Citrix Provisioning Services - Console Error During "Show Connected Devices"

While using the PVS console and right clicking on a PVS Server node to "show connected devices" or by right clicking on the vDisk and choosing "show usage" the console has been known to crash and not display the requested information. You may be presented with an error that the maximum size quota...

file: heap-based buffer overflow in cdf_read_property_info in cdf.c

cdfreadpropertyinfo in cdf.c in file through 5.37 does not restrict the number of CDFVECTOR elements, which allows a heap-based buffer overflow 4-byte out-of-bounds write...

PT-2021-27794

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ crash occurred, involving the functions cdf read property info, cdf unpack summary info, and cdf check summary info...

file:magic_fuzzer: Heap-buffer-overflow in cdf_read_property_info

Project: https://github.com/file/file.git Detailed Report: https://oss-fuzz.com/testcase?key=5226450584731648 Project: file Fuzzing Engine: honggfuzz Fuzz Target: magicfuzzer Job Type: honggfuzzasanfile Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x615000000f00 Crash...

PT-2021-27769

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type of UNKNOWN READ. The crash state involves several function calls, including cdf read property info, cdf unpack summary...

file:magic_fuzzer: Crash in cdf_read_property_info

Project: https://github.com/file/file.git Detailed Report: https://oss-fuzz.com/testcase?key=5677554623709184 Project: file Fuzzing Engine: libFuzzer Fuzz Target: magicfuzzer Job Type: libfuzzerasani386file Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x02353d80 Crash State:...

Citrix Provisioning Services - Target Device(s) Hang After 96 Hours With No PVS License

After a license server upgrade to support PVS 1912 LTSR from 7.15 LTSR Target Devices may immediately report entering "grace period". After 96 hours of uptime the Target Device may appear to freeze. Target Device hangs or freezes are typically first found in the Studio console by a CVAD...

DEBIAN-CVE-2009-0948

Multiple buffer overflows in the 1 cdfreadsat, 2 cdfreadlongsectorchain, and 3 cdfreadssat function in file before 5.02...

DEBIAN-CVE-2009-0947

Multiple integer overflows in the 1 cdfreadpropertyinfo and 2 cdfreadsat functions in file before 5.02...

Mobile Viewpoint Wireless Multiplex Terminal: Input validation error vulnerability

The Mobile Viewpoint Wireless Multiplex Terminal is a wireless multiplexing technology based device from Mobile Viewpoint in the Netherlands that increases bandwidth. The device can bundle multiple wireless networks to increase bandwidth and provide users with high quality video. An input...

PT-2021-27405

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read, as indicated by a crash report. The crash involves functions such as cdf file property info, cdf fil...

How to collect logs for Citrix Workspace App for Windows

This article is intended for Citrix administrators and technical teams only.Non-admin users must contact their company’s Help Desk/IT support team and can refer toCTX297149for more information This article describes the steps for collecting logs and key data from Citrix Workspace app for Windows...

Citrix Scout

NOTE: The latest version of Scout 3.x is intended to be run on Citrix Virtual Apps and Desktops 7.14 and newer. For additional information, please refer to Citrix Product Documentation You can download the required file from the Citrix downloads website by visiting the following...

CDFMarker On Demand - For XenApp and XenDesktop

Created: March 2010 Modified: October 2010 Where to download ? Certain legacy Citrix tools are now available on request only. Please submit the request here - https://forms.gle/obA39PEz5qpDiSPq8 Once we verify your request, we will provide access to the download location. Description CDFMarker is...

Persistent CDF Tracing Enabler - For Citrix Windows Receiver

Persistent CDF Tracing Enabler - For Citrix Windows Receiver Created Date: July 2014 Where to download ? Certain legacy Citrix tools are now available on request only. Please submit the request here - https://forms.gle/obA39PEz5qpDiSPq8 Once we verify your request, we will provide access to the...

PT-2020-21804

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow WRITE 4 crash has been reported. The crash involves the functions cdf read property info, cdf unpack summary info, and cdf file...

PT-2020-21756

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow crash. Technical details include the crash type being a Heap-buffer-overflow WRITE 4. The crash state involv...

Huawei EulerOS: Security Advisory for file (EulerOS-SA-2019-1424)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated file packages fix security vulnerability

Updated file packages fix security vulnerability: A buffer overflow was found in file which may result in denial of service or potentially the execution of arbitrary code if a malformed CDF Composite Document File file is processed CVE-2019-18218...

Debian: Security Advisory (DSA-4550-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...