What’s Vulnerable › Vulnerabilities

CVE-2012-4956

• Severity: critical (CVSS 10.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 37.7% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2012-11-18 · updated 2026-06-16
• Weakness: CWE-119

Description

Heap-based buffer overflow in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to execute arbitrary code via a large number of VOL elements in an SRS record.

Affected products

• Novell File Reporter: 1.0.2

References

• http://osvdb.org/87574
• http://www.kb.cert.org/vuls/id/273371
• https://community.rapid7.com/community/metasploit/blog/2012/11/16/nfr-agent-buffer-vulnerabilites-cve-2012-4959
• http://osvdb.org/87574
• http://www.kb.cert.org/vuls/id/273371
• https://community.rapid7.com/community/metasploit/blog/2012/11/16/nfr-agent-buffer-vulnerabilites-cve-2012-4959

Get alerted when CVE-2012-4956 or the next vulnerability affects your stack