KLA10110 ACE vulnerability in Citrix

An unspecified vulnerability was found in Citrix products. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely at a point related to the ICA graphics packet via a specially designed HTML or ICA document.

Original advisories

Citrix bulletin

Related products

Citrix-ICA-Clients

Citrix-XenApp

Citrix-Receiver-for-Windows

CVE list

CVE-2010-2990 critical

Solution

Update to latest version

Impacts

• ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

Affected Products

• Citrix Xenapp & Xendesktop Online plug-in versions 11.1 and earlier for WindowsCitrix Xenapp & Xendesktop Online plug-in versions 10.0 and earlier for MacOSCitrix ICA Client versions 11.0 and earlier for LinuxCitrix ICA Client versions 8.62 and earlier for SolarisCitrix Receiver versions 11.0 and earlier for Windows Mobile