Description
Stack-based buffer overflow in NFRAgent.exe in Novell File Reporter (NFR) before 1.0.2 allows remote attackers to execute arbitrary code via unspecified XML data.
References
- 43975 third-party-advisory
- 1025292 vdb-entry
- 47144 vdb-entry
- oval:org.mitre.oval:def:12064 vdb-entry signature
- http://download.novell.com/Download?buildid=rCAgCcbPH9s~
- ADV-2011-0866 vdb-entry
- filereporter-nfragent-bo(66548) vdb-entry
- http://www.zerodayinitiative.com/advisories/ZDI-11-116/
- 8194 third-party-advisory
- 20110404 ZDI-11-116: Novell File Reporter Agent XML Parsing Remote Code Execution Vulnerability mailing-list