CVE-2016-5762

CVE-2016-5762 describes an integer overflow vulnerability in the Post Office Agent of Novell GroupWise versions prior to 2014 R2 Service Pack 1 Hot Patch 1. This flaw allows remote attackers to execute arbitrary code by supplying an excessively long username or password, leading to a heap-based buffer overflow. With a CVSS score of 9.8 (Critical), this vulnerability is easily exploitable over the network with no user interaction, potentially resulting in complete compromise of confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, its high FAUCET Risk Score and media coverage indicate significant concern, though no public exploit code or active exploitation has been confirmed.