TITLE:
Groupmax Mail Client Attachment Filename Handling Weakness

SECUNIA ADVISORY ID:
SA19840

VERIFY ADVISORY:
http://secunia.com/advisories/19840/

CRITICAL:
Not critical

IMPACT:
DoS

WHERE:
>From remote

SOFTWARE:
Groupmax World Wide Web Desktop 5.x
http://secunia.com/product/4333/
Groupmax World Wide Web 3.x
http://secunia.com/product/4332/
Groupmax World Wide Web 2.x
http://secunia.com/product/4331/
Groupmax Mail 7.x
http://secunia.com/product/6160/
Groupmax Mail 6.x
http://secunia.com/product/6159/
Groupmax Integrated Desktop Version 7.x
http://secunia.com/product/9565/
Groupmax Integrated Desktop Version 6.x
http://secunia.com/product/9564/
Groupmax Integrated Desktop Version 5.x
http://secunia.com/product/9563/
Groupmax Integrated Desktop Version 3.x
http://secunia.com/product/9562/
Groupmax Integrated Desktop Version 2.x
http://secunia.com/product/9561/
Groupmax World Wide Web Desktop 6.x
http://secunia.com/product/4334/
Groupmax World Wide Web Desktop for Jichitai 6.x
http://secunia.com/product/4335/

DESCRIPTION:
A weakness has been reported in Groupmax Mail Client, which
potentially can be exploited by malicious people to cause a DoS
(Denial of Service).

The weakness is caused due to an error within the handling of email
attachments. This can be exploited to cause the mail client to stop
responding when the user opens an email attachment with a MS-DOS
device filename.

The weakness has been reported in the following products:
* Groupmax Integrated Desktop version 3, 5, 6, 7.
* Mail Client version 02-00 through 02-31-/E.
* GroupMail/Client(DOS/V) version 01-21-/C  through 01-21-/D.
* GroupMail/Client version 01-01 through 01-21-/G.
* Groupmax World Wide Web Desktop Version 2, 3, 5, 6.

SOLUTION:
Apply patches (see patch matrix in the vendor advisory).

PROVIDED AND/OR DISCOVERED BY:
Reported by vendor.

ORIGINAL ADVISORY:
http://www.hitachi-support.com/security_e/vuls_e/HS06-006_e/index-e.html

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------