CVE-2011-5012

CVE-2011-5012 describes a critical heap-based buffer overflow vulnerability in the Reflection FTP Client (rftpcom.dll), impacting Attachmate Reflection 2008, 2011 R1, 2011 R2, and Reflection Windows Client 7.2 SP1. This flaw allows remote, malicious FTP servers to execute arbitrary code on a vulnerable client by sending an excessively long directory name in response to a LIST command. With a CVSS score of 10.0, this vulnerability is easily exploitable over the network with low attack complexity and no authentication required, leading to complete compromise of confidentiality, integrity, and availability. While not listed on the KEV catalog or Hot List, public exploit code exists on ExploitDB, indicating its potential for exploitation, though it has received minimal community discussion or media coverage.