Multiple buffer overflows in gwwww1.dll in GroupWise Internet Agent (GWIA) in Novell GroupWise before 8.02HP allow remote attackers to execute arbitrary code via variables in a VCALENDAR message as demonstrated by a long (1) REQUEST-STATUS (2) TZNAME (3) COMMENT or (4) RRULE variable in this message.