CVE-2010-2991

Currently unrated

Key Information:

Vendor
Citrix
Status
Online Plug-in For Windows For Xenapp \& Xendesktop
Vendor
CVE Published:
11 August 2010

Summary

The IICAClient interface in the ICAClient library in the ICA Client ActiveX Object (aka ICO) component in Citrix Online Plug-in for Windows for XenApp & XenDesktop before 12.0.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted HTML document that triggers the reading of a .ICA file.

References

http://labs.idefense.com/intelligence/vulnerabilities/dis...
third-party-advisoryx_refsource_IDEFENSE
http://secunia.com/advisories/40821
third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/40819
third-party-advisoryx_refsource_SECUNIA

EPSS Score

2% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability Reserved

  • Vulnerability published

Collectors

NVD DatabaseMitre Database
.