Stack-based buffer overflow in NFRAgent.exe in Novell File Reporter (NFR) before 1.0.2 allows remote attackers to execute arbitrary code…

Description

Stack-based buffer overflow in NFRAgent.exe in Novell File Reporter (NFR) before 1.0.2 allows remote attackers to execute arbitrary code via unspecified XML data.

Scores

EPSS (exploitation in 30 days)

17.9% · top 2.8% of all CVEs (2 Nov 2026)

Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 10.0.

Weakness

• n/a
• CWE-119 (opens in a new tab)

Affected products

• n/a

  • affected n/a

References (10)

• 43975 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 1025292 (opens in a new tab)vdb-entryx_refsource_SECTRACKx_transferred
• 47144 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
• oval:org.mitre.oval:def:12064 (opens in a new tab)vdb-entrysignaturex_refsource_OVALx_transferred
• http://download.novell.com/Download?buildid=rCAgCcbPH9s~ (opens in a new tab)x_refsource_CONFIRMx_transferred
• ADV-2011-0866 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
• filereporter-nfragent-bo(66548) (opens in a new tab)vdb-entryx_refsource_XFx_transferred
• http://www.zerodayinitiative.com/advisories/ZDI-11-116/ (opens in a new tab)x_refsource_MISCx_transferred
• 8194 (opens in a new tab)third-party-advisoryx_refsource_SREASONx_transferred
• 20110404 ZDI-11-116: Novell File Reporter Agent XML Parsing Remote Code Execution Vulnerability (opens in a new tab)mailing-listx_refsource_BUGTRAQx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Record last updated 6 Aug 2024, 22:14 UTC.