Stack-based buffer overflow in NFREngine.exe in Novell File Reporter Engine before 1.0.2.53 as used in Novell File Reporter and other products allows remote attackers to execute arbitrary code via a crafted RECORD element.