Memory Corruption Vulnerability in Citrix ICA Client for Windows
CVE-2010-2991

Currently unrated

Key Information:

Vendor
Citrix
Status
Online Plug-in For Windows For Xenapp \& Xendesktop
Vendor
CVE Published:
11 August 2010

Summary

The vulnerability involves the IICAClient interface within the ICAClient library, specifically in the ICA Client ActiveX Object used in Citrix Online Plug-in for Windows. Attackers can exploit this flaw via a specially crafted HTML document that prompts the execution of a .ICA file, potentially leading to arbitrary code execution or causing a denial of service through memory corruption.

References

http://labs.idefense.com/intelligence/vulnerabilities/dis...
third-party-advisoryx_refsource_IDEFENSE
http://secunia.com/advisories/40821
third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/40819
third-party-advisoryx_refsource_SECUNIA

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.