PT-2011-3690
CVE-2011-2220
·
تاريخ النشر
2011-06-27
·
تاريخ التحديث
2018-10-09
الوصف من
CVSS 2.0
10
عاليةالمقاييسAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Novell File Reporter Engine versions prior to 1.0.2.53
Description
The issue is related to a stack-based buffer overflow in NFREngine.exe, which can be exploited by remote attackers to execute arbitrary code. This is achieved by sending a crafted RECORD element.
Recommendations
For versions prior to 1.0.2.53, update to version 1.0.2.53 or later to resolve the issue. As a temporary workaround, consider restricting access to the NFREngine.exe to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾