Citrix Metaframe Presentation Server / Javvin DiskAccess printer provider buffer overflow

Buffer overflow in cpprov.dll EnumPrintersW and OpenPrinter functions...

ZDI-07-006: Citrix Metaframe Presentation Server Print Provider Buffer Overflow Vulnerability

ZDI-07-006: Citrix Metaframe Presentation Server Print Provider Buffer Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-006.html January 24, 2007 -- CVE ID: CVE-2007-0444 -- Affected Vendor: Citrix -- Affected Products: Citrix Presentation Server 4.0 Citrix MetaFrame...

Stack overflow

Stack-based buffer overflow in the print provider library cpprov.dll in Citrix Presentation Server 4.0, MetaFrame Presentation Server 3.0, and MetaFrame XP 1.0 allows local users and remote attackers to execute arbitrary code via long arguments to the 1 EnumPrintersW and 2 OpenPrinter functions...

CVE-2007-0444

CVE-2007-0444 affects Citrix Presentation Server 4.0, Citrix MetaFrame Presentation Server 3.0, and Citrix MetaFrame XP 1.0. It is a stack-based/buffer overflow in the print provider library (cpprov.dll) that occurs when long arguments are passed to EnumPrintersW or OpenPrinter, allowing executio...

Citrix Metaframe Presentation Server Print Provider Buffer Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on systems with vulnerable installations of Citrix Presentation Server, Metaframe Presentation Server or MetaFrame XP. Authentication is not required to exploit this vulnerability. The specific flaw exists in a print provider...

Citrix Presentation Server Client wfica.ocx Buffer Overflow (CVE-2006-6334)

Citrix Presentation Server, a remote access application publishing product, is prone to a buffer overflow vulnerability. By convincing a user to visit a malicious Web page or open a malicious HTML, a remote attacker could cause the victim's system to execute arbitrary commands and take complete...

DSquare Exploit Pack: D2SEC_WFICA

Name| d2secwfica ---|--- CVE| CVE-2006-6334 Exploit Pack| D2ExploitPack Description| Citrix Metaframe Presentation Server Client - ActiveX Heap Overflow Notes|...

CVE-2006-6334

CVE-2006-6334 is a heap-based buffer overflow in the SendChannelData function of wfica.ocx, part of the Citrix Presentation Server Client for Windows, affected up to version 9.230. An attacker-controlled DataSize that is smaller than the Data buffer length can allow remote code execution when a u...

Citrix Presentation Server client for Windows buffer overflow

Buffer overflow in Wfica.ocx ActiveX SendChannelData function...

Citrix Presentation Server Client 9.200 - WFICA.OCX ActiveX Component Heap Buffer Overflow Vulnerability

Citrix Presentation Server Client 9.200 WFICA.OCX ActiveX Component Heap Buffer Overflow Vulnerability. CVE-2006-6334. Remote exploit for windows platform source: http://www.securityfocus.com/bid/21458/info Citrix Presentation Server Client is prone to a heap buffer-overflow vulnerability because...

Microsoft PowerPoint未明代码执行漏洞

Microsoft PowerPoint是一款流行的图片展示应用程序。 Microsoft PowerPoint处理恶意PPT文件存在问题，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 Microsoft PowerPoint 2003 SP2及之前版本 http://www.microsoft.com/technet/security...

iDefense Security Advisory 11.09.06: Citrix Presentation Server 4.0 IMA Service Invalid Name Length DoS Vulnerability

Citrix Presentation Server 4.0 IMA Service Invalid Name Length DoS Vulnerability iDefense Security Advisory 11.08.06 http://labs.idefense.com/intelligence/vulnerabilities/ Nov 08, 2006 I. BACKGROUND Citrix Presentation Server is a product designed to allow remote access to applications over a...

CVE-2006-5821

Heap-based buffer overflow in the IMASECUREDecryptData1 function in ImaSystem.dll for Citrix MetaFrame XP 1.0 and 2.0, and Presentation Server 3.0 and 4.0, allows remote attackers to execute arbitrary code via requests to the Independent Management Architecture IMA service ImaSrv.exe with invalid...

CVE-2006-5821

CVE-2006-5821 affects Citrix MetaFrame XP 1.0/2.0 and Presentation Server 3.0/4.0. The flaw is a heap-based overflow in ImaSystem.dll’s IMA_SECURE_DecryptData1 during decryption of authentication data via the IMA service (ImaSrv.exe). An attacker can supply invalid size values through the IMA por...

Citrix Presentation Server IMA服务多个远程漏洞

Citrix Presentation Server允许用户通过网络远程访问应用程序。 Citrix Presentation Server的IMASECUREDecryptData1例程存在堆溢出漏洞。这个例程是在ImaSystem.dll中定义的，可通过监听于TCP 2512或2513端口的独立管理架构（IMA）服务（ImaSrv.exe）服务访问。这里所使用的加密方式是可逆的，依赖于用于表示报文大小和认证字符串偏移的一些32位字段。在解密认证数据过程中攻击者可以指定无效的大小，导致可利用的堆溢出。...

[Full-disclosure] iDefense Security Advisory 11.09.06: Citrix Presentation Server 4.0 IMA Service Invalid Name Length DoS Vulnerability

Citrix Presentation Server 4.0 IMA Service Invalid Name Length DoS Vulnerability iDefense Security Advisory 11.08.06 http://labs.idefense.com/intelligence/vulnerabilities/ Nov 08, 2006 I. BACKGROUND Citrix Presentation Server is a product designed to allow remote access to applications over a...

CVE-2006-4854

Rejected reason: Unspecified vulnerability in Microsoft Office 2000 Chinese Edition and Microsoft PowerPoint 2000 Chinese Edition allows user-assisted attackers to execute arbitrary code via a crafted PPT document, as exploited by malware such as Trojan.PPDropper.E. NOTE: on 20060919, Microsoft...

[NT] Citrix Presentation/MetaFrame Server Privilege Escalation

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

CVE-2006-4274

Rejected reason: Unknown vulnerability in Microsoft PowerPoint allows user-assisted attackers to execute arbitrary code via a crafted PPT document, as exploited by malware such as TROJMDROPPER.BH. NOTE: on 20060822, it was determined that TROJMDROPPER.BH was exploiting CVE-2006-0009, so this is n...

Microsoft Powerpoint Remote Code Execution Vulnerability

Description Microsoft PowerPoint is prone to a remote code-execution vulnerability. This issue occurs when the application handles malformed record data within a presentation file. A successful exploit of this issue will let attackers execute arbitrary code in the context of the targeted user...