CVE-2007-1041: Sandh News Rover

High severity, CVSS 9.3. EPSS: 6.9% chance of exploitation in the next 30 days.

Multiple stack-based buffer overflows in S&H Computer Systems News Rover 12.1 Rev 1 allow remote attackers to execute arbitrary code via a .nzb file with a long (1) group or (2) subject string.

Affected products

• Sandh News Rover: version 12.1 only

Published 2007-02-21. Last modified 2026-06-16.