CVE-2010-2990

2010-08-1120:00:01

CWE-119

[email protected]

web.nvd.nist.gov

citrix

online plug-in

windows

mac

linux

solaris

xenapp

xendesktop

cve-2010-2990

remote code execution

security vulnerability

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.7 High

AI Score

Confidence

High

0.027 Low

EPSS

Percentile

90.6%

JSON

Citrix Online Plug-in for Windows for XenApp & XenDesktop before 11.2, Citrix Online Plug-in for Mac for XenApp & XenDesktop before 11.0, Citrix ICA Client for Linux before 11.100, Citrix ICA Client for Solaris before 8.63, and Citrix Receiver for Windows Mobile before 11.5 allow remote attackers to execute arbitrary code via (1) a crafted HTML document, (2) a crafted .ICA file, or (3) a crafted type field in an ICA graphics packet, related to a “heap offset overflow” issue.

Affected configurations

NVD

Node

citrixica_client_for_linuxRange≤11.0

citrixica_client_for_solarisRange≤8.62

citrixonline_plug-in_for_mac_for_xenapp_\&_xendesktopRange≤10.0

citrixonline_plug-in_for_windows_for_xenapp_\&_xendesktopRange≤11.1

citrixreceiver_for_windows_mobileRange≤11.0

CPENameOperatorVersion
citrix:ica_client_for_linuxcitrix ica client for linuxle11.0
citrix:ica_client_for_solariscitrix ica client for solarisle8.62
citrix:online_plug-in_for_mac_for_xenapp_\&_xendesktopcitrix online plug-in for mac for xenapp & xendesktople10.0
citrix:online_plug-in_for_windows_for_xenapp_\&_xendesktopcitrix online plug-in for windows for xenapp & xendesktople11.1
citrix:receiver_for_windows_mobilecitrix receiver for windows mobilele11.0

CPE	Name	Operator	Version
citrix:ica_client_for_linux	citrix ica client for linux	le	11.0
citrix:ica_client_for_solaris	citrix ica client for solaris	le	8.62
citrix:online_plug-in_for_mac_for_xenapp_\&_xendesktop	citrix online plug-in for mac for xenapp & xendesktop	le	10.0
citrix:online_plug-in_for_windows_for_xenapp_\&_xendesktop	citrix online plug-in for windows for xenapp & xendesktop	le	11.1
citrix:receiver_for_windows_mobile	citrix receiver for windows mobile	le	11.0