CVE-2011-0994

Novell File Reporter < 1.0.1 - Remote Code Execution via XML Data

Title source: llm
STIX 2.1

Description

Stack-based buffer overflow in NFRAgent.exe in Novell File Reporter (NFR) before 1.0.2 allows remote attackers to execute arbitrary code via unspecified XML data.

References (10)

Core 10
Core References
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/43975
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1025292
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/47144
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12064
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2011/0866
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/66548
Third Party Advisory x_refsource_misc
http://www.zerodayinitiative.com/advisories/ZDI-11-116/
Third Party Advisory third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/8194
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/517321/100/0/threaded

Scores

EPSS 0.2944
EPSS Percentile 96.7%

Details

CWE
CWE-119
Status published
Products (1)
novell/file_reporter < 1.0.1
Published Apr 10, 2011
Tracked Since Feb 18, 2026