CVE-2011-2592

CVE-2011-2592 concerns Citrix Access Gateway Plug‑in for Windows, specifically the nsepacom ActiveX control (nsepa.exe). The issue is a heap‑based buffer overflow in the StartEpa method when processing HTTP headers (CSEC) in vulnerable installations of the Plug‑in prior to 9.3-57.5 (9.x) and 10.0...

CVE-2011-2593

CVE-2011-2593 affects the Citrix Access Gateway Plug-in for Windows (nsepacom ActiveX control, nsepa.exe) StartEpa method. An integer overflow can be triggered by a crafted Content-Length HTTP header, leading to a heap-based buffer overflow and remote code execution. Affected versions are Citrix ...