CVE-2011-0994 Stack-based buffer overflow in NFRAgent.exe in Novell File Reporter (NFR) before 1.0.2 allows remote attackers to execute arbitrary code via unspecified XML data.
HighCVSS 10.0
EPSS 17.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in NFRAgent.exe in Novell File Reporter (NFR) before 1.0.2 allows remote attackers to execute arbitrary code via unspecified XML data.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| novell file reporter | <= 1.0.1 | No fix listed |
References
- download.novell.com patch
- 43975 third-party-advisory
- 8194 third-party-advisory
- 20110404 ZDI-11-116: Novell File Reporter Agent XML Parsing Remote Code Execution Vulnerability mailing-list
- 47144 vdb-entry
- 1025292 vdb-entry
- ADV-2011-0866 vdb-entry
- www.zerodayinitiative.com
- filereporter-nfragent-bo(66548) vdb-entry
- oval:org.mitre.oval:def:12064 signature vdb-entry