CVE-2011-2220: Novell File Reporter

High severity, CVSS 10.0. EPSS: 16.1% chance of exploitation in the next 30 days.

Stack-based buffer overflow in NFREngine.exe in Novell File Reporter Engine before 1.0.2.53, as used in Novell File Reporter and other products, allows remote attackers to execute arbitrary code via a crafted RECORD element.

Affected products

• Novell File Reporter: any version
• Novell File Reporter Engine: up to and including 1.0.2.0

Published 2011-07-14. Last modified 2026-06-16.