly available on ExploitDB, though there is no evidence of active exploitation or significant community discussion.