938 matches found
ZDI-07-006: Citrix Metaframe Presentation Server Print Provider Buffer Overflow Vulnerability
ZDI-07-006: Citrix Metaframe Presentation Server Print Provider Buffer Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-006.html January 24, 2007 -- CVE ID: CVE-2007-0444 -- Affected Vendor: Citrix -- Affected Products: Citrix Presentation Server 4.0 Citrix MetaFrame...
Citrix Metaframe Presentation Server / Javvin DiskAccess printer provider buffer overflow
Buffer overflow in cpprov.dll EnumPrintersW and OpenPrinter functions...
Stack overflow
Stack-based buffer overflow in the print provider library cpprov.dll in Citrix Presentation Server 4.0, MetaFrame Presentation Server 3.0, and MetaFrame XP 1.0 allows local users and remote attackers to execute arbitrary code via long arguments to the 1 EnumPrintersW and 2 OpenPrinter functions...
CVE-2007-0444
CVE-2007-0444 affects Citrix Presentation Server 4.0, Citrix MetaFrame Presentation Server 3.0, and Citrix MetaFrame XP 1.0. It is a stack-based/buffer overflow in the print provider library (cpprov.dll) that occurs when long arguments are passed to EnumPrintersW or OpenPrinter, allowing executio...
Citrix Metaframe Presentation Server Print Provider Buffer Overflow Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on systems with vulnerable installations of Citrix Presentation Server, Metaframe Presentation Server or MetaFrame XP. Authentication is not required to exploit this vulnerability. The specific flaw exists in a print provider...
CVE-2007-0444: Improper Restriction of Operations within the Bounds of a Memory Buffer
Stack-based buffer overflow in the print provider library cpprov.dll in Citrix Presentation Server 4.0, MetaFrame Presentation Server 3.0, and MetaFrame XP 1.0 allows local users and remote attackers to execute arbitrary code via long arguments to the 1 EnumPrintersW and 2 OpenPrinter functions...
Citrix Presentation Server Client wfica.ocx Buffer Overflow (CVE-2006-6334)
Citrix Presentation Server, a remote access application publishing product, is prone to a buffer overflow vulnerability. By convincing a user to visit a malicious Web page or open a malicious HTML, a remote attacker could cause the victim's system to execute arbitrary commands and take complete...
DSquare Exploit Pack: D2SEC_WFICA
Name| d2secwfica ---|--- CVE| CVE-2006-6334 Exploit Pack| D2ExploitPack Description| Citrix Metaframe Presentation Server Client - ActiveX Heap Overflow Notes|...
CVE-2006-6334
CVE-2006-6334 is a heap-based buffer overflow in the SendChannelData function of wfica.ocx, part of the Citrix Presentation Server Client for Windows, affected up to version 9.230. An attacker-controlled DataSize that is smaller than the Data buffer length can allow remote code execution when a u...
CVE-2006-6334: Undefined Security Weakness
Heap-based buffer overflow in the SendChannelData function in wfica.ocx in Citrix Presentation Server Client before 9.230 for Windows allows remote malicious web sites to execute arbitrary code via a DataSize parameter that is less than the length of the Data buffer...
Citrix Presentation Server client for Windows buffer overflow
Buffer overflow in Wfica.ocx ActiveX SendChannelData function...
Citrix Presentation Server Client 9.200 - WFICA.OCX ActiveX Component Heap Buffer Overflow Vulnerability
Citrix Presentation Server Client 9.200 WFICA.OCX ActiveX Component Heap Buffer Overflow Vulnerability. CVE-2006-6334. Remote exploit for windows platform source: http://www.securityfocus.com/bid/21458/info Citrix Presentation Server Client is prone to a heap buffer-overflow vulnerability because...
Microsoft PowerPoint未明代码执行漏洞
Microsoft PowerPoint是一款流行的图片展示应用程序。 Microsoft PowerPoint处理恶意PPT文件存在问题，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 Microsoft PowerPoint 2003 SP2及之前版本 http://www.microsoft.com/technet/security...
iDefense Security Advisory 11.09.06: Citrix Presentation Server 4.0 IMA Service Invalid Name Length DoS Vulnerability
Citrix Presentation Server 4.0 IMA Service Invalid Name Length DoS Vulnerability iDefense Security Advisory 11.08.06 http://labs.idefense.com/intelligence/vulnerabilities/ Nov 08, 2006 I. BACKGROUND Citrix Presentation Server is a product designed to allow remote access to applications over a...
CVE-2006-5821
Heap-based buffer overflow in the IMASECUREDecryptData1 function in ImaSystem.dll for Citrix MetaFrame XP 1.0 and 2.0, and Presentation Server 3.0 and 4.0, allows remote attackers to execute arbitrary code via requests to the Independent Management Architecture IMA service ImaSrv.exe with invalid...
CVE-2006-5821
CVE-2006-5821 affects Citrix MetaFrame XP 1.0/2.0 and Presentation Server 3.0/4.0. The flaw is a heap-based overflow in ImaSystem.dll’s IMA_SECURE_DecryptData1 during decryption of authentication data via the IMA service (ImaSrv.exe). An attacker can supply invalid size values through the IMA por...
Citrix Presentation Server IMA服务多个远程漏洞
Citrix Presentation Server允许用户通过网络远程访问应用程序。 Citrix Presentation Server的IMASECUREDecryptData1例程存在堆溢出漏洞。这个例程是在ImaSystem.dll中定义的，可通过监听于TCP 2512或2513端口的独立管理架构（IMA）服务（ImaSrv.exe）服务访问。这里所使用的加密方式是可逆的，依赖于用于表示报文大小和认证字符串偏移的一些32位字段。在解密认证数据过程中攻击者可以指定无效的大小，导致可利用的堆溢出。...
CVE-2006-5821: Undefined Security Weakness
Heap-based buffer overflow in the IMASECUREDecryptData1 function in ImaSystem.dll for Citrix MetaFrame XP 1.0 and 2.0, and Presentation Server 3.0 and 4.0, allows remote attackers to execute arbitrary code via requests to the Independent Management Architecture IMA service ImaSrv.exe with invalid...
CVE-2006-5861: Undefined Security Weakness
The Independent Management Architecture IMA service ImaSrv.exe in Citrix MetaFrame XP 1.0 and 2.0, and Presentation Server 3.0 and 4.0, allows remote attackers to cause a denial of service service exit via a crafted packet that causes the service to access an unmapped memory address and triggers ...
[Full-disclosure] iDefense Security Advisory 11.09.06: Citrix Presentation Server 4.0 IMA Service Invalid Name Length DoS Vulnerability
Citrix Presentation Server 4.0 IMA Service Invalid Name Length DoS Vulnerability iDefense Security Advisory 11.08.06 http://labs.idefense.com/intelligence/vulnerabilities/ Nov 08, 2006 I. BACKGROUND Citrix Presentation Server is a product designed to allow remote access to applications over a...