CVE-2011-2220 Stack-based buffer overflow in NFREngine.exe in Novell File Reporter Engine before 1.0.2.53, as used in Novell File Reporter and other products, allows remote attackers to execute arbitrary code via a...
HighCVSS 10.0
EPSS 16.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in NFREngine.exe in Novell File Reporter Engine before 1.0.2.53, as used in Novell File Reporter and other products, allows remote attackers to execute arbitrary code via a crafted RECORD element.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| novell file reporter engine | <= 1.0.2.0 | No fix listed |
| novell file reporter | All versions | No fix listed |
References
- download.novell.com
- 45065 third-party-advisory vendor-advisory
- 8305 third-party-advisory
- 1025722 vdb-entry
- 20110627 ZDI-11-227: Novell File Reporter Engine RECORD Tag Parsing Remote Code Execution Vulnerability mailing-list
- www.zerodayinitiative.com