Citrix Provisioning Services Arbitrary Code Execution Vulnerability

Citrix Provisioning Services enables the creation of a set of images that use streaming technology to transport physical and virtual servers, reducing storage requirements and enabling fast, consistent and reliable application deployment. An arbitrary code execution vulnerability exists in Citrix...

Citrix Provisioning Services 7.x < 7.12 Multiple Vulnerabilities (CTX219580)

The version of Citrix Provisioning Services running on the remote Windows host is either 7.x prior to 7.12 or 7.6 LTSR prior to 7.6.4 LTSR. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists due to an overflow condition caused by improper...

CVE-2016-9680

Citrix Provisioning Services before 7.12 allows attackers to obtain sensitive information from kernel memory via unspecified vectors...

CVE-2016-9679

Citrix Provisioning Services before 7.12 allows attackers to execute arbitrary code by overwriting a function pointer...

CVE-2016-9680

Citrix Provisioning Services before 7.12 allows attackers to obtain sensitive information from kernel memory via unspecified vectors...

CVE-2016-9679

Citrix Provisioning Services before 7.12 allows attackers to execute arbitrary code by overwriting a function pointer...

Buffer overflow

Buffer overflow in Citrix Provisioning Services before 7.12 allows attackers to execute arbitrary code via unspecified vectors...

Design/Logic Flaw

Citrix Provisioning Services before 7.12 allows attackers to obtain sensitive information from kernel memory via unspecified vectors...

CVE-2016-9678

Use-after-free vulnerability in Citrix Provisioning Services before 7.12 allows attackers to execute arbitrary code via unspecified vectors...

CVE-2016-9676

Buffer overflow in Citrix Provisioning Services before 7.12 allows attackers to execute arbitrary code via unspecified vectors...

CVE-2016-9677

Citrix Provisioning Services before 7.12 allows attackers to obtain sensitive kernel address information via unspecified vectors...

CVE-2016-9678

Use-after-free vulnerability in Citrix Provisioning Services before 7.12 allows attackers to execute arbitrary code via unspecified vectors...

CVE-2016-9677

Citrix Provisioning Services before 7.12 allows attackers to obtain sensitive kernel address information via unspecified vectors...

Information disclosure

Citrix Provisioning Services before 7.12 allows attackers to obtain sensitive kernel address information via unspecified vectors...

CVE-2016-9676

Buffer overflow in Citrix Provisioning Services before 7.12 allows attackers to execute arbitrary code via unspecified vectors...

Null pointer dereference

Citrix Provisioning Services before 7.12 allows attackers to execute arbitrary code by overwriting a function pointer...

Design/Logic Flaw

Use-after-free vulnerability in Citrix Provisioning Services before 7.12 allows attackers to execute arbitrary code via unspecified vectors...

CVE-2016-9680

Citrix Provisioning Services before 7.12 allows attackers to obtain sensitive information from kernel memory via unspecified vectors...

CVE-2016-9676

CVE-2016-9676 affects Citrix Provisioning Services prior to 7.12. The vulnerability is described as a buffer overflow in PVS that allows an unauthenticated, remote attacker to execute arbitrary code via unspecified vectors. The entry notes a network-exposed vector with low attack complexity and n...

CVE-2016-9677

Citrix Provisioning Services (PVS) prior to version 7.12 is affected by CVE-2016-9677, an information-disclosure vulnerability that allows an unauthenticated remote actor to obtain sensitive kernel address information via unspecified vectors. The impact is limited to confidentiality (Partial). Th...