Description
Stack-based buffer overflow in NFREngine.exe in Novell File Reporter Engine before 1.0.2.53, as used in Novell File Reporter and other products, allows remote attackers to execute arbitrary code via a crafted RECORD element.
References
- http://download.novell.com/Download?buildid=leLxi7tQACs~
- 8305 third-party-advisory
- 45065 third-party-advisory
- http://www.zerodayinitiative.com/advisories/ZDI-11-227
- 1025722 vdb-entry
- 20110627 ZDI-11-227: Novell File Reporter Engine RECORD Tag Parsing Remote Code Execution Vulnerability mailing-list