Posted by ZDI Disclosures on Jun 27
ZDI-11-227: Novell File Reporter Engine RECORD Tag Parsing Remote Code Execution Vulnerability
http://www.zerodayinitiative.com/advisories/ZDI-11-227
June 27, 2011
— CVE ID:
CVE-2011-2220
— CVSS:
9.7, (AV:N/AC:L/Au:N/C:C/I:C/A:P)
— Affected Vendors:
Novell
— Affected Products:
Novell File Reporter
— TippingPoint(TM) IPS Customer Protection:
TippingPoint IPS customers have been protected against this
vulnerability by Digital Vaccine…
Source: ZDI-11-227: Novell File Reporter Engine RECORD Tag Parsing Remote Code Execution Vulnerability




