Citrix XenApp / XenDesktop XML Service Heap Corruption

No description provided by source. n.runs AG http://www.nruns.com/ securityatnruns.com n.runs-SA-2011.002 28-Jul-2011 Vendor: Citrix, http://www.citrix.com Affected Products: XenApp and XenDesktop Affected Version: See the Citrix security bulletin 2 for a list Vulnerability: Heap Corruption in...

Citrix XenApp和XenDesktop XML Service interface远程代码执行漏洞

Citrix XenDesktop是Citrix公司一款桌面虚拟化的产品。Citrix XenApp Citrix Presentation Server）应用虚拟化技术实现了快速的应用交付。不需要在用户设备上单独安装或管理应用系统，这样就使应用的测试、部署、管理和支持变得更加简单，系统可以智能地根据用户、应用和位置自动匹配最佳的交付方式。 Citrix XenApp和XenDesktop的XML Service interface在实现上存在漏洞，远程未经认证的攻击者可以利用此漏洞在系统上执行任意代码。 Citrix Presentation Server 4.x Citrix...

XenApp / XenDesktop Heap Corruption

n.runs AG http://www.nruns.com/ securityatnruns.com n.runs-SA-2011.002 28-Jul-2011 Vendor: Citrix, http://www.citrix.com Affected Products: XenApp and XenDesktop Affected Version: See the Citrix security bulletin 2 for a list Vulnerability: Heap Corruption in Citrix XML Service Risk: HIGH Vendor...

Citrix XenApp / XenDesktop XML Service Heap Corruption

Exploit for windows platform in category dos / poc Vendor: Citrix, http://www.citrix.com Affected Products: XenApp and XenDesktop Affected Version: See the Citrix security bulletin 2 for a list Vulnerability: Heap Corruption in Citrix XML Service Risk: HIGH Vendor communication: 2011/04/26 Initia...

Citrix XenApp / XenDesktop Stack-Based Buffer Overflow

Exploit for windows platform in category dos / poc Vendor: Citrix, http://www.citrix.com Affected Products: XenApp and XenDesktop Affected Version: See the Citrix security bulletin 2 for a list Vulnerability: Stack-Based Buffer Overflow in Citrix XML Service Risk: HIGH Vendor communication:...

Citrix XenApp XenDesktop - Stack Buffer Overflow

Citrix XenApp XenDesktop - Stack Buffer Overflow n.runs AG http://www.nruns.com/ securityatnruns.com n.runs-SA-2011.001 28-Jul-2011 Vendor: Citrix, http://www.citrix.com Affected Products: XenApp and XenDesktop Affected Version: See the Citrix security bulletin 2 for a list Vulnerability:...

KLA10116 ACE vulnerability in Citrix

An unspecified vulnerability was found in Citrix XenApp & XenDesktop. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited from the network via a specially designed web site. Original advisories - Related products Citrix-XenApp CVE list...

CVE-2010-2990

Citrix Online Plug-in for Windows for XenApp & XenDesktop before 11.2, Citrix Online Plug-in for Mac for XenApp & XenDesktop before 11.0, Citrix ICA Client for Linux before 11.100, Citrix ICA Client for Solaris before 8.63, and Citrix Receiver for Windows Mobile before 11.5 allow remote attackers...

CVE-2010-2991

The IICAClient interface in the ICAClient library in the ICA Client ActiveX Object aka ICO component in Citrix Online Plug-in for Windows for XenApp & XenDesktop before 12.0.3 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted HTML...

Design/Logic Flaw

Citrix Online Plug-in for Windows for XenApp & XenDesktop before 11.2, Citrix Online Plug-in for Mac for XenApp & XenDesktop before 11.0, Citrix ICA Client for Linux before 11.100, Citrix ICA Client for Solaris before 8.63, and Citrix Receiver for Windows Mobile before 11.5 allow remote attackers...

CVE-2010-2991

The IICAClient interface in the ICAClient library in the ICA Client ActiveX Object aka ICO component in Citrix Online Plug-in for Windows for XenApp & XenDesktop before 12.0.3 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted HTML...

CVE-2010-2990

CVE-2010-2990 affects Citrix components (Citrix Online Plug-in for Windows/Mac XenApp & XenDesktop; ICA Client for Linux/Solaris; Citrix Receiver for Windows Mobile) with a heap offset overflow allowing remote arbitrary code execution via a crafted HTML, .ICA file, or ICA graphics packet. Affecte...

CVE-2010-2991

Affected software: Citrix ICA Client (ICA Client ActiveX Object ICO) in Citrix Online Plug-in for Windows, used with XenApp/XenDesktop, before 12.0.3. Vulnerability details: The IICAClient interface allows a crafted HTML document that triggers reading of a .ICA file, leading to remote code execut...

KLA10110 ACE vulnerability in Citrix

An unspecified vulnerability was found in Citrix products. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely at a point related to the ICA graphics packet via a specially designed HTML or ICA document. Original advisories...

CVE-2009-3936

CVE-2009-3555 is a TLS/SSL renegotiation vulnerability (renegotiation not properly associated with the existing connection) that can allow MITM attackers to insert data into HTTPS sessions. Public advisories show this issue across multiple open-source components and distributions, including pound...