The client in Novell GroupWise before 8.0.3 HP4 2012 before SP3 and 2014 before SP1 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (invalid pointer dereference) via unspecified vectors.