CVE-2011-2220
Stack-based buffer overflow in NFREngine.exe in Novell File Reporter Engine before 1.0.2.53, as...
Stack-based buffer overflow in NFREngine.exe in Novell File Reporter Engine before 1.0.2.53, as used in Novell File Reporter and other products, allows remote attackers to execute arbitrary code via a crafted RECORD element.
Exploit likelihood
What each source reports
NVD Score used
Stack-based buffer overflow in NFREngine.exe in Novell File Reporter Engine before 1.0.2.53, as used in Novell File Reporter and other products, allows remote attackers to execute arbitrary code via a crafted RECORD element.
- Record
CVE-2011-2220- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Stack-based buffer overflow in NFREngine.exe in Novell File Reporter Engine before 1.0.2.53, as used in Novell File Reporter and other products, allows remote attackers to execute arbitrary code via a crafted RECORD element.
- Record
CVE-2011-2220- Updated
- 2026-11-02
EUVDEUVD-2011-2209 No score
Stack-based buffer overflow in NFREngine.exe in Novell File Reporter Engine before 1.0.2.53, as used in Novell File Reporter and other products, allows remote attackers to execute arbitrary code via a crafted RECORD element.
- Record
EUVD-2011-2209- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-5r2f-3mmm-6xmp No score
Stack-based buffer overflow in NFREngine.exe in Novell File Reporter Engine before 1.0.2.53, as...
Stack-based buffer overflow in NFREngine.exe in Novell File Reporter Engine before 1.0.2.53, as used in Novell File Reporter and other products, allows remote attackers to execute arbitrary code via a crafted RECORD element.
- Record
GHSA-5r2f-3mmm-6xmp- Weakness
- CWE-119
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2011-2220 is a high vulnerability (CVSS 10.0) in Novell File Reporter, published July 14, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 16.1%, the 96th percentile. No source names a fixed version.
References
download.novell.com/Download?buildid=leLxi7tQACs~
securityreason.com/securityalert/8305
secunia.com/advisories/45065
zerodayinitiative.com/advisories/ZDI-11-227
securitytracker.com/id?1025722
securityfocus.com/archive/1/518632/100/0/threaded
nvd.nist.gov/vuln/detail/CVE-2011-2220
github.com/advisories/GHSA-5r2f-3mmm-6xmp