The Citrix EPA ActiveX control (aka the "endpoint checking control" or CCAOControl Object) prior to 4.5.0.0 in npCtxCAO.dll in Citrix Access Gateway Standard Edition prior to 4.5.5 and Advanced Edition prior to 4.5 HF1 allows remote malicious users to download and execute arbitrary programs onto a client system.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
citrix access gateway |