CVE-2011-2220

Published: Jul 14, 2011Modified: Apr 29, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Stack-based buffer overflow in NFREngine.exe in Novell File Reporter Engine before 1.0.2.53, as used in Novell File Reporter and other products, allows remote attackers to execute arbitrary code via a crafted RECORD element.

Affected (2)

Products: Novell: File Reporter Engine, File Reporter

Novell

2 products

File Reporter Engine

File Reporter

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Novell File Reporter Engine	Up to 1.0.2.0
Novell File Reporter	All versions

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (12)

http://download.novell.com/Download?buildid=leLxi7tQACs~

Source: cve@mitre.org

http://secunia.com/advisories/45065

Source: cve@mitre.org

Vendor Advisory

http://securityreason.com/securityalert/8305

Source: cve@mitre.org

http://securitytracker.com/id?1025722

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/518632/100/0/threaded

Source: cve@mitre.org

http://www.zerodayinitiative.com/advisories/ZDI-11-227

Source: cve@mitre.org

http://download.novell.com/Download?buildid=leLxi7tQACs~