Novell File Reporter 'NFRAgent.exe' XML Parsing Buffer Overflow Vulnerability

  1. Network Vulnerabilities
  2. Buffer overflow
  3. Novell File Reporter 'NFRAgent.exe' XML Parsing Buffer Overflow Vulnerability
Summary
This host is installed with Novell File Reporter and is prone to buffer overflow vulnerability.
Impact
Successful exploitation could allow remote attackers to execute arbitrary code with SYSTEM privileges or cause denial of service. Impact Level: Application/System
Solution
Upgrade Novell File Reporter 1.0.2 or later, For updates refer to http://download.novell.com/Download?buildid=rCAgCcbPH9s~
Insight
The flaw exists within 'NFRAgent.exe' module, which allows remote attackers to execute arbitrary code via unspecified XML data to port 3037.
Affected
Novell File Reporter (NFR) before 1.0.2
References
Updated on 2015-03-25
Severity
High Severity
Classification
Related Vulnerabilities