CVE-2004-1077

CVE-2004-1077 affects Citrix Program Neighborhood Agent for Win32 (v8.00.24737 and earlier) and MetaFrame Presentation Server client for WinCE before 8.33. The root cause is a design/implementation flaw in the AppInStartmenu directive that lets a remote server supply a full UNC path, enabling arb...

CVE-2004-1077: Undefined Security Weakness

Citrix Program Neighborhood Agent for Win32 8.00.24737 and earlier and MetaFrame Presentation Server client for WinCE before 8.33 allows remote servers to create arbitrary shortcuts on the client via a full UNC path in the AppInStartmenu directive...