CVE-2013-1085

CVE-2013-1085 describes a stack-based buffer overflow vulnerability in the nim: protocol handler of Novell GroupWise Messenger 2.04 and earlier, and Novell Messenger 2.1.x and 2.2.x before 2.2.2. This critical vulnerability, rated with a CVSS score of 9.3, allows remote attackers to execute arbitrary code by sending an import command with an overly long string in the filename parameter. While the EPSS score is relatively low, indicating a lower probability of exploitation, its FAUCET Risk Score of 93/100 highlights its severe potential impact. There is no known active exploitation, publicly available exploit code in Metasploit or ExploitDB, nor significant community discussion or media coverage surrounding this CVE.